moderatio

DRAFT This text is not final. The bracketed details are filled in before launch.

Privacy policy

Effective [launch date] · Version 1

Moderatio is an app for adults who like drinking and want to do less of it. To do that it has to keep a record of what you drink, which is health information. This policy says what we keep, why, who helps us, and what you can do about it. If anything here is unclear, write to privacy@moderatio.app.

Who we are

Moderatio is run by Moderatio LLC, [registered address, Wyoming, United States] ("we"). We decide how your information is used. Contact: privacy@moderatio.app. Representative in Thailand under the PDPA: [name and address, once appointed].

The short version

What we collect

Your account. Your email address, or the relay address Apple gives you if you use Sign in with Apple; a Google account id if you use Sign in with Google. Your storefront country and the date your account and free trial started.

Your drinking log. Each drink you log: what it was, its size and strength, when, and which night it belongs to; when nights start and end; your limits and the presets you choose; your regular drinks.

Your mornings. Your answer to the morning check-in (from Fresh to Wrecked) and the freezes and dry days worked out from it.

What you write. The occasion you pick or type when you start a night, and the reasons you give when you go past your line or start an extra night. Only you see them; they come back to you in the app.

Your weight (optional). If you turn on the tipsy-meter, your weight is stored and used only on your phone. It is not sent to us.

Your settings. Morning check-in time, weekday nights, whether to hide the session on the lock screen, and whether you share anonymous usage.

Your device. An id we make for each device, its platform (iPhone, Android or web), and when it last synced. On your phone we keep a local copy of your log so the app works offline.

Purchases. Whether you have Moderatio Plus, from which store, and when it renews or ends. We never see your card: Apple, Google or Paddle handle payment.

Drink suggestions. If you add a drink and choose "Suggest it for everyone", its name, kind, size and strength. If we publish it, it joins the shared drink list with no link to you.

Errors. When the app or our server breaks, an error report with technical details. We remove drink data, reasons, occasions, emails and tokens before it is sent.

Anonymous usage, only if you switch it on. Which screens you open and whether you look at or buy Plus, with an anonymous id that is not linked to your account.

Support. If you email us, your email and what you write.

On the web. moderatio.app uses only what it needs to keep you signed in. No advertising or tracking cookies.

Why we use it, and on what basis

We don't make decisions about you that have legal or similarly significant effects. The app's warnings, freezes and the "honest door" are suggestions based on your own numbers, and you decide what to do.

What we never do

We never sell your information, use it for advertising, share it with data brokers, employers or insurers, store your health data in iCloud, or use it to train AI models. We never show your reasons, occasions or weight on the lock screen, in widgets or on the screen you show someone.

Who helps us

We use a few companies to run Moderatio. They may only use your information to provide their service to us, under written contracts.

When you buy Moderatio Plus on moderatio.app, Paddle is the seller and handles your payment under its own privacy notice. Apple and Google do the same for purchases in the app. If the law requires it, or to protect someone's safety, we may disclose information to authorities; we will tell you unless we are not allowed to.

Where it's stored

Your account and log are stored with Cloudflare in data centres in the Asia-Pacific region. Requests between your phone and our server pass through Cloudflare's network and are handled in the data centre nearest you. Some of the companies above are in the United States or the United Kingdom. When information moves between countries we rely on the protections the law asks for, such as standard contractual clauses or certifications, and each company's contract with us.

How long we keep it

Your choices and rights

In the app: download all your data (Me › Your data › Download my data), change your settings, turn the tipsy-meter off (your weight is deleted), turn anonymous usage off, and delete your account (Me › Delete account). Without the app: moderatio.app/delete-account.

Depending on where you live, you also have the right to ask what we hold, correct it, delete it, receive it in a portable form, object to or restrict some uses, and withdraw consent at any time (withdrawing doesn't affect what we did before). Write to privacy@moderatio.app; we answer within 30 days and may ask you to confirm it's you from your account email. If we say no, we'll tell you why and how to appeal; write "Appeal" in the subject and someone not involved in the first answer will review it within 45 days.

You can also complain to a regulator: in Australia the Office of the Australian Information Commissioner (oaic.gov.au); in Thailand the Personal Data Protection Committee (pdpc.or.th); in the United States your state attorney general; elsewhere your local data protection authority.

US states with health data laws. If you live in Washington, Nevada or another state with a consumer health data law, our Consumer Health Data Privacy Policy at moderatio.app/health-data explains your rights in the terms those laws use.

Security

Data is encrypted in transit and at rest. Each request is checked against your account so no one else can read your log, and we test that on every change. Sign-in uses one-time links or Apple and Google sign-in, so we hold no passwords. No system is perfect; if a breach affects you, we will tell you and the regulators the law requires.

Lock screen and shared screens

During a night, your count and one line (for example "Two. Still cruising.") show on the lock screen, in the Dynamic Island or in an Android notification, so they can be seen by anyone holding your phone. Turn on Me › Hide on lock screen to stop that. Reasons, occasions, weight and the tipsy-meter never appear there.

Adults only

Moderatio is for adults: 18 and over, 20 in Thailand and Japan, 21 in the United States. We check your date of birth once and keep only that you passed. If we learn that someone under the age has an account, we delete it.

Not medical advice

Moderatio isn't a medical device and doesn't diagnose, treat, cure or prevent any condition. If you think you may be dependent on alcohol, talk to a doctor.

Changes

If we change this policy we'll update the date above. If a change affects how we use your health data, we'll ask for your consent again in the app before it applies.

Contact

Moderatio LLC, [address] · privacy@moderatio.app