Privacy Policy

Last Updated: October 12, 2026

This update adds a more detailed description of health-data processing and AI services (Vertex AI Gemini), new sub-sections §3.1–§3.4 (mood data, AI, other uses, audit log) and a retention table in §6. Your previously granted consents remain valid.

1. Introduction

This Privacy Policy explains how Mood Al s.r.o. (“we,” “us,” or “our”) collects, uses, and protects your personal information when you use the Partner Mood application (“App”) and website (“Service”).

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy.

Company Information:

• Company: Mood Al s.r.o.
• Address: Granitova 1115/4, Praha, 198 00, Czech Republic
• Company ID (IČO): 240 00 183
• Contact: [email protected]

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, name (optional), profile settings
• Mood Data: Daily mood entries, optional context notes, timestamps
• Partner Connection: Pairing code used to connect with your partner
• Communication: Messages you send to our support team

2.2 Information Collected Automatically

• Usage Data: App interactions, features used, session duration
• Device Information: Device type, operating system, app version
• Technical Data: Crash reports without a user identifier (see §8.2), performance metrics

2.3 Information We Do NOT Collect

• Location data (unless you explicitly enable context features)
• Contact lists or address books
• Photos or media (unless you upload them)
• Payment card details (payments are handled by the Apple App Store / Google Play; we receive only your subscription status — see §4.2)

2.4 Health Data Categories

If you enable health-data integration (Apple HealthKit / Health Connect), we process the following categories locally on your device only (raw data never leaves your device):

• Sleep (HealthKit / Health Connect) — used as a wellbeing signal in mood insights.
• Activity (steps, heart rate, calories) — same as above.
• Menstrual cycle — a sensitive category under GDPR Art. 9. Processed locally only. Only an aggregated wellness score (e.g. “cycle phase – mood impact = -0.3”) reaches our backend; no raw cycle, ovulation or menstruation data.

You can enable or disable these categories at any time in Settings → Privacy → Integrations. Disabling immediately stops data reads; already aggregated historical scores remain until you delete your account.

2.5 Calendar Data (optional)

If you enable calendar context, we read your upcoming calendar events (title, time, and related details) to understand how busy your days are and add context to your mood insights. Calendar data is retained for 90 days on a rolling basis (see §6) and can be disabled at any time in Settings.

3. How We Use Your Information

3.1 Mood Data

We use your mood logs (numeric value 0–100, optional note, timestamp) to:

• Display your trends (daily / weekly / monthly charts)
• Share with your paired partner (after mutual consent via pairing code)
• Generate AI insights (see §3.2)
• Produce anonymized usage statistics

Mood logs are retained until you delete your account (Settings → Delete Account; 30-day recovery window — see §6).

3.2 AI Processing

Partner Mood and our social media communication use AI services from these providers:

• Google Cloud (Vertex AI) — avatar generation: when you upload a photo for your avatar (optional), it is sent for processing that takes a few seconds. Per Vertex AI terms Google does not retain the photo. The resulting stylized avatar is stored in our Cloud Storage linked to your account.
• Google Cloud (Vertex AI) — relationship insights and partner mood interpretation: we send a structured context (your mood, your partner's mood, trends, weather and stress signals — none of your free-text notes) and briefly cache the result (see §6).
• Google Cloud (Vertex AI) — comment processing (backup service): when the main service below is unavailable, it processes the comment from the same data for the same purpose.
• Anthropic — processing comments on our Facebook and Instagram profiles and under our blog articles: sorting comments, suggesting replies, automatic replies to common questions and translating replies. It processes the comment text, the related post or thread and the comment author's display name. Mood data from the App never goes here.
• Anthropic — AI agents of our platform: analysis of aggregated operational data and text suggestions. They work only with aggregated or pseudonymised data — never with names, emails or the content of your mood entries.
• OpenAI — comment processing (alternative service): used only if we configure it instead of the services above — with the same data and for the same purpose.

We name the providers, the purposes and the kinds of data. The specific AI models a provider uses may change — this does not change the scope of the data we share.

Your control over AI processing: You can turn AI processing off at any time in Settings → Privacy → AI Processing. Existing data (mood logs, avatar, already-cached insights) is preserved. New AI processing stops immediately.

3.3 Other Uses

We also use your information to:

• Operate and maintain the App (authentication, device sync)
• Produce anonymized usage statistics (counts, engagement metrics)
• Diagnose errors and improve the App
• Comply with legal obligations (audit log — see §3.4)

We do NOT use your data for:

• Selling to third parties
• Ad targeting or marketing profiling
• Any purpose unrelated to providing the Service

3.4 Consent Audit Log (GDPR Art. 7)

We record every change to your consents (registration, AI on/off, marketing) in an audit log to satisfy GDPR Art. 7 (“ability to demonstrate consent”). The audit log contains the consent type, status (granted / withdrawn), timestamp, and source (registration / settings / account deletion).

