Privacy Policy

Who is responsible for your data

Tomarange S.L., a company incorporated in Spain, is the data controller for personal information collected through the MoKlip website.

Trust and data protection commitment

"Trustworthy" is one of MoKlip’s four enduring product principles. Alongside optional waitlist subscriptions and product-research preferences, the broader MoKlip product ecosystem is designed with cybersecurity and data protection as fundamental requirements. We are committed to making only validated claims and protecting user data.

Information we collect

We collect information you provide when you sign in, customize or save a MoKlip, join the waitlist or contact us. This may include your email, selected measurement interests, button color, uploaded images, design instructions and saved designs. The sections below explain each use.

The virtual experience uses simulated results; it does not collect measurements from your body. Measurement interests are product preferences, not health readings. Please do not submit medical histories, diagnoses, payment details or other sensitive information in design instructions, uploads or forms.

Contact enquiries

When you contact us, we store your name, email address, optional company, topic, subject and message privately to respond to your enquiry and handle delivery problems. Our mail service sends a notification to the support inbox and an acknowledgement to your email address. Your message is not published or included in website analytics. Contacting us does not create an account or subscribe you to the waitlist.

Please do not include passwords, payment details or medical information. Contact us at the address below to request correction or deletion of an enquiry.

Careers pages let you apply by email. If you send a CV, portfolio or application, we use those materials and your contact details to assess your application and communicate with you about that role. Applications are not waitlist subscriptions.

Design preferences and private saving

The customizer stores your selected measurement dimensions, appearance, optional front-shell print and placement. Your active draft and conversation are cached in this browser so you can return to unfinished work. The MoKlip service also stores drafts, uploaded and generated images, and saved revisions privately.

Guests can keep an unfinished draft in this browser. A verified account is required to save designs or use preview sharing. Signing in connects this browser’s draft to your account. Access is restricted to the owner’s session and authorized staff whose roles require it for support, operations or product review. Designs are not a public gallery. If you choose to share or download a preview, only the rendered image is exported, without your account details, conversation or measurement preferences. The chosen social platform’s privacy rules apply to anything you post there.

Clearing guest cookies can make anonymous designs inaccessible to you; it does not erase server records. Start over resets the current appearance to a white shell, green button and no selected print. It preserves measurement interests, conversation, available outputs and saved designs. A new session keeps earlier unfinished work available in this browser. Removing a thumbnail or wishlist item hides it from that view; it does not erase saved revisions or stored files. For erasure, use the data-rights contact.

Accounts and sign-in

We use your email, salted password hash, verification records and session identifiers to provide an account and protect your private designs. We do not store your readable password. Email verification and password-reset links expire after 15 minutes and work once in the requesting browser. Resetting your password revokes existing sessions. Account sessions last up to seven days. Signing in or saving a design does not subscribe you to marketing.

When enabled, the account page loads Google’s sign-in service. If you use it, we verify its response and store your Google account identifier and verified email to connect your MoKlip account. We do not request access to Gmail, Google Drive or other Google content. Email sign-in remains available.

Uploads and AI design requests

Uploading an image stores it privately with MoKlip. When you request AI generation, we send your design instruction to OpenAI’s image service. For a refinement, we also send the selected image, which may be an upload or an earlier output. Uploading, selecting or moving an image alone does not send it to the AI provider. Our image request does not include your account email.

Instructions and images may contain personal information, including names or recognizable people. Only provide material you have permission to use and avoid sensitive information. We retain the request and resulting output with your design history and usage records. Provider processing is separate from browser storage; clearing your draft does not recall a submitted request.

AI outputs are design suggestions for you to review, not health assessments or decisions about you. See the design and AI terms for content permissions and preview limitations.

Waitlist and product updates

The optional waitlist combines product availability, development news, announcements and related activities or events. We store your email, subscription status and consent evidence, including the notice version and time. Guests confirm their email; verified account holders can manage the same subscription from their account.

Joining with a design associates a saved snapshot of your selected output, placement, button color and measurement interests with the subscription after email confirmation. Signing in or saving alone does not subscribe you. The waitlist is not an order and does not guarantee availability or delivery.

You can unsubscribe through the link in our emails, your account preference or the contact address in this policy. Older subscriptions remain subject to the scope of the consent originally given; they are not automatically enrolled into a broader audience.

Experience feedback and optional rewards

Quick feedback stores the page, thumbs-up or thumbs-down choice, optional thumbs-down comment and timestamps, linked to a hashed browser session so you can change or undo your vote. No account or email is required. Earlier detailed responses may include a rating and any follow-up email you provided. We use this private feedback to improve MoKlip under our legitimate interest in product research. Please leave out health records, passwords and other sensitive information. Sending feedback does not create a waitlist subscription or authorize publication as a testimonial.

Commercial reward enrollment is currently paused. If you separately enter a future open feedback reward campaign, we link your verified account and contact email, country, adult-eligibility confirmation and accepted rules version to the response. We process these records to administer your requested participation, eligibility review and reward decisions. Authorized Marketing staff and administrators can review them. We contact selected participants privately and collect delivery details only when needed. Any additional publicity or marketing reuse requires separate permission.

Research records are reviewed under the retention criteria below; campaign evidence is kept only as needed for administration, claims and applicable legal duties. Contact hello@moklip.com with your feedback reference, or details of your page and browser session where available, to request access, withdrawal from a campaign or deletion, subject to those duties.

Security and operational records

We process limited network information and request times to deliver services and prevent abuse. Email and network identifiers used for rate limits are hashed. Operational records cover sign-ins, saves, design requests, consent changes and authorized staff actions, using internal identifiers rather than email addresses or design instructions in event payloads. These identifiers can still relate to a person; they are not treated as anonymous data.

