Privacy Policy — Moodmo
This policy explains what happens to your information when you use Moodmo. It applies to the Moodmo app for Android and iOS (package com.avillalva.moodmo) and to this website. Moodmo ("we", "us") is the data controller. You can reach us at habitleveling@outlook.com.
At a glance
- No ads. We never sell your data. We do not track you across apps or websites.
- You do not need an account. By default, everything stays on your device.
- If you turn on Premium sync, your entries, notes and photos are end-to-end encrypted before they leave your phone. We cannot read them.
- Anonymous usage statistics and crash reports are optional, and you can turn them off any time.
- You can export everything, and you can delete your account from inside the app.
Services we use
| Service | Purpose | Data | Location |
|---|---|---|---|
| Supabase | Optional account and Premium sync | Account email or sign-in provider ID; end-to-end encrypted entries, notes, activities, settings and photos; item counts, sizes and change times; photo file paths and sizes; Premium status | The region of our hosting provider |
| Loops | Send account emails: sign-in codes, Premium activation and expiration, account deletion confirmation | Account email address, app language, the content of those emails (such as the sign-in code) | United States |
| RevenueCat | Verify and restore Premium purchases | Anonymous app user ID, purchase history, device and app information (such as OS version and IP address) | United States |
| Google Play / App Store | Process payments | Payment details, handled by the store (we never see card details) | Handled by Google or Apple |
| PostHog | Optional anonymous usage statistics | Events from a fixed list, app version, platform, build variant, a random anonymous ID | European Union |
| Sentry | Optional crash reports | Stack trace and basic device, OS and app information | United States |
| Expo (EAS Update) | Download app updates | App and runtime version, platform, update channel, an installation ID, IP address | Expo's update service |
1. Summary
Moodmo has no ads, and your data is never sold. We do not track you across other apps or websites. By default, everything you write in Moodmo stays on your device, and you do not need an account to use it.
2. Data stored on your device
Your mood entries, activities, notes, photos, profile and settings are stored locally, in an on-device database and files. They are removed when you uninstall the app or when you erase your data from the app.
App lock. If you unlock Moodmo with your device biometrics (Face ID, Touch ID or fingerprint), the operating system handles the check. No biometric data reaches the app. If you set the optional 6-digit PIN, it is stored only as a salted hash in your device's keychain or keystore. It is never synced or exported.
3. Optional account and Premium sync (Supabase)
You only need an account if you want to sync. You can sign in with Apple, Google or a one-time code sent to your email. Sign-in is processed by Supabase Auth. If you use Google or Apple, they share basic account information with us, such as your email and an account identifier.
When sync is on, your entries, notes, activities, settings and photos are end-to-end encrypted on your device (AES-256-GCM) before they are uploaded. The encryption key is protected by your passphrase (Argon2id) and by an offline recovery key. We cannot read your synced data.
What our server can see:
- Your account email or sign-in provider ID
- Your app language, so our emails reach you in it
- How many items you have and their sizes
- When items change
- Photo file paths and sizes
- Your Premium status
If you lose both your passphrase and your recovery key, your synced data cannot be recovered. Markers for deleted items are purged after 90 days.
Account emails (the sign-in code, a notice when Premium starts or ends, and a confirmation when you delete your account) are sent through Loops. They never contain your entries, notes, activities or photos, and we do not use your email for marketing. Loops does not keep you on a mailing list.
4. Purchases (RevenueCat, Google Play, App Store)
Payments are processed by Google Play or the App Store. We never see your card details. RevenueCat receives an anonymous app user ID, your purchase history and device and app information (such as OS version and IP address) so it can verify and restore Premium. RevenueCat never receives your entries, notes or photos.
5. Anonymous usage statistics and crash reports (PostHog EU, Sentry US)
Both are optional.
Usage statistics (PostHog, EU). We only send events from a fixed list, for example: app opened, onboarding step viewed, entry saved and where it was saved from, paywall viewed, purchase completed or failed, reminder tapped, theme selected, and whether a data export or import succeeded. Each event includes the app version, platform and build variant, and a random anonymous ID. There are no profiles, we do not store your IP address, and there is no location, no autocapture and no session replay. We never send your entries, notes, activities or photos.
Crash reports (Sentry, US). A crash report contains the stack trace and basic device, OS and app information. Messages, user data, screenshots and breadcrumbs are removed before the report is sent.