You can view the audit log in the app: Settings → Privacy → Consent History.

4. Data Sharing

4.1 With Your Partner

When you pair with a partner, they can see:

• Your mood entries and timestamps
• Shared compatibility analytics
• AI-generated relationship insights

You control this connection and can unpair at any time.

4.2 With Service Providers

We use third-party services to operate our App and website:

We share with these providers only the data needed for the stated purpose, and they process it on our behalf.

For some services the provider acts as an independent controller of its own service and processes data under its own privacy policy, not on our behalf:

• Apple (Přihlášení přes Apple) — Sign in with Apple and revoking access for your Apple ID when an account is deleted. Data: One-time authorization code, refresh token and app identifier (no content of your entries).

Resend uses its own sub-processors to deliver email. Resend publishes the current list at https://resend.com/legal/subprocessors, and our data processing agreement requires Resend to notify us 14 days before any change to it. Privacy questions about Resend’s processing can be sent to [email protected].

Resend: Processed for the term of our contract with Resend; once that account is closed, Resend deletes the data within 90 days.

4.3 Legal Requirements

We may disclose your information if required by law or in response to valid legal requests from public authorities.

5. Data Security

We use reasonable efforts to protect your data, including:

• Strict security encryption standards for data in transit and at rest
• Secure authentication mechanisms
• Regular security assessments
• Limited employee access to personal data

While we implement reasonable security measures, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security but are committed to using reasonable efforts to protect your data.

6. Data Retention

Retention period per data category:

Account deletion starts a 30-day soft-delete period during which you can recover your account by contacting [email protected]. After 30 days the deletion is permanent and includes the consent audit log.

If you use the app as a guest (without registering), have no linked partner and no active Premium, and do not open the app for 180 days, we will automatically and irreversibly delete your guest account and its data. We will not warn you beforehand, because we have no contact details for a guest account. If you open the app during that time, the 180 days start again.

Anonymized data: We may retain anonymized, aggregated data for analytics even after account deletion.

7. Your Rights (GDPR)

If you are in the European Economic Area (EEA), you have the following rights:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data (“right to be forgotten”)
• Export: Receive your data in a portable format
• Objection: Object to certain processing activities
• Restriction: Request limited processing of your data

To exercise these rights, contact us at [email protected]. We will use reasonable efforts to respond within 60 days. In complex cases, this period may be extended by an additional 60 days, and we will inform you of such extension.

8. Cookies and Tracking

8.1 Website

We measure website traffic with our own simple setup on Cloudflare Workers Analytics Engine. When a page loads, only a record without identifiers is stored: the page visited, language, country (derived from the IP address; the IP address itself is not stored), whether the visitor is a person or a bot, and the source of the visit (for example a search engine, a referring website or a campaign); on the download page, also that you continued to the App Store or Google Play. We do not store your IP address or any identifier of you or your device, and we do not link this data to an App account. Records are deleted automatically after about 3 months; only daily aggregate numbers are kept long term.

For measuring traffic we store no cookies or other identifiers on your device. If you arrive from another website or a campaign and we redirect you to the language version of a page, a technical parameter, pm_src, with a label for the source of the visit (for example “search”), may briefly appear in the address. It is used only so that one visit is not counted more than once; it is removed from the address as soon as the page has loaded and is not stored anywhere. It is not used for advertising or for tracking across websites.

8.2 App

The App does not use advertising trackers. To improve the App we use Google Analytics for Firebase. We do not use analytics data for ad targeting or marketing profiling, and we do not sell it.

We measure how the App is used so that we can improve it. We use these services for this:

• Google Analytics for Firebase — Analysing how the App is used and improving it. Data: Events in the App (e.g. viewing the subscription offer, a purchase, sign-up) without the content of your entries; app instance identifier; pseudonymous user identifier (only with consent, from App version 1.4.0). Retention: event-level data for 14 months, after which it is deleted automatically. Where: USA.
• Google Cloud (BigQuery) — Storage of the exported App usage analytics. Data: Events in the App (e.g. viewing the subscription offer, a purchase, sign-up) without the content of your entries; app instance identifier; pseudonymous user identifier (only with consent, from App version 1.4.0). Retention: 14 months, after which it is deleted automatically. Where: EU.

