Legal
Privacy Policy
In plain terms: we collect only what the app needs, we store it securely in the EU, we never sell it, and you can export or delete it whenever you want. Mood entries are treated as sensitive health data and protected accordingly.
The short version
- Do you collect data?Yes. Account info, mood and journal entries, and basic device data. Full list in Section 2.
- Do you sell my data?Never, to anyone.
- Is my mood data private?Yes. Encrypted, never shared, never used to train AI.
- Can I delete everything?Yes, anytime, from Settings → Data & Privacy.
- Where is my data stored?The EU (Belgium/Netherlands).
- Do you use tracking cookies?No third-party tracking, ever.
- Who can see my community posts?Other members of that community, not the public.
The full policy
1. Who we are
Controller: Mood Swing, operated by Eric Michis, based in Romania, European Union.
Contact: moodswing.app@yahoo.com
We are subject to the General Data Protection Regulation (EU) 2016/679 (GDPR) as a data controller established in the EU. Users in California also have rights under the California Consumer Privacy Act (CCPA), described in Section 10.
A note on how we build: parts of Mood Swing's code, design, and documentation (including this policy) are built with the help of AI coding assistants, reviewed and approved by Eric Michis before anything ships. This is about how the app and its policies are written, not about how your data is processed — see Section 2 for what we collect, and Section 4 for a specific commitment that your mood and journal entries are never used to train AI models.
2. What we collect and why
Waitlist (pre-launch)
| Data | Why |
|---|---|
| Email address | To send you one launch notification email |
| Signup timestamp | Record of when you joined |
| Consent record | Proof you agreed to the launch email (GDPR Art. 7) |
| Browser type | Understand which devices our users come from |
App users (after launch)
| Data | Why |
|---|---|
| Email, display name, auth provider | Account management |
| Mood entries | Core app feature: emotional check-ins |
| Journal reflections | Private journaling feature |
| Breathing session logs | Progress tracking |
| Community posts and comments | Shared by you voluntarily |
| Premium subscription status | Unlock premium features |
| Consent history | Audit trail of your consent choices |
| Device / browser type | Service compatibility and security |
We do not collect: precise location, payment card numbers, contacts, camera/microphone access, or any biometric data.
3. Legal basis (GDPR)
| Processing purpose | Legal basis |
|---|---|
| Sending the launch email (waitlist) | Consent, Art. 6(1)(a). Withdraw anytime by emailing us. |
| Delivering the app service (account, features) | Contract performance, Art. 6(1)(b) |
| Processing mood and journal data | Explicit consent, Art. 6(1)(a) + Art. 9(2)(a) (special-category health data) |
| Security, fraud prevention, service stability | Legitimate interests, Art. 6(1)(f) |
| Legal compliance (e.g. lawful requests) | Legal obligation, Art. 6(1)(c) |
4. Sensitive health data
Mood entries and journal reflections contain information about your emotional state. Under GDPR Article 9, this qualifies as special-category (health-adjacent) data. We process it only on the basis of your explicit consent, given during onboarding.
You may withdraw consent at any time from Settings → Data & Privacy → Manage Consent. Withdrawing stops future processing but does not delete existing entries; use "Delete all my data" for that.
- Mood data is stored encrypted at rest in Firebase Firestore.
- We never share mood data with third parties for marketing, research, or any other purpose.
- Mood data is never used to train AI or machine-learning models.
5. User-generated content
Community posts, comments, and reactions you submit are voluntarily shared and visible to other community members. You retain ownership of your content. By posting, you grant Mood Swing a non-exclusive, royalty-free license to store, display, and moderate that content within the app.
Community content is not treated as private health data. Do not post sensitive personal health information in community spaces; use communities for shared experience and peer support, not for disclosing information you want kept private.
We moderate community content for safety and may remove posts that violate our Terms of Use (harmful content, harassment, crisis-glorifying content). You may delete your own posts at any time from the app.