Your consent. In the EU/EEA, the UK, Switzerland, Brazil, South Korea, Argentina, Turkey and Thailand, or wherever we cannot tell where you are, nothing is sent until you agree. Elsewhere, statistics and crash reports are on by default, and you can turn them off any time in Profile > Privacy. If you turn them off and on again, the app creates a new ID that is not linked to the old one.
6. App updates (Expo / EAS Update)
To download app updates, the app sends technical information (app and runtime version, platform, update channel and an installation ID) and your IP address to Expo's update service.
7. Notifications
Reminders and the monthly report are local notifications scheduled on your device. No push service receives your data.
8. Sensitive information
Your mood entries and notes may reveal information about your health or emotions. They stay on your device. If you turn on sync, they are end-to-end encrypted, so we cannot read them. We never use them for analytics or advertising.
9. Legal bases
Where the GDPR or UK GDPR applies, we rely on these legal bases:
- Consent. Anonymous usage statistics and crash reports, where we ask you first. You can withdraw your consent any time in Profile > Privacy.
- Contract. Your account, Premium sync and the purchases you ask for.
- Legitimate interests. Anonymous usage statistics and crash reports, where they are on by default, to keep the app working and improve it. You can object by turning them off in Profile > Privacy.
- Legal obligations. When the law requires us to keep or share information, for example to answer a valid request from an authority.
10. How long we keep data
- On your device. Until you delete it, erase the app data or uninstall the app.
- Synced data. Until you delete it or delete your account. Markers for deleted items are purged after 90 days.
- Account and Premium link. Deleted when you delete your account. We also ask RevenueCat and PostHog to delete related data.
- Usage statistics and crash reports. Kept only as long as needed, according to the retention settings of PostHog and Sentry.
11. Your choices and rights
- Export. You can export everything at any time from Profile, as a full backup (.zip) or a spreadsheet (.csv).
- Analytics. You can turn usage statistics and crash reports off in Profile > Privacy.
- Delete your account. In the app, go to Profile > Delete account. This erases your synced data, encryption key bundles, stored photos and Premium link from our servers, and asks RevenueCat and PostHog to delete related data.
- Local data. Data on your device stays there until you uninstall the app or erase it.
- Subscriptions. Subscriptions must be cancelled in Google Play or the App Store.
Many of your rights are self-service in the app: export, the analytics switch and account deletion. Where the law that applies to you grants them, you also have the right to:
- access your data and get a copy of it
- correct it
- delete it
- take it with you (portability), for example with the .zip or .csv export
- restrict how we use it
- object to how we use it
- withdraw your consent at any time
- complain to a data protection authority
To exercise these rights, email habitleveling@outlook.com. We may need to verify that the request comes from you, for example by replying from your account email. We answer within one month, which may be extended where the law allows.
12. US state privacy rights
If you live in California or another US state with a privacy law, these rights apply to you too. We do not sell your personal information, we do not share it for cross-context behavioral advertising, and we do not use it for profiling that has legal or similarly significant effects. You can ask to access, correct or delete your personal information by emailing habitleveling@outlook.com. We will not discriminate against you for exercising these rights.
13. This website
This website uses no cookies and no analytics or tracking scripts. Like any website, our hosting provider may log technical data such as your IP address and browser type to deliver and protect the site.
Do Not Track and Global Privacy Control. We do not track you across sites, so there is nothing to switch off.
14. International transfers
The services we use may process data in other countries: PostHog in the European Union, Sentry, RevenueCat and Loops in the United States, and Supabase in the region of our hosting provider.
15. Children
Moodmo is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect their data.
16. Security
Sync uses end-to-end encryption, all network traffic uses HTTPS, and you can protect the app with an optional app lock.
No method of transmission or storage is 100% secure. If a breach affects your personal data, we will notify you and the authorities as required by law.
17. Business transfers
If Moodmo is sold, merged or transferred, the data we hold may move to the new owner, who must keep honoring this policy. We will tell you before that happens.
18. Changes to this policy
If we change this policy, we will update the "Last updated" date above. For material changes, we will also let you know in the app.
19. Contact
Questions or requests? Write to us at habitleveling@outlook.com.
Moodmo is operated by Alexis Villalva, who manages and improves the app and publishes it on Google Play and the App Store.