mique

Privacy Policy

Established: 10 October 2026

This English version is a reference translation. If it differs from the Japanese version, the Japanese version applies. Read the Japanese version

model.ai Inc. (“we”) sets out below how we handle users’ personal information in mique, a meal-logging app (“the app”).

1. Operator

Name
model.ai Inc. (model.ai株式会社)
Address
Miyamasuzaka Building 609, 2-19-15 Shibuya, Shibuya-ku, Tokyo, Japan
Representative
Ryuto Yokouchi, Representative Director
Contact
info@modelai.art

2. Information we collect

  • Account: a user ID and how you sign in. If you sign in with Apple, the identity information Apple issues (including your Apple account identifier and email address)
  • Connection records: the date and time, IP address, and device and app information of each sign-in and each request to our servers
  • Profile: sex, date of birth, height, activity level, maximum pace of weight loss, time zone, display language, the country whose dietary reference intakes apply, the country where you buy food, and units
  • Weight and body fat percentage, and the dates they were measured
  • Targets: starting weight, target weight, target date and pace of weight loss, and the calorie target, lower limit, nutrient targets and the basis of the calculation. If your targets are paused, the dates they were paused and resumed
  • Meal records: when you ate, which meal, photos, text you write, dish names, amounts, nutrition values, the range and confidence of estimates, and whether the AI or you entered them
  • Reflections: the text, the summary of the period it was based on (intake, days below the lower limit, change in weight and so on), advice shown, and its status (being written, or failed our checks)
  • Achievement records: the type and date of each achievement, the summary used when it was assessed (days below the lower limit, pace of weight loss, and share of days logged), and whether the celebration screen or a review request was shown and whether you shared it
  • Consent records: when you gave the consents described in section 4, to which version, and when data was last sent to the AI
  • Settings kept only on your device, such as the reminder time (not sent to our servers)

In the check before you start (whether you are pregnant or breastfeeding, have been treated for an eating disorder, or have been given dietary instructions by a doctor), which of these applies to you is neither stored nor sent. If you already have targets and answer that one applies, we keep only the fact that your targets were paused (the dates they were paused and resumed). The app contains no advertising, tracking or usage analytics.

3. Purposes of use

  • To store and show your meal and weight records
  • To calculate your calorie target and lower limit
  • To work out the dish and amount from photos or text you write (using AI; see section 4)
  • To write reflections (using AI; see section 4)
  • To show when your records have continued, and to send reminder notifications
  • To respond to enquiries
  • To prevent misuse and deal with faults
  • To comply with laws and regulations

4. Provision to companies outside Japan (outsourcing)

To provide the app, we outsource the handling of personal data to the following companies outside Japan. In the app, we ask for your consent before you start and before you first use AI.

Supabase Pte. Ltd. (Singapore)

  • Work outsourced: storing your account and records, including photos. The servers are in Japan (Tokyo)
  • What is kept: everything in section 2 except the settings kept only on your device

Personal information protection in Singapore

  • Singapore has a comprehensive personal information protection law, the Personal Data Protection Act (PDPA), in force since 2013, which applies to private-sector organisations.
  • Singapore does not have an EU adequacy decision. It joined the APEC Cross-Border Privacy Rules (CBPR) system in 2018.
  • Under the Criminal Procedure Code, the police can order businesses to produce information for investigations and similar purposes. No provisions have been identified for matters such as approval by an independent body.

Measures Supabase takes

  • Under its contract with us (terms of service and data processing addendum), Supabase handles the data only on our instructions, does not sell it or use it for other purposes, takes security measures such as encryption and access restrictions, notifies us of incidents such as leaks, and helps us respond to requests from you.
  • On the other hand, it may use aggregated or anonymised data created from the data we keep with it for its own purposes, and may provide such data to third parties.
  • We could not confirm any provision under which Supabase keeps the data accurate (we manage the content of your records).

650 Industries, Inc. (California, United States)

  • Work outsourced: running the app’s server (Expo’s EAS Hosting). Photos, text and reflection figures sent to the AI, the AI’s results (estimated dishes, portions and nutrition, and reflection text), and the Apple authorisation code used when you delete your account, pass through it. Reflection text that fails our checks is kept in the server’s logs. To confirm who is making each request, your sign-in credential (which includes your user ID and, if you signed in with Apple, your email address) is also sent to it. With every request, it also handles your IP address and the country, region, city, approximate location and time zone inferred from it, and device and app information

Personal information protection in the United States

  • At the federal level, the United States has no comprehensive personal information protection law. Instead it has laws for particular fields, such as electronic communications, financial institutions and health information.
  • California has a comprehensive law, the California Consumer Privacy Act (CCPA), which applies to businesses that meet certain conditions such as size. However, no provision corresponding to the Accountability Principle of the OECD Privacy Guidelines has been identified.
  • The United States does not have an EU adequacy decision. It joined the APEC Cross-Border Privacy Rules (CBPR) system in 2012.

