Privacy Policy

1. Introduction

Welcome to MOOD ("we," "our," or "us"). We are committed to protecting your privacy and ensuring you understand how we collect, use, store, and safeguard your personal information. This Privacy Policy explains our practices regarding data collection and usage in compliance with applicable privacy laws, including the California Consumer Privacy Act (CCPA), General Data Protection Regulation (GDPR), and Apple's App Store Guidelines (Section 5.1.1). By using our application, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy. If you do not agree with our practices, please do not use our services.

2. Our Privacy Commitments

We are committed to the following privacy principles:

• We do NOT sell your personal data to third parties
• We do NOT sell or share health or fitness data with third parties for advertising, data-mining, or any other purpose unrelated to providing or improving the MOOD app
• We do NOT use your data for advertising purposes
• We do NOT track you across other apps or websites
• We do NOT share your data with data brokers
• We do NOT use third-party advertising SDKs
• We collect only what is necessary to provide our services

3. Information We Collect

3.1 Account Information (Registered Users)

When you create an account, we collect:

• Email address — Used for account verification, login authentication, password recovery, and essential service communications
• Username — Used for identification within the app and community features
• Password — Securely encrypted using bcrypt hashing; we cannot see your password
• Profile picture (optional) — Displayed on your profile and posts
• Bio and display name (optional) — Information you choose to share publicly

Purpose: To create and manage your account, authenticate your identity, and enable community features. Legal basis: Contract performance (providing our services) and legitimate interest (account security).

3.2 Guest User Data

If you use our app without creating an account (as a guest), we collect:

• Device identifier — A randomly generated unique ID stored locally on your device to maintain session continuity
• Usage analytics — Screen views, feature interactions, and workout selections (see Section 3.5)
• Device type and OS version — For app compatibility and crash reporting

Purpose: To provide app functionality, improve user experience, and enable seamless transition to a registered account. Note: If you later create an account, your guest activity may be merged with your registered account to preserve your workout history and preferences.

3.3 User-Generated Content (UGC)

When you upload or create content, we collect and store:

• Photos and videos — Media files you upload for posts or profile pictures
• Post captions and text — Written content accompanying your posts
• Comments — Text you post on other users' content
• Workout cards — Fitness content you create and share
• Direct messages — Private conversations with other users

Storage: Media files are securely stored using Cloudinary, a trusted third-party cloud media management service. Text content is stored in our MongoDB database. Purpose: To enable community features, content sharing, and social interactions within the app.

3.4 Health & Fitness Data (Apple Sensitive Data Category)

MOOD collects health and fitness data as defined by Apple's App Store guidelines. This data is treated as sensitive and is used solely to provide and improve MOOD's personalized fitness experience. We explicitly collect the following health and fitness data:

• Mood inputs — Your self-reported mood state (e.g., energized, tired, stressed, motivated) used to tailor workout recommendations
• Energy level inputs — Your self-reported energy level at the time of a workout session, used for mood-based personalization
• Workout preference inputs — Your stated preferences for workout type, intensity, environment, and focus area
• Workout history — Workouts started, completed, skipped, or abandoned; exercise completion and progress
• Equipment preferences and selections
• Difficulty level preferences (beginner, intermediate, advanced)
• Workout duration and time spent exercising
• Saved and bookmarked workouts
• "Choose for me" and randomization feature usage
• Workout category selections

Purpose: To track your fitness progress, provide personalized workout recommendations powered by your mood and energy inputs, and improve our workout content.

3.5 Analytics & Usage Data

We collect analytics data to improve our app. This applies to both registered and guest users:

• App session start, duration, and end times
• Screen views and navigation patterns
• Tab switches and feature usage frequency
• Button clicks and user interactions
• App foreground/background state changes
• Device type, model, and operating system version
• App version
• Error logs and crash reports
• Search queries within the app

Purpose: To improve app performance, identify and fix bugs, understand feature popularity, and enhance user experience. Analytics are processed internally and not shared with third-party analytics services. Important: This data is NOT used for advertising, tracking across other apps/websites, or building advertising profiles.

3.6 Social & Community Data

When you engage with community features:

• Posts you create and their engagement metrics
• Likes you give and receive
• Comments you make
• Users you follow or unfollow
• Profile views (who viewed your profile)
• Content reports you submit
• Users you block

3.7 Device Permissions

Our app may request the following device permissions:

• Camera — To record photos and videos for posts and profile pictures
• Microphone — To record audio when creating videos
• Photo Library (Read) — To select existing photos/videos for upload
• Photo Library (Write) — To save content to your device
• Push Notifications — To send you relevant updates (optional)

You can revoke these permissions at any time through your device settings. Revoking permissions may limit certain app functionality.

3.8 Subscription & Purchase Data

If you subscribe to MOOD Premium or purchase a subscription, the following applies:

• Payment processing is handled entirely by Apple via In-App Purchase. We do not collect, store, or have access to your credit card, debit card, or banking information.
• Apple provides us with your subscription status and receipt validation data (e.g., whether your subscription is active, expired, or in a trial period) so we can unlock premium features.
• We store your subscription status and entitlement tier (free, monthly, annual, founding member) in our backend database to manage access to premium content.
• Third-party services that may touch subscription-related data: Apple (payment processing and receipt validation), our backend server (entitlement management), and crash-reporting infrastructure for diagnosing app issues.
• We do not share subscription or purchase status with advertisers or data brokers.

4. How We Use Your Information

4.1 Service Provision

• Authenticate your identity and secure your account
• Provide workout content and fitness tracking features
• Enable community features (posts, comments, follows)
• Process and display user-generated content
• Send service-related notifications
• Manage subscription entitlements and unlock premium content

4.2 Personalization

• Recommend workouts based on your mood, energy level, and stated preferences
• Track and display your fitness progress
• Customize content based on your selected difficulty level
• Power "Choose for me" and daily workout recommendations based on your mood-based inputs

4.3 App Improvement

• Analyze usage patterns to improve features
• Identify and fix bugs and performance issues
• Develop new features based on user behavior

4.4 Safety & Security

• Prevent fraud and unauthorized access
• Enforce our Terms of Service and Community Guidelines
• Moderate user-generated content
• Respond to content reports and safety concerns

4.5 What We Do NOT Use Your Data For

• We do NOT use your data for targeted advertising
• We do NOT use health or fitness data (including mood, energy, and preference inputs) for advertising or data-mining
• We do NOT track you across other apps or websites
• We do NOT sell your data to third parties
• We do NOT share your data with data brokers
• We do NOT build advertising profiles about you
• We do NOT use your data for political profiling

5. Data Storage & Security

5.1 Where We Store Your Data

• Account and activity data — Stored in MongoDB Atlas (cloud database with enterprise-grade security)
• Health and fitness data (mood inputs, energy inputs, workout history) — Stored in MongoDB Atlas, accessible only to provide and improve MOOD services
• Media files (photos/videos) — Stored on Cloudinary's secure cloud infrastructure
• Subscription and entitlement data — Stored on our backend server; payment data is stored by Apple only
• Local device data — Session tokens and preferences stored securely on your device

5.2 Security Measures

• Password encryption — All passwords are hashed using bcrypt with salt
• Authentication tokens — Secured with JWT encryption and regular expiration
• Data in transit — All communications use HTTPS/TLS encryption
• Data at rest — Database encryption for stored data
• Access controls — Strict access controls for our team members
• Regular audits — Security practices reviewed regularly

5.3 Data Retention

• Account data — Retained while your account is active and for 30 days after account deletion request
• Health and fitness data (mood inputs, energy inputs, workout history) — Retained while your account is active; deleted within 30 days of account deletion request
• User-generated content — Retained until you delete it or delete your account
• Analytics data — Retained for up to 24 months for trend analysis, then anonymized or deleted
• Guest user data — Retained for 12 months of inactivity, then deleted
• Backup data — Retained for up to 90 days for disaster recovery, then permanently purged
• Subscription status data — Retained for up to 90 days after subscription expiration for support and dispute resolution purposes

To request deletion of your data before these retention periods expire, see Section 7 (Your Rights & Choices) and Section 8 (Account Deletion).

6. Data Sharing & Third Parties

6.1 Service Providers

We share data with the following service providers who help operate our app:

• Cloudinary — Media storage and delivery (photos and videos you upload)
• MongoDB Atlas — Database hosting and management
• Expo/React Native — App development and push notification infrastructure
• Apple (App Store / StoreKit) — Payment processing, receipt validation, and subscription management; Apple's privacy policy applies to all payments

These providers are contractually obligated to protect your data and use it only for the services they provide to us.

6.2 What We Do NOT Share

• We do NOT sell your personal information
• We do NOT sell or share health or fitness data (including mood, energy, and preference inputs) with third parties for advertising or data-mining
• We do NOT share data with advertisers
• We do NOT share data with data brokers
• We do NOT share data for cross-app tracking
• We do NOT share data with social media platforms for advertising

6.3 Legal Requirements

We may disclose your information if required by law, such as:

• In response to valid legal process (court orders, subpoenas)
• To protect our rights, privacy, safety, or property
• To protect users from fraud, abuse, or illegal activities
• In connection with a merger, acquisition, or sale of assets (with notice to users)

6.4 Public Content

Content you post publicly (posts, comments, profile information) may be visible to other users of the app. Please consider this before sharing personal information in public posts.

7. Your Rights & Choices

7.1 Access & Portability

• Request a copy of your personal data
• Export your fitness data and workout history
• Download your user-generated content

7.2 Correction & Update

• Update your profile information at any time
• Correct inaccurate personal data
• Change your email address or password

7.3 Deletion & Consent Revocation

You may delete your data or revoke consent at any time:

• Delete individual posts, comments, or content at any time within the app
• Delete your entire account and all associated data using the in-app account deletion flow (see Section 8 below)
• Revoke consent to data collection by deleting your account; continued use of the app constitutes ongoing consent
• Revoke device permissions (camera, microphone, photo library) at any time through your device settings (Settings > MOOD)
• Request deletion of specific data by contacting privacy@moodfitnessapp.com

All deletion requests are processed within 30 days. We will send a confirmation when deletion is complete.

7.4 Opt-Out Options

• Disable push notifications in app settings or device settings
• Revoke camera, microphone, or photo library permissions
• Control profile visibility settings
• Block specific users from interacting with you

7.5 How to Exercise Your Rights

To exercise any of these rights, you can: use the in-app settings and profile management features; use the in-app account deletion flow (Settings > Account > Delete Account); contact us at privacy@moodfitnessapp.com; or submit a request through the app's Help & Support section. We will respond to your request within 30 days. We may need to verify your identity before processing certain requests.

8. Account Deletion (In-App)

Apple requires that apps with accounts provide an in-app method for users to delete their account. MOOD provides this feature directly within the app.

How to delete your account: Open MOOD and go to Settings → Tap "Account" → Tap "Delete Account" → Confirm deletion.

What happens when you delete your account:

• Your profile, posts, comments, workout history, mood and energy data, and all personally identifiable information will be permanently deleted from our servers within 30 days
• Content you have shared publicly (posts, comments) will be removed
• Your subscription will not be automatically cancelled by account deletion — you must cancel your subscription separately through your Apple ID subscription settings (Settings > [Your Name] > Subscriptions) before or after deleting your account to avoid future charges
• Backup copies may persist for up to 90 days before permanent purge

If you are unable to delete your account within the app, contact us at privacy@moodfitnessapp.com and we will process the deletion manually within 30 days.

9. Children's Privacy

Our app is not intended for children under 13 years of age (or 16 in certain jurisdictions). We do not knowingly collect personal information from children under these ages. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at privacy@moodfitnessapp.com. We will take steps to delete such information from our systems.

10. Push Notifications

With your consent, we may send push notifications for:

• Workout reminders and fitness goal updates
• Daily workout recommendations
• Social interactions (new likes, comments, followers)
• Direct message notifications
• Important account and security alerts
• New features and app updates (occasional)

You can disable notifications at any time through your device settings (Settings > Notifications > MOOD) or within the app's notification preferences. Disabling notifications will not affect core app functionality.

11. Content Moderation & Community Safety

To maintain a safe community, we may:

• Review reported content for violations of our Community Guidelines
• Remove content that violates our policies
• Suspend or terminate accounts for repeated violations
• Use automated systems to detect prohibited content
• Cooperate with law enforcement for illegal content

We process content reports confidentially and will notify you if action is taken on your content. Attempts to evade moderation systems, create alternate accounts to bypass enforcement, or interfere with safety mechanisms may result in permanent account termination and device-level restrictions where permitted by law.

12. International Users

Our services are operated from the United States. If you are accessing our app from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located. By using our services, you consent to this transfer. We take appropriate measures to ensure your data is protected in accordance with this Privacy Policy regardless of where it is processed.

For EU/EEA users: We process your data based on: (1) your consent, (2) contract performance, (3) legal obligations, or (4) legitimate interests. You have additional rights under GDPR including the right to lodge a complaint with your local data protection authority.

13. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

• Right to Know — Request what personal information we collect and how we use it
• Right to Delete — Request deletion of your personal information
• Right to Opt-Out — We do not sell personal information, so this right does not apply
• Right to Non-Discrimination — We will not discriminate against you for exercising your rights

To exercise these rights, contact us at privacy@moodfitnessapp.com or use the in-app privacy settings.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes: we will update the "Last Updated" date at the top of this policy; for material changes, we will notify you via in-app notification or email; continued use of the app after changes constitutes acceptance of the updated policy. We encourage you to review this Privacy Policy periodically for any changes.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: privacy@moodfitnessapp.com
• In-App: Settings > Help & Support > Privacy Inquiry
• For safety, abuse, or objectionable content concerns: wes@officialmoodapp.com

We aim to respond to all privacy-related inquiries within 30 days.

16. Privacy at a Glance — Quick Summary