1. Scope and operator

This Policy applies to the MoodFlow Android and iOS apps, this website, and related cloud services. The data controller is the legal developer or seller shown in the applicable Google Play or App Store listing. Questions and privacy requests may be sent to esthermhysuppor@gmail.com.

2. Data we process

The exact data depends on the features you use.

3. How we use data

We use data to create and secure your account, synchronize content across your devices, upload and retrieve selected media, resolve conflicts, provide support, prevent abuse, comply with law, and process privacy requests. MoodFlow version 1 contains no advertising, subscription, or generative-AI service.

4. Local and cloud storage

MoodFlow is local-first. Content is stored in the app's private device storage. When you sign in and use synchronization, required records are transmitted over HTTPS to MoodFlow cloud services. Selected media is stored in a private object-storage bucket and is accessed only through short-lived authorization.

5. Providers and disclosure

We use contracted infrastructure, object-storage, security, and support providers only to operate the service. They may process data under our instructions and contractual safeguards. We do not sell personal data, share it for cross-context behavioral advertising, or provide it to data brokers. We may disclose the minimum necessary data when legally required or to protect users and the service.

6. International processing

Data may be processed outside your country, including in China where current production infrastructure is located. Where applicable, we use contractual, access-control, encryption, and transfer safeguards required by local law. Availability in a country does not waive your statutory rights.

7. Retention

Account and synchronized content are retained while your account is active. A verified deletion request locks the account and revokes active sessions immediately; active-system deletion is targeted within 30 days. Encrypted rotating backups expire within 45 days. Limited security-event records may be retained for up to 13 months where necessary for fraud prevention, legal obligations, or dispute evidence.

8. Your choices and rights

You can disable optional diagnostics, remove individual cloud media, request access or export, correct account details, object to or restrict processing where applicable, and request account deletion. Use the public Delete account page or contact support. We may verify identity before acting on a request.

9. Security

We use HTTPS, private storage, short-lived media credentials, password hashing, rotating sessions, device signing, least-privilege access, backups, and service monitoring. No system is completely secure; protect your password and report suspected unauthorized access promptly.

10. Children

MoodFlow is not directed to children under 13. Users must meet the minimum digital-consent age in their location. We do not knowingly collect a child's personal data without legally required authorization.

11. Health and safety

Mood and wellbeing entries may be sensitive. MoodFlow handles them as private reflection and habit-management content, not medical records. MoodFlow is not a medical provider, therapist, diagnostic tool, or emergency service.

12. Changes and contact

We may update this Policy when practices or law change. Material changes will be announced through the app or website where appropriate. Contact esthermhysuppor@gmail.com with privacy questions or requests.