Measures 650 Industries takes

  • We have no separate data processing agreement with 650 Industries; its terms of service and related documents apply.
  • It publishes security measures such as encryption, but we could not confirm provisions that apply to the app’s users’ data on limiting use to the stated purpose, responding to requests from you, or keeping the data accurate.
  • Its terms of service allow it to use and review content sent to its service in order to provide and improve the service. Logs of the server’s operation are kept on its service for 7 days.

OpenAI OpCo, LLC (California, United States)

  • Work outsourced: working out the dish and amount from photos or text, and writing reflections
  • What is sent: the photo or the text you write (and the display language); for reflections, the figures for that period (including intake, targets and change in weight). Account and profile information, such as your user ID, date of birth, sex and height, is not sent
  • If you do not agree to the use of AI, you can still record meals by searching the food composition tables or entering them yourself. You can withdraw your agreement at any time in the app’s Settings

Personal information protection in the United States

  • At the federal level, the United States has no comprehensive personal information protection law. Instead it has laws for particular fields, such as electronic communications, financial institutions and health information.
  • California has a comprehensive law, the California Consumer Privacy Act (CCPA), which applies to businesses that meet certain conditions such as size. However, no provision corresponding to the Accountability Principle of the OECD Privacy Guidelines has been identified.
  • The United States does not have an EU adequacy decision. It joined the APEC Cross-Border Privacy Rules (CBPR) system in 2012.

Measures OpenAI takes

  • Under its contract with us (services agreement and data processing addendum), OpenAI handles the data on our instructions and only to provide the service, does not use it to develop or improve its models without our consent, takes security measures such as encryption and access restrictions, binds its staff to confidentiality, notifies us of incidents such as leaks, and helps us respond to requests from you.
  • On the other hand, it may keep what is sent for up to 30 days (longer where required by law, for example) to monitor misuse.
  • We could not confirm any provision under which OpenAI keeps what is sent accurate.
  • We send data to OpenAI with a setting that does not let it store the responses.

The information about these systems is based on surveys published by the Personal Information Protection Commission of Japan (United States, Singapore; as of October 2021). Later amendments may not be reflected.

About visiting this site

This site (mique.app) is served by Vercel Inc. (United States). When you visit it, your IP address, browser information, the pages you view and similar information reach Vercel and are handled under its privacy notice. We do not link this to accounts in the app, and this site has no analytics.

5. Provision to third parties

Except where required by law, we do not provide personal data to third parties without your consent. Section 4 describes outsourcing of our own work.

6. Retention and deletion

  • We keep your records until you delete your account. “Delete account and records” in the app’s Settings deletes your account and all your records in the app (meal records, photos, weight records, targets, reflections, achievements and so on).
  • The consent records described in section 4 must be kept by law (Article 29 of the Act on the Protection of Personal Information), so we keep them for 3 years from the last provision and similar dates even after you delete your account, and then delete them.
  • What is sent to OpenAI may be kept by OpenAI for up to 30 days to monitor misuse. Logs of the app’s server operation are kept for 7 days.
  • The connection records described in section 2 are not erased when you delete your account. Supabase’s sign-in records (user ID, IP address and device information, including a record that the account was deleted) remain until we delete them. We plan to set a retention period and delete them accordingly, and will state it in this policy once set.

7. Security measures

  • Basic policy: we have set out and published this policy for the proper handling of personal data.
  • Handling rules: we have set out how personal data is collected, used, stored, provided and deleted, and who is responsible.
  • Organisational and personnel measures: we limit who handles personal data and check how it is handled.
  • Technical measures: communications are encrypted, and access is restricted per user on the database side. The app on your device holds no key that can reach the whole database.
  • Supervision of outsourcees: we check our outsourcees’ contracts and published measures (section 4).
  • Understanding the external environment: as described in section 4, we outsource to companies in Singapore and the United States. Having understood the personal information protection systems of those countries, we obtain consent, limit what is sent to what is needed (no user ID or profile is sent to OpenAI), and use a setting that does not let OpenAI store responses.

8. Requests for disclosure and other actions

To request notification of the purposes of use, disclosure, correction, addition or deletion, suspension of use or erasure, suspension of provision to third parties, or disclosure of records of provision to third parties for your retained personal data, please contact info@modelai.art. We will respond without delay after confirming your identity.

You can delete your account and records, and withdraw your agreement to the use of AI, at any time in the app’s Settings.

9. Age

The app is for people aged 18 and over.

10. Complaints and enquiries

For complaints or enquiries about how we handle personal information, please contact info@modelai.art.

11. Changes

If we change this policy, we will announce it on this page. If we change what is provided to companies outside Japan, we will ask for your consent again in the app.