Privacy Policy

Controller and contact

The controller of personal data and operator of the Moody service is VisHelth s.r.o..

Send privacy questions and requests to support@mymoody.app.

Data we process

Depending on the features you use, we may process:

• account and sign-in data, such as your email address, internal account identifier, and information provided when you sign in with Google;
• journal entries, answers, reflections, moods, tags, chapters, stories, and other content you save in Moody;
• photos and related metadata;
• voice input handled by the device system speech-recognition service and the resulting transcript inserted into text;
• AI outputs, feedback about them, and the record of your required AI-processing confirmation;
• subscription entitlement information and technical, security, or diagnostic data necessary to operate the service.

Account, Supabase, and Google sign-in

Moody uses Supabase for authentication, its database, photo storage, and server-side Edge Functions. Data is separated by user account, with access protected by database policies and server functions.

If you choose Google sign-in, Google provides Supabase with the information required to create or sign in to your account. Moody does not receive your Google password.

Journal content, photos, and encryption

We use your entries, reflections, moods, photos, and other personal content to provide the features you choose. Selected sensitive text fields are encrypted on the server before storage; photos are held in protected Supabase storage.

Moody is not a fully end-to-end encrypted service. Authorized server functions must be able to decrypt or retrieve content to perform requested processing, export, or deletion.

Voice input and transcripts

Speech recognition starts only when you request it and uses the system service available on your device. Voice-processing terms may differ by operating system and device settings. Moody does not store the audio recording as a file; it inserts the resulting transcript into your draft. If you then use an AI feature, that transcript may form part of the text sent for processing.

AI processing and OpenAI

AI features are a core part of Moody. Before using them, you must separately confirm that selected content may be sent securely through server functions to OpenAI for the AI feature you request. Without a current confirmation, the server rejects the AI request.

Depending on the feature, processed content may include text, photos, voice-input transcripts, moods, reflections, and necessary context. We use OpenAI only to produce the requested output; secret API keys are not included in the app or website.

You can revoke the confirmation in settings, which blocks new AI requests until you confirm again. You can separately delete stored AI analyses. AI outputs can be edited, rejected, or deleted. OpenAI retention is governed by the provider configuration and applicable terms; we do not promise a fixed third-party period that we cannot independently verify.

Subscriptions, RevenueCat, and Google Play

Google Play processes purchases and subscription status, and we use RevenueCat to synchronize subscription entitlements. Moody does not receive full payment-card details; it receives technical information needed to determine whether an entitlement is active.

Deleting your Moody account removes its associated RevenueCat customer profile as part of our deletion flow, but does not itself cancel an active subscription managed by Google Play. You must manage or cancel that subscription separately in Google Play.

Service providers and transfers

We use Supabase (infrastructure and data), OpenAI (requested AI processing), RevenueCat (subscription entitlement management), Google (sign-in and Google Play), and the device system speech-recognition provider. These providers may process data outside your country under their applicable terms and data-transfer safeguards.

Security

We use HTTPS transport, access controls, database policies, server functions, protected secret storage, and server-side encryption for selected sensitive fields. No service can guarantee absolute security. The Moody PIN and biometric lock protect local access on the device; they are not account-security substitutes or full E2EE.

Retention and deletion

We retain data while your account exists and afterward only where necessary to provide the service, maintain security, comply with law, or resolve claims. You can delete individual content and stored AI analyses in the app. Full account deletion removes user data from the database, photos from storage, the Supabase Auth user, and the associated RevenueCat customer profile. Independent providers may retain limited records where necessary, for example Google Play transaction records required for legal or accounting purposes.

Your rights

Subject to applicable law, you may request access, correction, export, or deletion; object to or restrict processing; and complain to the relevant supervisory authority. Many actions are available directly in the app. Use the contact above for other requests. We may reasonably verify account ownership before fulfilling a request.

Nature of the service

Moody is a tool for personal reflection and memories. It is not a medical, diagnostic, therapeutic, or crisis service, and AI outputs are not professional health advice. In an emergency, contact local emergency services or a qualified professional.