Privacy Policy

• Your face is mapped on your own device. The facial landmark points never leave your browser.
• To score you, we send the measured ratios (numbers, not your photo) to our server.
• The AI skin, symmetry and definition checks send your front photo to a third-party AI provider. We don’t keep that copy, but the provider may use it to improve its AI services (see below).
• If you create an account, we store your email, your name if you give one, and the scans you save, including downscaled photos, so you can reopen them. You can delete any scan, or your whole account, at any time.
• We show ads inside the app, from Adsterra (and Google AdSense once approved), which use cookies. We don’t sell your data.

Photos you upload. Your photo is processed in your browser to find facial landmark points and measure facial ratios. When you’re signed in, the AI feature analysis sends a downscaled copy of your front photo through our server to a third-party AI provider and the scores come back to you; our server doesn’t store it. An optional side photo is measured entirely in your browser and is never sent to the AI provider. If you’re signed in, a downscaled copy of it is saved with your scan so you can reopen it, like your front photo. We currently use that provider’s free service, under which it may use the photos it receives to improve its products, and its trained reviewers may see them. If you don’t want that, don’t sign in to scan a photo; nothing is sent while you’re signed out. If you’re signed out, your photo is only checked for a face in your browser; nothing is measured or sent to us. It waits in your current browser tab until you sign in (when it’s scanned) and is gone if you close the tab.

Facial measurements. The measured ratios (for example, jaw angle or eye spacing, as numbers) are sent to our server so it can calculate your scores. They’re used only to produce your report. We don’t use them, or your photos, to identify you or to recognize you across photos. Because facial geometry can count as biometric data, we ask for your explicit consent, by tapping the agree button, before any photo is analyzed, and you can withdraw it by deleting your scans or account.

Account details. If you sign up, we store your email address, a name if you choose one, and a securely hashed password, or your Google account email if you sign in with Google. We use these to run your account and to send account emails such as confirmation and password reset. If you answer “What brought you here?” during setup, we keep that answer on your account too, so we can see which channels bring people in. It’s optional and you can skip it.

Saved scans. Signed in, each scan you complete is saved to your account: the measurements, the scores, and downscaled copies of the photos it was measured from. That lets you reopen past scans, track progress and compare them on any device.

Axiom chat. When you message the Axiom coach, your message, recent conversation and the scores from your latest report are sent to a third-party AI provider to write the reply, under the same free-service terms as the photo analysis above. Your photos are not sent. Each account can send 2 Axiom messages per rolling week, and we count them to apply that limit.

Usage counts. For signed-in accounts we record how many analyses and AI requests you make, so we can apply the limits that keep the service running.

Technical data. Like any website, our hosting provider receives your IP address and basic request details (browser type, pages requested) when you visit. We use this to deliver the site, prevent abuse and fix problems. For signed-in accounts we also keep a general device and browser type on the account (for example “iPhone, Safari”), so we can see which devices to support.

Necessary. If you sign in, we set cookies that keep you signed in. The site also keeps a few items in your browser’s storage: the report open in your current tab (and, if you’re signed out, that scan waiting to be saved when you sign in), your photo-analysis consent, your plan checklist, your chosen focus areas, how you sort measurements, and whether you’ve dismissed a notice. These stay on your device.

Advertising. We show ads inside the app (not on the home page). They’re currently served by Adsterra, and we plan to add Google AdSense. Ad networks and their partners use cookies and similar technology to show ads based on your visits to this and other websites, and to measure ad performance. Ads load in a separate, walled-off frame, so ad code can’t read your account or your scans. For Adsterra, see adsterra.com/privacy-policy. For Google, you can turn off personalized ads at adssettings.google.com, and learn more at policies.google.com/technologies/ads. When you hit a daily or weekly limit, you can choose to watch a short rewarded ad from Google for an extra scan or Axiom messages; we record that you earned the reward, nothing else about the ad. You can also block or delete cookies in your browser settings. We don’t sell your personal information for money; under some US state laws (such as California’s), letting ad networks show ads based on your browsing counts as “sharing”. To limit it, block third-party cookies in your browser, or email us and we’ll tell you what else we can do.

Ad-blocker check. On pages that show ads, the site checks whether an ad blocker is active and, if so, asks you to allow ads before continuing. The result isn’t stored or sent to us.

We use these services to run Moggler Labs. Each handles data only to provide its service to us:

• Cloudflare: hosting and network delivery (receives IP addresses and request data).
• Supabase: account sign-in and the database that stores accounts and saved scans.
• Google (Gemini API): the AI feature analysis of your front photo and the Axiom coach’s replies, processed under Google’s API terms for its free service, which allow Google to use it to improve its products.
• Resend: sends account emails (sign-up confirmation, password reset), so it receives your email address.
• Adsterra, and later Google (AdSense): advertising, as described above.
• Discord (optional): if you link Discord on your account page, we store your Discord user ID and display name, add you to our Discord server, and give you a role named after your latest scan’s tier. The role is visible to members of that server. Unlinking or deleting your account removes the role and the link.
• Google (Sign-in and Fonts): optional Google sign-in, and the web fonts the site uses (your browser requests them from Google).

We don’t sell your personal information, and we don’t share it with anyone else unless the law requires us to.

Saved scans stay on your account until you delete them. Your account details stay until you delete your account. Deleting your account permanently deletes your account and every scan saved with it. Scans made while signed out are never sent to us, and disappear when you close the tab. Usage counts for an account are kept with the account and deleted with it.

• Delete a scan from History or your Dashboard.
• Delete all scans, or your whole account, from the Account page.
• Try it without an account: signed out, your photo is only checked for a face on your device; nothing is scored, sent or saved until you sign in.
• Clear browser data from Options, or your browser settings, to remove what’s stored on your device.

Depending on where you live (for example under the GDPR in Europe and the UK, or US state privacy laws), you may have the right to access, correct, delete or export your data, to object to or restrict processing, and to withdraw consent. To make a request, email [email protected]. We’ll reply within 30 days. If you’re not happy with our answer, you can complain to your local data protection authority; in Australia that’s the Office of the Australian Information Commissioner (oaic.gov.au).

Where the law asks for a legal basis, we rely on: providing the service you asked for (your analysis and account), your consent (uploading your photo, and personalized ads where required), and our legitimate interest in keeping the service secure and working.

Data is sent over encrypted connections (HTTPS). Passwords are stored hashed, never in plain text, and each account can only read its own scans. No system is perfectly secure, but we work to protect your data and will let affected users know about a breach where the law requires it.

Moggler Labs is intended for people aged 18 and over. We don’t knowingly collect data from children. If you believe a child has used the service, contact us and we’ll delete their data.

We’re based in Australia, and the services above may process data in other countries, including the United States and countries in Europe. Where required, those transfers are covered by the providers’ standard contractual safeguards. By using the service you understand your data may be handled overseas, where privacy laws may differ from Australia’s.

If we change this policy, we’ll update the date at the top. If a change is significant, we’ll show a notice on the site.

Using Moggler Labs is also covered by our Terms of Service.

Questions or requests: [email protected]