Privacy Policy

1. Data Controller

MozakAI is responsible for processing personal data in connection with MozakAI. Contact: legal@mozakai.com

2. Categories of Data Collected

MozakAI may process the following types of data:

• Medical data (e.g., test results, health metrics)
• Token identifiers used for secure data extraction
• Device information (operating system, version) if necessary for functionality

In addition to local storage, MozakAI temporarily uploads user-provided medical data to servers hosted on Amazon Web Services (AWS) for automated processing.

3. Purpose of Processing

We process data for the following purposes:

• To extract, display, and store medical data locally on the user’s device
• To ensure security and proper functioning of MozakAI

4. Legal Basis

Processing of medical data is based on the explicit consent of the user (Art. 9(2)(a) GDPR).

5. Data Storage

Uploaded data is processed by the LLM and then automatically deleted from the AWS servers immediately upon completion of processing. Extracted values are stored locally on the user’s device only. We do not maintain backups or persistent storage of uploaded data on our servers.

6. Data Sharing

We do not share your personal data with third parties for independent purposes.

We use Amazon Web Services (AWS) as a data processor, bound by contractual agreements to process data only on our behalf and in accordance with GDPR.

• If hosted in the EU (e.g., AWS Frankfurt), data remains within the EEA.
• If hosted outside the EEA, we rely on Standard Contractual Clauses (SCCs) or equivalent safeguards.

7. Data Security

Data is encrypted during transmission (TLS). Uploaded data is deleted after processing is complete. Extracted data is stored only locally on your device.

8. Retention Period

Uploaded data exists only for the duration of processing and is permanently deleted immediately thereafter.

9. User Rights (GDPR)

Users have the right to:

• Access their personal data
• Rectify inaccurate data
• Erase their data (“right to be forgotten”)
• Restrict or object to processing
• Port their data to another service
• Withdraw consent at any time

Requests may be submitted to legal@mozakai.com.

10. Children’s Privacy

MozakAI is not intended for children under 18.

11. International Use

We apply GDPR-level protections for all users, within and beyond the European Union.

12. Changes to Policy

We may update this Privacy Policy. Users will be notified of significant changes through MozakAI.

13. Contact

For questions or privacy requests, contact us at legal@mozakai.com.