Privacy Policy

Last updated: March 20, 2026

Moonraker Labs, LLC ("we," "us," or "our") operates the Staq website and mobile application. This Privacy Policy explains what information we collect, how we use it, and your choices.

1. Information We Collect

Account data

• Name and email address
• Authentication credentials via Apple Sign-In or Google Sign-In

Health and fitness data

• Body metrics such as weight, height, age, and sex
• Food intake and macro tracking logs (calories, protein, carbs, fat)
• Workout logs including exercises, sets, reps, and weights
• GLP-1 medication status (if you choose to enable GLP-1 mode)

Photos

• Food photos you submit for AI-powered nutritional analysis

Device data

• Crash logs and diagnostics collected automatically to improve app stability

Waitlist data (website only)

• Email address, when you sign up for our waitlist

2. How We Use Your Information

• Provide and personalize your nutrition and training experience
• Calculate your macro targets and adjust them based on training activity
• Generate workout programs tailored to your goals, equipment, and schedule
• Analyze food photos to estimate nutritional content
• Send push notifications (post-workout protein reminders, nutrition nudges)
• Diagnose crashes and improve app performance
• Send waitlist and product launch notifications

We will not sell, rent, or share your personal information with third parties for marketing purposes.

3. Data Shared with Third Parties

We share data with the following service providers solely to operate the app. These providers process data on our behalf and are not permitted to use it for their own purposes.

• OpenAI — food photos and text descriptions are sent to OpenAI's API for nutritional analysis and workout program generation. OpenAI's API data usage policy applies.
• Supabase — serves as our backend database and authentication provider. Your account data, fitness data, and workout logs are stored in Supabase.
• Firebase (Google) — used to deliver push notifications to your device. Firebase receives your device token and notification content.
• Expo/EAS — our app build and update platform. Crash logs and diagnostics are sent to Expo for stability monitoring.
• Formspree — processes waitlist signups on our website. Formspree receives your email address to deliver it to us.

4. In-App Purchases

Subscriptions and purchases are handled entirely by Apple (App Store) or Google (Google Play). We do not process or store your payment information. Your purchase history is managed by Apple or Google according to their respective privacy policies.

5. Data Retention

We retain your data for as long as your account is active or as needed to provide you with our services. If you delete your account, we will delete your personal data within 30 days, except where we are required by law to retain it.

6. Data Deletion

You can request deletion of your account and all associated data at any time by:

• Using the "Delete Account" option in the app settings
• Emailing us at admin@moonrakerlabs.com

Upon receiving a deletion request, we will permanently delete your account data, health and fitness data, food photos, and workout logs within 30 days. Some data may be retained in encrypted backups for up to 90 days before being purged.

7. Data Security

We use industry-standard security measures to protect your data, including encryption in transit (TLS) and at rest. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

8. Children's Privacy

Staq is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us so we can delete it.

9. Your Privacy Rights

California residents (CCPA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, and disclose about you
• Request deletion of your personal information
• Opt out of the sale of your personal information — we do not sell your personal information
• Not be discriminated against for exercising your privacy rights

European residents (GDPR)

If you are located in the European Economic Area, you have the right to:

• Access and receive a copy of your personal data
• Rectify inaccurate personal data
• Request erasure of your personal data
• Restrict or object to our processing of your personal data
• Data portability — receive your data in a structured, machine-readable format

To exercise any of these rights, contact us at admin@moonrakerlabs.com. We will respond to your request within 30 days.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. If we make material changes, we will notify you through the app or by email.

11. Contact Us

If you have questions about this Privacy Policy or want to exercise your privacy rights, contact us at admin@moonrakerlabs.com.