When bot protection is enabled, protected submissions load Cloudflare Turnstile, which processes browser and network information to detect automated abuse. MoKlip verifies its short-lived token. Your message, design instruction and email are not included in our server verification request to Cloudflare.

Optional engagement analytics records predefined website interactions only after analytics consent. It is separate from security and service-operation records. The Cookies Policy explains the controls.

Purposes and legal bases

• Requested services: account access, private design storage, generation and related service messages are processed to provide the service you request under our Terms of Use.
• Enquiries and applications: we respond to requests to take steps before a potential contract, including assessing a job application, or rely on our legitimate interest in answering general questions and resolving support issues.
• Security and product operation: our legitimate interests are preventing abuse, protecting private designs, maintaining a reliable service and reviewing stated product preferences to inform development. This does not authorize marketing emails or optional tracking without consent.
• Waitlist communications and optional analytics: your separate consent. Neither is required to browse, sign in or save a design.
• Legal obligations: handling applicable data-rights requests and retaining records where a law requires them.

You choose which optional features to use. Without the information needed for a requested feature, such as an email for sign-in or an image for refinement, we cannot provide that feature. You may object to processing based on legitimate interests as explained below.

Your choice and withdrawal

You can withdraw consent at any time using the unsubscribe method included in our messages or by emailing hello@moklip.com. Withdrawal does not affect processing that took place before it.

Service providers and international processing

Providers receive the information needed for the features they deliver. Depending on the enabled service, these include:

• Amazon Web Services: website and application hosting, private storage and email delivery when enabled.
• OpenAI: design instructions and selected images for requested AI generation or refinement.
• Google: sign-in verification when you use it, and website analytics only after analytics consent.
• Cloudflare: Turnstile browser and network checks for abuse prevention when enabled.
• Stripe: payment collection, fraud checks and refunds when you explicitly enter an enabled reservation checkout. Card details are entered on Stripe’s hosted checkout, not stored by MoKlip.

These services may involve processing outside the European Economic Area for hosting, delivery, authentication, security or AI processing. Hosting MoKlip in Europe does not by itself keep all provider processing in Europe. Transfers must be covered by an applicable adequacy decision or other lawful transfer safeguards, such as standard contractual clauses where required. Contact hello@moklip.com for information about the providers, processing locations and safeguards applicable to your data.

Optional reservations

If you make a paid reservation, we retain your verified account reference, selected region, optional saved-design snapshot, accepted offer and terms version, currency and amounts, payment/refund references, status history and service correspondence. These records support the reservation contract, refunds, fraud prevention and applicable accounting obligations. They do not subscribe you to marketing, and financial records may need to remain after a design or account deletion request. We will explain applicable retention requirements when you contact us.

Sample Trial applications

If you apply, we collect your name, email, country/city, background, proposed use case, availability, preferred trial format and any optional organization, public profile link, experience and measurement interests you provide. Please do not include medical history or sensitive health records. Authorized staff use the private profile to assess suitability, record review decisions and contact selected candidates to arrange a trial. Applying does not create an account or newsletter subscription.

We send guests a time-limited email link to review and explicitly confirm the application. A matching signed-in, verified email needs no further confirmation. We retain the accepted program and notice versions and internal review history to administer the application. This processing supports the participation you request and our legitimate interest in safe product research; contact permission covers this application only. We review inactive applications for deletion or anonymization after 12 months, subject to any necessary participation records and legal duties. This is a review point, not an automatic deletion job. Contact hello@moklip.com to withdraw, correct your profile or exercise your data rights.

Retention and deletion

• Accounts and saved designs: retained to provide access and recovery while you use the service, subject to an erasure request and any applicable legal retention requirement.
• Research preferences and inactive drafts: our retention policy calls for review for deletion or anonymization after 12 months. This is a review point, not an automatic expiry of your saved designs.
• Enquiries and job applications: kept while needed to handle the enquiry or recruitment process, resolve follow-up issues and retain any record required for a dispute or legal obligation. Keeping an application for unrelated future roles requires a separate basis and notice.
• Waitlist: kept while you remain subscribed or the update service continues. Withdrawal stops marketing use; limited suppression and consent records may remain to respect your choice and demonstrate compliance.
• Security, service and backup records: retention depends on the operational purpose, recovery needs and applicable legal obligations. Browser-cookie lifetimes do not determine database or backup retention.

Signing out, starting over, removing a thumbnail or clearing browser storage is not a request to erase server data. To request deletion of your account, designs, images or enquiries, contact us below. We will explain any information that must be retained and why.

Your data-protection rights

Under the GDPR and applicable Spanish data-protection law, you may request access, correction, erasure, restriction or portability where applicable, object to processing based on legitimate interests, and withdraw consent at any time. Withdrawal does not affect the lawfulness of earlier processing. For marketing, you can unsubscribe directly.

Send requests to hello@moklip.com. Tell us which account, design or enquiry your request concerns. We may need proportionate information to verify ownership, especially for guest designs; do not send passwords or identity documents unless a necessary, secure verification step has been agreed. We will respond within one month, or explain within that period if a lawful extension is needed.

You may complain to the Spanish Data Protection Agency (AEPD) or your local supervisory authority.

Cookies and analytics

We use optional analytics cookies only with your consent. Details about the analytics service, cookie names, purposes, retention periods and your choices are provided in our Cookies Policy. External websites linked from MoKlip apply their own privacy and cookie practices.

Changes to this policy

We may update this policy as the website, subscription service or legal requirements change. The latest version will be published here with its effective date.