What they may do · DPDP §6(4)
What Moj does with your data
Moj's policy says your searches feed targeted ads, that it shares your personal data with group companies, advertisers and partners, that a lens partner may collect images of your face, and that your activity history stays with them after you delete your account.
-
Shares your data with partners
Passed to group companies, advertisers or analytics firms you never chose.
What this costs you. Your number and habits travel to companies you have never heard of and never agreed to. This is the step where the spam calls start.
Show me where they say that
Moj’s own policy says “We may share information that you share with us including your Personal Information with any member of our Group.”
Our summary personal information may be shared with any member of the corporate Group (any entity controlling, controlled by, or under common control with the company). A separate clause lists further recipients: business partners, suppliers and sub-contractors; 'Advertisers and advertising networks that require the data to select and serve relevant adverts to you and others.'; and government or law enforcement bodies.
-
Builds an advertising profile of you
They watch what you view, tap and buy, and use it to decide which ads you see.
What this costs you. Your attention gets priced. What you hesitate over becomes a bid — and a profile built to predict you is a profile built to persuade you.
Show me where they say that
Moj’s own policy says “To use analytics for personalization and showing you targeted advertisements”
Our summary searches the user makes on the Platform are used for analytics-driven personalisation and to show the user targeted advertisements.
-
Follows you onto other websites and apps
Their tracking carries on after you leave, through pixels and SDKs embedded elsewhere.
What this costs you. You get recognised on sites that have nothing to do with them. Closing the app does not close the file.
Show me where they say that
Moj’s own policy says “We may also be working closely with third parties (including, for example, business partners, sub-contractors in technical, analytics providers, search information providers) and may receive information about you from such sources. Such data may be shared internally and combined with data collected on this Platform.”
Our summary receives information about the user from outside parties including business partners, sub-contractors, analytics providers and search information providers, and combines that data internally with data collected on the Platform. The device-data section separately lists 'Any mobile applications that are stored on your mobile device.' and identifiers 'from games, apps or accounts you use.'
-
Keeps your records long-term
Held on after you stop using the service.
What this costs you. Years after you delete the app, the record is still sitting there — and every year it sits there is another year it can leak.
Show me where they say that
Moj’s own policy says “However, the history of your activities and account on our Platform remains available to us, including when we delete your account or content as per our data retention policies.”
Our summary the history of the user's activities and account remains available to the company even after the user deletes the account or the content. Separately, user video/image content is stored up to 180 days, but the policy states 'we may retain content beyond the 180 day period of retention' for business purposes, third-party contracts or legal compliance, and that copies of public content may persist in cached and archived pages.
-
Processes your face or other biometrics
Face matching, liveness checks or similar.
What this costs you. You can change a leaked password in a minute. You cannot change your face. A biometric breach is permanent in a way nothing else is.
Show me where they say that
Moj’s own policy says “For example, Snap Inc. may collect and store imagery from your face in order to facilitate the use of certain features on the App such as Lens and will notify you of their terms and conditions (available at https://snap.com/en-US/privacy/privacy-policy and https://snap.com/en-US/terms) prior to such collection.”
Our summary a third-party lens provider (Snap Inc.) may collect and store imagery of the user's face to power camera features in the app. The policy separately states that information from Apple's TrueDepth camera is used to improve lens quality, used in real time, not stored on Moj's servers and not shared with third parties.
What the policy does not mention
These are uses Moj’s policy is silent on. Silence is not a promise — it means the document does not say, and we do not infer either way.
- Trains AI models on your content
Moj is one app. How many are on your phone?
Most people carry twenty to forty. Add yours and see the total in one screen — how many share your data, profile you for ads, or follow you across the web. Then take it back from all of them at once.
Manage my data with Saaph.in →Free to check · no account needed · built in India for the DPDP Act
Questions
What does Moj do with my personal data?
According to Moj's own privacy policy, read on 2026-08-14, it discloses 5 of the six uses we track: shares your data with partners, builds an advertising profile of you, follows you onto other websites and apps, keeps your records long-term, processes your face or other biometrics.
Can I withdraw my consent from Moj?
Section 6(4) of India's Digital Personal Data Protection Act 2023 gives you the right to withdraw consent for processing you agreed to. The Act's substantive provisions commence in stages up to May 2027, so a request made now asks for voluntary compliance and puts the date on record. Processing a company carries out under a legal obligation — such as KYC records the RBI requires — cannot be withdrawn.
Does Moj track me for advertising?
Yes — Moj's published policy discloses this. The exact sentence it is based on is quoted on this page, with the date we read it and a link to the source.
Every use above is one Moj declared in its own published privacy policy, which we
read on 2026-08-14. Quotes are verbatim; the summary beside each one is ours
and is labelled as ours. Nothing here is inferred.
Saaph.in is a DPDP consent and request management platform operated by Ronin Works
Private Limited. It is a communication facilitator, not your legal or authorised
representative. The DPDP Act 2023 commences in stages up to May 2027, so a request
made today asks for voluntary compliance and records the date you asked.
Our privacy policy