Back to home

Privacy Policy

Last Updated: October 9, 2026

Mogul Bay LLC dba Mogul Body ("Mogul Body," "we," "us," or "our") respects your privacy. This Privacy Policy explains what personal information we collect, how we use it, and the choices you have. It applies to the Mogul Body website and app at mogulbody.fit (the "Service").

1. Information We Collect

  • Account information: name, email address, and authentication data when you register or sign in with Google.
  • Profile & body data: gender, age, height, weight, body-fat percentage, body measurements, and fitness goals you enter.
  • Activity data: workout logs, sets/reps/weight, food and meal logs, macros, personal records, and progress photos you upload.
  • Usage & device data: approximate location (by IP), device type, browser, and interaction events collected via analytics.
  • Payment data: when you buy tokens or a subscription, payment is processed by Stripe. We do not store your full card number — Stripe does.

2. How We Use Your Information

  • To create and manage your account and authenticate you.
  • To provide workout plans, nutrition tracking, weight forecasting, and progress analytics.
  • To recommend weights, workouts, and calorie targets based on your history.
  • To process payments and deliver purchased tokens or subscriptions.
  • To send service emails (welcome, re-engagement, rewards) and account notifications.
  • To improve the Service, fix bugs, and develop new features.
  • To comply with legal obligations and enforce our Terms.

3. Legal Bases for Processing (GDPR)

If you are in the EU/UK, we process your data under: (a) contract — to deliver the Service you signed up for; (b) consent — for marketing emails and non-essential analytics (you can withdraw consent at any time); (c) legitimate interests — to improve the Service and prevent abuse; and (d) legal obligation — to meet record-keeping or tax requirements.

4. How We Share Information

We do not sell your personal data. We share it only with:

  • Stripe — payment processing.
  • Google — authentication (Google Sign-In) and analytics/ads via Google Analytics and Google Ads.
  • Cloud & email providers — hosting, data storage, and transactional email delivery.
  • Authorities — when required by law or to protect our rights.

5. Cookies & Tracking

We use cookies and similar technologies for analytics (Google Analytics) and ad measurement (Google Ads conversion tracking). You can control cookies through your browser settings. We do not use cookies for essential functionality only where avoidable. EU/UK users: see the consent choices below.

6. Data Retention

We keep your data for as long as your account is active. When you delete your account, we erase your workouts, food logs, body measurements, personal records, tokens, and profile within 30 days. We may retain limited records for legal, tax, or fraud-prevention purposes.

7. Your Rights

Depending on where you live, you may have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete data.
  • Delete your account and data (in-app: Profile → Delete Account).
  • Export your data in a portable format (contact us).
  • Object to or restrict certain processing.
  • Withdraw consent for marketing emails at any time.
  • Opt out of the "sale" or "sharing" of personal data for cross-context behavioral advertising (CCPA). We do not sell your data; to opt out of ad personalization, use Google's ad settings or request it from us.

To exercise any right, email us at the address below. We will respond within 30 days.

8. Email Communications & Unsubscribe

You can opt out of marketing and re-engagement emails at any time by clicking the unsubscribe link in any email or visiting mogulbody.fit/unsubscribe. Account-security emails (password reset, verification) are not marketing and will still be sent.

9. Children's Privacy

The Service is not directed to children under 18. We do not knowingly collect data from anyone under 18. If you believe a minor has registered, contact us and we will delete the account.

10. Security

We use industry-standard measures to protect your data, including encryption in transit (TLS) and at rest, access controls, and row-level isolation so users can only access their own data. No method of transmission is 100% secure, but we work to protect your information.

11. International Transfers

Your data may be processed in the United States. For EU/UK users, we rely on Standard Contractual Clauses or equivalent safeguards for any transfer outside your region.

12. California Privacy Rights (CCPA)

California residents may request: the categories of personal information collected, the sources, the business purpose, and the third parties shared with. You may also request deletion of your personal information and opt out of any sale or sharing. We do not sell personal information. To submit a request, email us. You will not be discriminated against for exercising your rights.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy and updating the "Last Updated" date. Continued use after changes go live means you accept the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or want to exercise your rights, contact us at: