Privacy Policy

1. Introduction

Welcome to MOOD ("we," "our," or "us"). We are committed to protecting your privacy and ensuring you understand how we collect, use, store, and safeguard your personal information. This Privacy Policy explains our practices regarding data collection and usage in compliance with applicable privacy laws, including the California Consumer Privacy Act (CCPA), General Data Protection Regulation (GDPR), Apple's App Store Guidelines (Section 5.1.1), and Google Play's User Data and Health Connect policies. By using our application, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy. If you do not agree with our practices, please do not use our services.

2. Our Privacy Commitments

We are committed to the following privacy principles:

• We do NOT sell your personal data to third parties
• We do NOT sell or share health or fitness data with third parties for advertising, data-mining, or any other purpose unrelated to providing or improving the MOOD app
• We do NOT use your data for advertising purposes
• We do NOT track you across other apps or websites
• We do NOT share your data with data brokers
• We do NOT use third-party advertising SDKs
• We collect only what is necessary to provide our services

3. Information We Collect

3.1 Account Information (Registered Users)

When you create an account, we collect:

• Email address — Used for account verification, login authentication, password recovery, and essential service communications
• Username — Used for identification within the app and community features
• Password — Securely encrypted using bcrypt hashing; we cannot see your password
• Profile picture (optional) — Displayed on your profile and next to your activity in Live on MOOD
• Bio and display name (optional) — Information you choose to share publicly

Purpose: To create and manage your account, authenticate your identity, and enable community features. Legal basis: Contract performance (providing our services) and legitimate interest (account security).

3.2 Guest User Data

If you use our app without creating an account (as a guest), we collect:

• Device identifier — A randomly generated unique ID stored locally on your device to maintain session continuity
• Usage analytics — Screen views, feature interactions, and workout selections (see Section 3.5)
• Device type and OS version — For app compatibility and crash reporting

Purpose: To provide app functionality, improve user experience, and enable seamless transition to a registered account. Note: If you later create an account, your guest activity may be merged with your registered account to preserve your workout history and preferences.

3.3 User-Generated Content (UGC)

As of MOOD 3.0, the app no longer offers posts, comments, or direct messages. Content created with earlier versions of the app is retained until you delete it or delete your account. Where applicable, we collect and store:

• Photos and videos — Media files you upload for posts or profile pictures
• Post captions and text — Written content accompanying your posts
• Comments — Text you post on other users' content
• Workout cards — Fitness content you create and share
• Direct messages — Private conversations with other users

Storage: Media files are securely stored using Cloudinary, a trusted third-party cloud media management service. Text content is stored in our MongoDB database. Purpose: To enable community features, content sharing, and social interactions within the app.

3.4 Health & Fitness Data (Apple Sensitive Data Category)

MOOD collects health and fitness data as defined by Apple's App Store guidelines. This data is treated as sensitive and is used solely to provide and improve MOOD's personalized fitness experience. We explicitly collect the following health and fitness data:

• Mood inputs — Your self-reported mood state (e.g., energized, tired, stressed, motivated) used to tailor workout recommendations
• Energy level inputs — Your self-reported energy level at the time of a workout session, used for mood-based personalization
• Workout preference inputs — Your stated preferences for workout type, intensity, environment, and focus area
• Workout history — Workouts started, completed, skipped, or abandoned; exercise completion and progress
• Equipment preferences and selections
• Difficulty level preferences (beginner, intermediate, advanced)
• Workout duration and time spent exercising
• Saved and bookmarked workouts
• "Choose for me" and randomization feature usage
• Workout category selections

Purpose: To track your fitness progress, provide personalized workout recommendations powered by your mood and energy inputs, and improve our workout content.

3.4.1 Apple Health (HealthKit)

If you choose to connect Apple Health, MOOD asks for permission to read the following data. MOOD only reads this data; it does not write any data to Apple Health.

• Resting heart rate, sleep (last night), active energy, and steps — Shown in your daily snapshot on Home
• Heart rate — Shown live during workout sessions
• Heart rate variability and workout history — Shown in your workout stats

Purpose: To show your activity and recovery alongside your MOOD workouts and to add stats such as heart rate and calories to workouts you complete. Workout stats derived from this data (for example, average heart rate and calories for a MOOD workout) are stored with your workout history on our servers so you can view them later.

3.4.2 Android Health Connect

On Android, if you choose to connect Health Connect, MOOD asks for permission to read the following data. Access is read-only: MOOD does not write, modify, or delete any data in Health Connect.

• Heart rate (including live heart rate during a workout, where available)
• Resting heart rate
• Heart rate variability (HRV)
• Sleep (duration and stages from your most recent night)
• Active calories burned
• Steps
• Exercise sessions (your recent workouts and their duration, calories, and heart rate)

Purpose: the same as Apple Health above. We use this data to show your activity and recovery alongside your MOOD workouts, to tailor workout recommendations to your current energy and recovery, and to add stats such as heart rate, calories, steps, and HRV to workouts you complete. Workout stats derived from this data are stored with your workout history on our servers so you can view them later.

3.5 Analytics & Usage Data

We collect analytics data to improve our app. This applies to both registered and guest users:

• App session start, duration, and end times
• Screen views and navigation patterns
• Tab switches and feature usage frequency
• Button clicks and user interactions
• App foreground/background state changes
• Device type, model, and operating system version
• App version
• Error logs and crash reports
• Search queries within the app

Purpose: To improve app performance, identify and fix bugs, understand feature popularity, and enhance user experience. Analytics are processed internally and not shared with third-party analytics services. Important: This data is NOT used for advertising, tracking across other apps/websites, or building advertising profiles.

3.6 Social & Community Data

When you engage with community features:

• Posts you create and their engagement metrics
• Likes you give and receive
• Comments you make
• Users you follow or unfollow
• Profile views (who viewed your profile)
• Content reports you submit
• Users you block

3.6.1 Live on MOOD

When you start or complete a MOOD workout, other MOOD users may see this activity in the Live on MOOD feed on the Explore tab. The feed shows your first name, your profile picture (if you have one), the type of workout, how you were feeling (the States you selected), and summary details such as the number of exercises and length. It does not show your email, health data, or location.

3.7 Device Permissions

Our app may request the following device permissions:

• Apple Health (optional) — To read the health and fitness data described in Section 3.4.1
• Health Connect on Android (optional): to read the health and fitness data described in Section 3.4.2
• Camera and Microphone — Only if you choose to take a photo or record video in the app
• Photo Library (Read) — To choose a profile picture
• Photo Library (Write) — To save workout summary images you choose to save or share
• Push Notifications — To send you relevant updates (optional)

You can revoke these permissions at any time through your device settings. Revoking permissions may limit certain app functionality.

3.8 Subscription & Purchase Data

If you subscribe to MOOD Premium or purchase a subscription, the following applies:

• Payment processing is handled entirely by the app store you subscribe through: Apple via In-App Purchase (StoreKit) on iOS, or Google Play via Google Play Billing on Android. We do not collect, store, or have access to your credit card, debit card, or banking information.
• Apple or Google provides us with your subscription status and purchase validation data (e.g., whether your subscription is active, expired, or in a trial period) so we can unlock premium features.
• We store your subscription status and entitlement tier (free, monthly, annual, founding member) in our backend database to manage access to premium content.
• Third-party services that may touch subscription-related data: Apple and Google (payment processing and purchase validation), our backend server (entitlement management), and crash-reporting infrastructure for diagnosing app issues.
• We do not share subscription or purchase status with advertisers or data brokers.

4. How We Use Your Information

4.1 Service Provision

• Authenticate your identity and secure your account
• Provide workout content and fitness tracking features
• Enable community features (posts, comments, follows)
• Process and display user-generated content
• Send service-related notifications
• Manage subscription entitlements and unlock premium content

4.2 Personalization

• Recommend workouts based on your mood, energy level, and stated preferences
• Track and display your fitness progress
• Customize content based on your selected difficulty level
• Power "Choose for me" and daily workout recommendations based on your mood-based inputs

4.3 App Improvement

• Analyze usage patterns to improve features
• Identify and fix bugs and performance issues
• Develop new features based on user behavior

4.4 Safety & Security

• Prevent fraud and unauthorized access
• Enforce our Terms of Service and Community Guidelines
• Moderate user-generated content
• Respond to content reports and safety concerns

4.5 What We Do NOT Use Your Data For

• We do NOT use your data for targeted advertising
• We do NOT use health or fitness data (including mood, energy, and preference inputs) for advertising or data-mining
• We do NOT track you across other apps or websites
• We do NOT sell your data to third parties
• We do NOT share your data with data brokers
• We do NOT build advertising profiles about you
• We do NOT use your data for political profiling

5. Data Storage & Security

5.1 Where We Store Your Data

• Account and activity data — Stored in MongoDB Atlas (cloud database with enterprise-grade security)
• Health and fitness data (mood inputs, energy inputs, workout history) — Stored in MongoDB Atlas, accessible only to provide and improve MOOD services
• Media files (photos/videos) — Stored on Cloudinary's secure cloud infrastructure
• Subscription and entitlement data — Stored on our backend server; payment data is stored by Apple or Google only
• Local device data — Session tokens and preferences stored securely on your device

5.2 Security Measures

• Password encryption — All passwords are hashed using bcrypt with salt
• Authentication tokens — Secured with JWT encryption and regular expiration
• Data in transit — All communications use HTTPS/TLS encryption
• Data at rest — Database encryption for stored data
• Access controls — Strict access controls for our team members
• Regular audits — Security practices reviewed regularly

5.3 Data Retention

• Account data — Retained while your account is active and for 30 days after account deletion request
• Health and fitness data (mood inputs, energy inputs, workout history) — Retained while your account is active; deleted within 30 days of account deletion request
• User-generated content — Retained until you delete it or delete your account
• Analytics data — Retained for up to 24 months for trend analysis, then anonymized or deleted
• Guest user data — Retained for 12 months of inactivity, then deleted
• Backup data — Retained for up to 90 days for disaster recovery, then permanently purged
• Subscription status data — Retained for up to 90 days after subscription expiration for support and dispute resolution purposes

To request deletion of your data before these retention periods expire, see Section 7 (Your Rights & Choices) and Section 8 (Account Deletion).

6. Data Sharing & Third Parties

6.1 Service Providers

We share data with the following service providers who help operate our app:

• Cloudinary — Media storage and delivery (photos and videos you upload)
• MongoDB Atlas — Database hosting and management
• Expo/React Native — App development and push notification infrastructure
• Apple (App Store / StoreKit) — Payment processing, receipt validation, and subscription management; Apple's privacy policy applies to all payments
• Google (Google Play / Google Play Billing): payment processing, purchase validation, and subscription management for Android users; Google's privacy policy applies to those payments

These providers are contractually obligated to protect your data and use it only for the services they provide to us.

6.2 What We Do NOT Share

• We do NOT sell your personal information
• We do NOT sell or share health or fitness data (including mood, energy, and preference inputs) with third parties for advertising or data-mining
• We do NOT share data with advertisers
• We do NOT share data with data brokers
• We do NOT share data for cross-app tracking
• We do NOT share data with social media platforms for advertising

6.3 Legal Requirements

We may disclose your information if required by law, such as:

• In response to valid legal process (court orders, subpoenas)
• To protect our rights, privacy, safety, or property
• To protect users from fraud, abuse, or illegal activities
• In connection with a merger, acquisition, or sale of assets (with notice to users)

6.4 Public Content

Content you post publicly (posts, comments, profile information) may be visible to other users of the app. Please consider this before sharing personal information in public posts.

7. Your Rights & Choices

7.1 Access & Portability

• Request a copy of your personal data
• Export your fitness data and workout history
• Download your user-generated content

7.2 Correction & Update

• Update your profile information at any time
• Correct inaccurate personal data
• Change your email address or password

7.3 Deletion & Consent Revocation

You may delete your data or revoke consent at any time:

• Delete individual posts, comments, or content at any time within the app
• Delete your entire account and all associated data using the in-app account deletion flow (see Section 8 below)
• Revoke consent to data collection by deleting your account; continued use of the app constitutes ongoing consent
• Revoke device permissions (camera, microphone, photo library) at any time through your device settings (Settings > MOOD)
• Request deletion of specific data by contacting wes@officialmoodapp.com

All deletion requests are processed within 30 days. We will send a confirmation when deletion is complete.

7.4 Opt-Out Options

• Disable push notifications in app settings or device settings
• Revoke camera, microphone, or photo library permissions
• Control profile visibility settings
• Block specific users from interacting with you

7.5 How to Exercise Your Rights

To exercise any of these rights, you can: use the in-app settings and profile management features; use the in-app account deletion flow (Settings > Account > Delete Account); contact us at wes@officialmoodapp.com; or submit a request through the app's Help & Support section. We will respond to your request within 30 days. We may need to verify your identity before processing certain requests.

8. Account Deletion

Apple and Google require that apps with accounts let users delete their account. MOOD provides this directly within the app, and you can also request deletion without the app (see below).

How to delete your account: Open MOOD and go to Settings → Tap "Account" → Tap "Delete Account" → Confirm deletion.

What happens when you delete your account:

• Your profile, posts, comments, workout history, mood and energy data, and all personally identifiable information will be permanently deleted from our servers within 30 days
• Content you have shared publicly (posts, comments) will be removed
• Your subscription will not be automatically cancelled by account deletion — you must cancel your subscription separately through your Apple ID subscription settings (Settings > [Your Name] > Subscriptions) on iOS, or in the Google Play Store app (Profile > Payments & subscriptions > Subscriptions) on Android, before or after deleting your account to avoid future charges
• Backup copies may persist for up to 90 days before permanent purge

Delete your account without the app: If you no longer have the app installed, email wes@officialmoodapp.com from the email address on your MOOD account with the subject "MOOD account deletion request." We will verify the request and delete your account and associated data as described above within 30 days. If you would like us to delete only some of your data (for example, your workout history or health-derived workout stats) while keeping your account, say so in your email.

If you are unable to delete your account within the app, contact us at wes@officialmoodapp.com and we will process the deletion manually within 30 days.

9. Children's Privacy

Our app is not intended for children under 13 years of age (or 16 in certain jurisdictions). We do not knowingly collect personal information from children under these ages. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at wes@officialmoodapp.com. We will take steps to delete such information from our systems.

10. Push Notifications

With your consent, we may send push notifications for:

• Workout reminders and fitness goal updates
• Daily workout recommendations
• Social interactions (new likes, comments, followers)
• Direct message notifications
• Important account and security alerts
• New features and app updates (occasional)

You can disable notifications at any time through your device settings (Settings > Notifications > MOOD) or within the app's notification preferences. Disabling notifications will not affect core app functionality.

11. Content Moderation & Community Safety

To maintain a safe community, we may:

• Review reported content for violations of our Community Guidelines
• Remove content that violates our policies
• Suspend or terminate accounts for repeated violations
• Use automated systems to detect prohibited content
• Cooperate with law enforcement for illegal content

We process content reports confidentially and will notify you if action is taken on your content. Attempts to evade moderation systems, create alternate accounts to bypass enforcement, or interfere with safety mechanisms may result in permanent account termination and device-level restrictions where permitted by law.

12. International Users

Our services are operated from the United States. If you are accessing our app from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located. By using our services, you consent to this transfer. We take appropriate measures to ensure your data is protected in accordance with this Privacy Policy regardless of where it is processed.

For EU/EEA users: We process your data based on: (1) your consent, (2) contract performance, (3) legal obligations, or (4) legitimate interests. You have additional rights under GDPR including the right to lodge a complaint with your local data protection authority.

13. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

• Right to Know — Request what personal information we collect and how we use it
• Right to Delete — Request deletion of your personal information
• Right to Opt-Out — We do not sell personal information, so this right does not apply
• Right to Non-Discrimination — We will not discriminate against you for exercising your rights

To exercise these rights, contact us at wes@officialmoodapp.com or use the in-app privacy settings.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes: we will update the "Last Updated" date at the top of this policy; for material changes, we will notify you via in-app notification or email; continued use of the app after changes constitutes acceptance of the updated policy. We encourage you to review this Privacy Policy periodically for any changes.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: wes@officialmoodapp.com
• In-App: Settings > Help & Support > Privacy Inquiry
• For safety, abuse, or objectionable content concerns: wes@officialmoodapp.com

We aim to respond to all privacy-related inquiries within 30 days.

16. Privacy at a Glance — Quick Summary