6. Third-party processors
| Processor | Purpose | Location |
|---|---|---|
| Google Firebase (Firestore, Auth, Hosting, Functions) | Database, authentication, hosting, server functions | EU (Belgium/Netherlands) for data; Functions may use US infrastructure |
| Google Fonts | Typography rendering | US (CDN) |
We do not use advertising networks, cross-site tracking SDKs, or data brokers. We do not sell your personal data to any party, ever.
7. International data transfers
Firestore data is stored in the EU (Belgium/Netherlands region). Firebase Authentication and Cloud Functions may process data on Google infrastructure in the United States. Google participates in the EU–US Data Privacy Framework and provides standard contractual clauses (SCCs), ensuring adequate protection under GDPR Chapter V.
No other international transfers occur.
8. Retention
- Waitlist emails: deleted no later than 30 days after the launch email is sent, or immediately on request.
- App account data: kept while your account is active. Delete anytime from Settings → Data & Privacy; all data is removed within 30 days.
- Community posts: deleted immediately when you remove them, or within 30 days of account deletion.
- Backups: Firebase may retain snapshots for up to 7 days, overwritten on a rolling basis.
- Legal holds: we may retain data longer if required by law (e.g. a lawful preservation order).
9. Your GDPR rights
If you're in the European Economic Area, you have the rights below. Most can be exercised directly in the app.
- Access (Art. 15): request a copy of your data via Settings → Export Data.
- Rectification (Art. 16): correct inaccurate data by editing your profile.
- Erasure (Art. 17): delete your account and all data via Settings → Data & Privacy → Delete Account. Full steps at moodswingapp.com/delete-account.
- Portability (Art. 20): export your data in machine-readable format via Settings → Export Data.
- Restriction (Art. 18): restrict processing while a dispute is resolved. Email us.
- Objection (Art. 21): object to legitimate-interests processing. Email us.
- Withdraw consent: stop processing of health data via Settings → Manage Consent.
- Lodge a complaint: with your national supervisory authority (e.g. ANSPDCP in Romania).
We respond to verified requests within 30 days (extendable by 60 for complex requests, with notice). Email moodswing.app@yahoo.com with enough information to verify your identity.
10. California privacy rights (CCPA / CPRA)
California residents have the rights below, free of charge and without discrimination:
- Right to know: request disclosure of the categories and specific data we've collected in the past 12 months, why, and who it was shared with.
- Right to delete: request deletion of your personal information, subject to certain exceptions (e.g. legal obligations).
- Right to correct: request correction of inaccurate personal information.
- Right to opt out of sale or sharing: we do not sell or share data for cross-context behavioral advertising. Nothing to opt out of, but you can ask us to confirm.
- Right to limit sensitive data use: mood entries are sensitive personal information under CPRA, controlled via Settings → Manage Consent.
Email moodswing.app@yahoo.com with "California Privacy Rights" in the subject line. We respond within 45 days and never discriminate against you for exercising these rights.
11. Children
Mood Swing is not directed at children under 13. We do not knowingly collect personal information from anyone under 13; if you believe a child under 13 has, contact us and we'll delete it promptly.
Users aged 13–17 may use the app with awareness that mood-related data is sensitive. We encourage parents to review this policy with their children.
12. Cookies and local storage
We use no third-party tracking cookies. The app stores the following locally in your browser:
- Language preference (
moodswing_langin localStorage): remembers your English/Romanian selection. - Waitlist signup flag: prevents duplicate submissions from the same browser.
- Firebase Auth token: keeps you signed in to the app.
These are functional entries only, never used for advertising or cross-site tracking.
13. Changes to this policy
We'll notify you of material changes by updating the effective date above and, for app users, an in-app notice. Continued use after the effective date means you accept the update.
For changes affecting how we process health data, we'll request fresh explicit consent.
14. Contact and complaints
For any privacy question, data request, or complaint:
- Email: moodswing.app@yahoo.com
- Response time: within 5 business days for general queries, 30 days for formal data-subject requests.
Not satisfied with our response? Lodge a complaint with your national data protection authority. In Romania: ANSPDCP (dataprotection.ro).