Legal
Privacy Policy
1. Who we are
Controller: Mood Swing, operated by Eric Michis, based in Romania, European Union.
Contact: moodswing.app@yahoo.com
We are subject to the General Data Protection Regulation (EU) 2016/679 (GDPR) as a data controller established in the EU. Users in California also have rights under the California Consumer Privacy Act (CCPA), described in Section 10.
2. What we collect and why
2a. Waitlist (pre-launch)
| Data | Why |
|---|---|
| Email address | To send you one launch notification email |
| Signup timestamp | Record of when you joined |
| Consent record | Proof that you agreed to receive the launch email (GDPR Art. 7) |
| Browser type | Understand which devices our users come from |
2b. App users (after launch)
| Data | Why |
|---|---|
| Email, display name, auth provider | Account management |
| Mood entries | Core app feature — emotional check-ins |
| Journal reflections | Private journaling feature |
| Breathing session logs | Progress tracking |
| Community posts and comments | Community feature — shared by you voluntarily |
| Premium subscription status | Unlock premium features |
| Consent history | Audit trail of your consent choices |
| Device / browser type | Service compatibility and security |
We do not collect: precise location, payment card numbers, contacts, camera/microphone access, or any biometric data.
3. Legal basis (GDPR)
| Processing purpose | Legal basis |
|---|---|
| Sending the launch email (waitlist) | Consent — Art. 6(1)(a). You may withdraw by emailing us. |
| Delivering the app service (account, features) | Contract performance — Art. 6(1)(b) |
| Processing mood and journal data | Explicit consent — Art. 6(1)(a) + Art. 9(2)(a) (special-category health data) |
| Security, fraud prevention, service stability | Legitimate interests — Art. 6(1)(f) |
| Legal compliance (e.g., responding to lawful requests) | Legal obligation — Art. 6(1)(c) |
4. Sensitive health data
Mood entries and journal reflections contain information about your emotional state. Under GDPR Article 9, this qualifies as special-category (health-adjacent) data. We process it only on the basis of your explicit consent, which you give during onboarding.
You may withdraw consent at any time from Settings → Data & Privacy → Manage Consent. Withdrawing consent will stop future processing but does not automatically delete existing entries — use the "Delete all my data" option for that.
- Mood data is stored encrypted at rest in Firebase Firestore.
- We never share mood data with third parties for marketing, research, or any other purpose.
- Mood data is never used to train AI or machine-learning models.
5. User-generated content
Community posts, comments, and reactions you submit to Mood Swing community spaces are voluntarily shared and visible to other community members. You retain ownership of your content. By posting, you grant Mood Swing a non-exclusive, royalty-free license to store, display, and moderate that content within the app.
Community content is not treated as private health data. Do not post sensitive personal health information in community spaces. We recommend communities for shared experience and peer support, not for disclosing information you wish to keep private.
We moderate community content for safety. We may remove posts that violate our Terms of Use (e.g., harmful content, harassment, crisis-glorifying content). You may delete your posts at any time from the app.
6. Third-party processors
| Processor | Purpose | Location |
|---|---|---|
| Google Firebase (Firestore, Auth, Hosting, Functions) | Database, authentication, hosting, server functions | EU (Belgium/Netherlands) for data; Functions may use US infrastructure |
| Google Fonts | Typography rendering on the landing page | US (CDN) |
We do not use advertising networks, analytics SDKs that track users across sites, or data brokers. We do not sell your personal data to any party, ever.
7. International data transfers
Firestore data is stored in the EU (Belgium/Netherlands region). Firebase Authentication and Cloud Functions may process data on Google infrastructure in the United States. Google participates in the EU–US Data Privacy Framework and provides standard contractual clauses (SCCs) as a transfer mechanism, ensuring adequate protection under GDPR Chapter V.
No other international transfers occur.
8. Retention
- Waitlist emails: Deleted no later than 30 days after the launch email is sent, or immediately on your request.
- App account data: Kept for as long as your account is active. You may delete your account at any time from Settings → Data & Privacy; all data is removed within 30 days of deletion.
- Community posts: Deleted immediately when you choose to remove them, or within 30 days of account deletion.
- Backups: Firebase may retain backup snapshots for up to 7 days; these are overwritten on a rolling basis.
- Legal holds: We may retain data longer if required by applicable law (e.g., in response to a lawful preservation order).
9. Your GDPR rights
If you are in the European Economic Area, you have the following rights. You can exercise most of them directly in the app.
Access (Art. 15)
Request a copy of your data. Use Settings → Export Data.
Rectification (Art. 16)
Correct inaccurate data. Edit your profile in the app.
Erasure (Art. 17)
Delete your account and all data. Settings → Data & Privacy → Delete Account.
Portability (Art. 20)
Export your data in machine-readable format. Settings → Export Data.
Restriction (Art. 18)
Restrict processing while a dispute is resolved. Email us.
Objection (Art. 21)
Object to legitimate-interests processing. Email us.
Withdraw consent
Stop processing of health data. Settings → Manage Consent.
Lodge a complaint
You may complain to your national supervisory authority (e.g., ANSPDCP in Romania).
We respond to all verified requests within 30 days (extendable by 60 days for complex requests, with notice). Requests sent by email to moodswing.app@yahoo.com must include enough information to verify your identity.
10. California privacy rights (CCPA / CPRA)
If you are a California resident, the California Consumer Privacy Act grants you the following rights, free of charge and without discrimination:
- Right to know: You may request disclosure of the categories and specific pieces of personal information we have collected about you in the past 12 months, the purposes for which it was collected, and the categories of third parties with whom it was shared.
- Right to delete: You may request deletion of personal information we have collected, subject to certain exceptions (e.g., legal obligations).
- Right to correct: You may request correction of inaccurate personal information.
- Right to opt-out of sale or sharing: We do not sell or share personal information with third parties for cross-context behavioral advertising. There is nothing to opt out of, but you may contact us to confirm.
- Right to limit use of sensitive personal information: Mood entries are sensitive personal information under CPRA. You control this through Settings → Manage Consent.
To exercise these rights, email moodswing.app@yahoo.com with "California Privacy Rights" in the subject line. We will respond within 45 days.
We do not discriminate against you for exercising any of these rights.
11. Children
Mood Swing is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it promptly.
Users aged 13–17 may use the app with appropriate awareness that mood-related data is sensitive. We encourage parents to review this policy with their children.
13. Changes to this policy
We will notify you of material changes by updating the "Effective" date at the top of this page and, for app users, by displaying an in-app notice. Continued use of the service after the effective date constitutes acceptance of the updated policy.
For significant changes affecting how we process health data, we will request fresh explicit consent.
14. Contact and complaints
For any privacy question, data request, or complaint:
- Email: moodswing.app@yahoo.com
- Response time: Within 5 business days for general queries; within 30 days for formal data subject requests.
If you are not satisfied with our response, you may lodge a complaint with your national data protection authority. In Romania: ANSPDCP (dataprotection.ro).