We do not sell analytics data or use it for ad targeting or marketing profiling: we do not collect the device advertising identifier, advertising consents are turned off, and we do not share the data with Google for its own purposes. We do not send your name, email or the content of your entries to analytics.

We use analytics only with your consent. In the App this is a separate choice, “Analytics & app improvement”. You will find it on the initial consent screen, where you can tick it on its own or use the “Allow all” button (which includes consent to analytics) or the “Essential only” button (analytics stays off); on a one-time card on the home screen; and at any time under More → Privacy & consents. Analytics collection is switched off in the App by default: until you give consent, nothing is sent to Google Analytics. Only with your consent do we link analytics to the pseudonymous user identifier. This applies from App version 1.4.0.

You can withdraw your consent at any time by switching the choice off under More → Privacy & consents; withdrawal takes effect immediately. The App then stops sending anything to Google Analytics, deletes the analytics data stored on the device together with the app instance identifier (a new one is created if you consent again) and disconnects the pseudonymous user identifier. Data sent before withdrawal is deleted automatically when the retention period stated above expires.

Only with your consent to analytics do we also pass to RevenueCat (subscription management, see §4.2) the app instance identifier and information about how you found the App (source and campaign), and on iPhone the Apple attribution token (AdServices), which RevenueCat uses to determine whether the App was downloaded through our campaign on the App Store. This tells us which of our campaigns bring in users. If you withdraw consent, we delete the app instance identifier, source and campaign at RevenueCat. An Apple attribution token that has already been sent cannot be deleted; after withdrawal, no further token is sent.

Older versions of the App (before version 1.4.0) send usage events to Google Analytics without advertising identifiers and without a user identifier, on the basis of our legitimate interest in improving the App. You can object to this at any time by emailing [email protected] (see §7), and we will stop the processing.

To keep the App stable, we also use this service, regardless of your consent to analytics:

• Firebase Crashlytics — Crash and error reports from the App. Data: Crash or error report (technical description of the error, state of the App at the time of the error, device type, operating system and App version, installation identifier) without a user identifier, name, email or the content of your entries. Retention: 90 days, after which they are deleted automatically. Where: USA.

We send crash reports on the basis of our legitimate interest in a stable and secure App, so we do not need your consent for them, and the “Analytics & app improvement” choice does not affect them. We do not attach a user identifier, your name, email or the content of your entries to them. You can object to this processing at any time by emailing [email protected] (see §7).

8.3 Emails

In the emails we send you (both service and marketing emails), we measure link clicks: a link briefly passes through a server of our processor Resend (see §4.2) before taking you to the destination page. This only tells us which link you clicked, so that we can improve the content and measure what works. The legal basis is our legitimate interest in measuring how effective our communication is. We do not sell this data or use it for advertising or marketing profiling (see §3.3). We keep it for 24 months after the email is sent; after that it is deleted automatically. You can unsubscribe from marketing emails using the link in the footer of every email.

9. Age Restrictions

Partner Mood is intended for users aged 18 and older. We do not knowingly collect personal information from anyone under 18 years of age. If we discover that we have collected data from someone under 18, we will delete it promptly.

10. International Data Transfers

Some data is processed by providers outside the European Economic Area, mainly in the United States:

• Google Firebase (USA), Firebase Crashlytics (USA), Google Cloud (Vertex AI) (USA), OpenAI (USA), RevenueCat (USA), Google Weather API (Google Maps Platform) (USA), Google Analytics for Firebase (USA), Meta (Facebook, Instagram) (USA), Telegram (outside the EEA), Google (Gmail) (USA), Cloudflare (USA), Google Fonts (USA). We use reasonable efforts to ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.
• Anthropic (Anthropic Ireland, Limited; USA). Transfers are made under the Standard Contractual Clauses, incorporated into our data processing agreement with the provider.
• Resend (Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA). Transfers are made under the Standard Contractual Clauses, together with the UK Addendum, incorporated into our data processing agreement.

11. Limitation of Liability

We use reasonable efforts to protect your personal data and comply with applicable privacy laws. However, we shall not be liable for any unauthorized access, data breaches, or data loss caused by circumstances beyond our reasonable control, including but not limited to: acts of third parties, technical failures of third-party service providers, or force majeure events.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Posting the new Privacy Policy in the App
• Updating the “Last Updated” date at the top
• Sending an email notification for material changes

Your continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have questions about this Privacy Policy or your personal data, please contact us:

Mood Al s.r.o. Granitova 1115/4 Praha, 198 00 Czech Republic

Email: [email protected]

© 2026 Mood Al s.r.o. All rights reserved.