Privacy Notice

Version: 8 Feb 2026

This Privacy Notice explains how Mojo Innovation AG ("Mojo", "we", "us") processes personal data when you use evooia (the "Service"), including our website, web app, and mobile app.

Your Privacy, Our Priority

We are committed to protecting your personal data and respecting your privacy — whether you use evooia as an Individual (for example, as a client or patient) or as a Professional (for example, a clinic, practitioner, or other specialist) (collectively, "User"). This Privacy Policy outlines how we collect, use, disclose, and protect your information when you use the evooia mobile app and its related services (together, the "Service"). Please review this policy carefully to understand how we handle your personal data.

Data Controller & Processor

• Professionals (Data Controller): If you use the Service in connection with a Professional (e.g., a clinic/practitioner), that Professional is the Data Controller for any client/patient data (including health-related data) that is generated, uploaded, or shared through the Service. The Professional determines the purposes and means of processing in accordance with applicable laws.
• Individuals (standalone use): If you use the Service on your own (for example, by downloading the app and creating an account directly), Mojo Innovation AG acts as Data Controller for the personal data processed to provide and operate the Service for you (as described in this Privacy Policy).
• Individuals (used with a Professional): If you use the Service in connection with a Professional (for example, you are invited, linked, or otherwise associated with a Professional's account/workspace), the Professional is typically the Data Controller for personal data processed in that context, and Mojo Innovation AG acts as Data Processor on the Professional's behalf.
• Company (Processor / Provider): evooia (a product by Mojo Innovation AG, incorporated in Zurich, Switzerland) acts as Data Processor where it processes personal data on behalf of Professionals, and ensures appropriate technical and organizational safeguards.

1. Scope of This Privacy Policy

This Privacy Policy applies to information that we collect from Users (Individuals and Professionals) when they use the evooia mobile app and the related services required to operate it.

2. Data Collection and Use

What Data Do We Collect?

• Registration Information: We collect User name and email address to set up and manage User account, authenticate a User, and provide customer support.

  Legal basis: performance of contract and our legitimate interest in account security.

• Images and Associated Metadata: Individuals may capture "before/after" images and related metadata in the app. By default, these images are securely stored both on the Individual's device and in our encrypted cloud storage. This allows Individuals to access their images across devices and ensures secure backup.

  Individuals control how these images are shared:

  • Individuals may choose whether or not to authorize their Professional to view the stored images (where a Professional relationship exists).
  • Individuals may authorize a Professional to use selected images for educational purposes (e.g., explaining treatments to other Individuals).
  • Individuals may authorize the Company to use selected images to demonstrate the Service to potential Professionals.

  All such sharing requires the Individual's consent, which can be withdrawn at any time.

• Ratings and Feedback: We may ask the Individual to rate the app or care experience. If the Individual opts in, we'll publish the Individual's feedback (e.g. testimonials); otherwise it remains private between the Individual and respective Professional (if applicable).

  Legal basis: consent and legitimate interest.

• Messaging Data: When Individuals use our secure in-app chat, we collect the content of messages (text, images, attachments), timestamps, and sender/recipient identifiers. Where chat is used in connection with a Professional, this is processed on behalf of that Professional to facilitate communication and record-keeping.

  Legal basis: performance of contract and compliance with applicable data protection requirements.

• Diagnostics: We collect pseudonymized and/or aggregated crash reports and performance metrics to identify and fix bugs, optimize app stability, and tailor feature development.

  Legal basis: our legitimate interest in service quality.

3. Data Storage, Retention, and Security

On-Device Storage

• Images remain on the Individual's device until app deletion
• Local processing ensures data privacy
• Individuals have complete control over image sharing and deletion

Cloud Storage

• Swiss-based secure servers for stored data
• State-of-the-art encryption for all stored data
• Compliance with GDPR and Swiss data protection standards

Service Providers

We use established, industry-standard service providers to operate the Service (e.g., cloud hosting, email delivery, analytics, and push notification delivery). They process data only as necessary to provide their services to us and are bound by contractual data protection obligations.

Professional Access (Where Applicable)

• Encrypted data transmission to Professionals (where applicable)
• Authentication required for access to Individual's records
• Data remains stored on Microsoft Azure cloud hosted in Switzerland

Data Retention

We retain collected data only for as long as necessary to fulfill the purposes described in this Privacy Policy, or as required by law. The retention periods vary depending on the type of data:

• Registration Data: Retained for the duration of your account's existence and deleted upon account termination, unless otherwise required by legal obligations.
• On-Device Images: Stored locally on your device and remain until you delete them or uninstall the app. We do not retain these images on our servers unless explicitly shared.
• Images Authorized for Professional Access: Retained in accordance with applicable record-retention laws and professional guidelines (where applicable).
• Feedback and Ratings: Stored indefinitely to improve our services, unless you request their deletion.
• Usage Data and Diagnostics: Retained in pseudonymized and/or aggregated form for analytics, performance monitoring, and troubleshooting, without identifying individual users.

Data Security

• Encryption: All data transmitted to and from the app is encrypted.
• Secure Storage: Data is stored on Microsoft Azure servers in Switzerland, complying with GDPR and Swiss data protection laws.
• Access Controls: Strict authentication is required to access personal records within the Service.

4. How We Use Your Data

• Account Management: We use registration details to manage your account, provide core app functionalities, and offer customer support.
• Professional Support & Communication: Images, messages, and attachments shared by Individuals are securely transmitted to the Individual's Professional and its authorized staff (where applicable) to support treatment and care coordination.
• Service Improvement: We analyze pseudonymized and/or aggregated data (e.g., app usage frequency) to enhance functionality, fix issues, and improve your overall experience.
• Testimonials & Feedback: Individuals may be invited to rate the app or share feedback. We will request explicit consent before making any testimonial public. Without consent, feedback remains private and visible only to you and (where applicable) your Professional.
• Legal Compliance & Safety: We may process data to comply with legal requirements, enforce our terms, and prevent misuse or fraudulent activity.

We Do Not

• Sell Collected Data: We do not sell collected data to third parties for marketing or commercial purposes.
• Share Without Consent: We do not share collected data with third parties without explicit user consent, except as necessary to deliver our services or as required by law, as outlined in this Privacy Policy.

Control Over Collected Data

Users have certain rights regarding their collected data, subject to applicable laws and regulations:

• Access: Individuals may request access to the data collected about them, including registration information and images shared through the app.
• Rectification: Inaccurate or incomplete data can be corrected upon request.
• Erasure: Deletion of collected data, such as registration information or shared images, can be requested, subject to legal and contractual retention requirements.
• Withdrawal of Consent: Consent for data processing may be withdrawn at any time. This may affect access to certain app functionalities.

5. Analytics & Tracking

• App Analytics: We may use pseudonymized and/or aggregated analytics and performance data to understand app usage, improve stability, and develop features.
• Web Cookies: If you use our website or web app, essential cookies are required for login, security, and core functionality. Optional cookies (e.g., analytics) are used only if you opt in.

You may manage or disable non-essential cookies in your browser or device settings; doing so may affect functionality.

6. Updates to This Privacy Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated to you via either:

• Email Notification
• In-App Notification

The continued use of the app after changes signifies acceptance of the updated policy.

Contact Us

Your privacy is our priority. We are committed to safeguarding your personal data and being transparent about our data practices. If you have any questions or concerns, please do not hesitate to contact us.

• Email: info@evooia.com

Acknowledgment

By using evooia, you acknowledge and agree to this Privacy Notice.