Moodii Limited Privacy Policy

Last Updated 30/08/2026

1. Who we are and what this policy covers
This Privacy Policy explains how Moodii ("we", "us", "the App") collects, uses, stores, and shares personal data when you use our mobile app on iOS and Android. Moodii lets you share mood check-ins with people you choose in private "bubbles". We are the data controller for the personal data described here.

Questions about this policy, your account, or your data rights: help@moodiiapp.co.uk.

2. What data we collect
We collect only what we need to run the App:

Account & identity: display name, email address, date of birth (for age eligibility), account identifiers, and optional profile settings.

Mood & emotional data (special category under UK GDPR): mood check-ins, optional causes and needs, mood history within bubbles you target, in-app support signals (for example virtual nudges), SOS status where used, and related interaction history.

Bubble & social graph: bubble memberships, roles, invite codes you use or generate, join requests, and settings needed to show the right people the right information.

Device & technical data: IP address, device identifiers, app version, crash/diagnostic logs used for security, fraud prevention, and performance.

Push notifications: device push tokens when you enable notifications (for example invites, nudges, or SOS-related alerts).

SOS location (optional): if you use SOS and grant permission, we may process location coordinates to help trusted bubble members respond. Location is not used for advertising or unrelated tracking.

Subscriptions: subscription and entitlement status from Apple, Google, and our subscription partner (RevenueCat). We do not receive your full payment card number.

We do not sell your personal data or mood data. We do not use your mood data for third-party advertising.

3. Legal bases (UK GDPR)
We rely on different legal bases depending on the processing:

Contract: to provide the App, your account, bubbles, check-ins, and core features you request.

Explicit consent: for mood and other special-category emotional data. You provide this when you choose to check in and share within selected bubbles. You may stop sharing by not checking in or by leaving a bubble, subject to retention rules below.

Legitimate interests: security, abuse prevention, service reliability, and improving the App, balanced against your rights.

Legal obligation: where we must comply with applicable law or valid legal requests.

4. Who can see your moods
Moodii is private by design:

Moods are visible only to members of the bubbles you target for that check-in. They are not visible on the public internet, and not to people outside those bubbles.

Bubble separation: data in Friends, Family, and Partner bubbles is kept logically separate; members of one bubble do not automatically see moods you shared only in another.

You are responsible for choosing trustworthy bubble members. Do not share invite codes publicly.

5. Confidentiality and acceptable use
Your moods and other members' moods are confidential. They are shared inside Moodii for supportive connection between people who have joined the same bubble.

You must not, without the relevant person's clear permission: screenshot, record, copy, or republish another person's mood check-ins or mood history outside the App; share mood data on social media, messaging apps, or any public channel; or use mood data to harass, bully, shame, or discriminate.

Breaches: we may warn you, restrict features, remove you from bubbles, or permanently delete your account if we find misuse. Report concerns to help@moodiiapp.co.uk.

6. How we use data
We use data to: operate accounts, bubbles, check-ins, mood maps, Synergy Radar, Bubble Watch, and in-app support features; deliver notifications you allow; process Moodii+ subscriptions and entitlements; verify age eligibility; detect abuse; enforce our Terms of Service; and comply with legal requests where required.

We do not use mood data to train third-party advertising models.

7. Service providers (processors)
We use trusted providers who process data on our instructions, including:

Supabase: authentication, database, and backend hosting.

RevenueCat: subscription and purchase status (with Apple App Store / Google Play).

Apple / Google: app distribution and in-app payments.

Push notification infrastructure (platform notification services): to deliver alerts you enable.

These providers are bound by contract to protect your data. A current list is available on request at help@moodiiapp.co.uk.

8. Age eligibility (13 and over)
Moodii is intended for users aged 13 and over only. Users aged 13 to 15 use the same standard account type as older users; we do not operate a separate "child" or "teen" account tier, parental monitoring dashboard, or parent–child account linking.

We do not knowingly collect personal data from children under 13. Moodii is not directed at children under 13, and we do not market the App to them.

Before you can create an account, you must confirm that you are at least 13. During onboarding we ask for your date of birth to verify eligibility. These checks reduce the risk of underage sign-up but cannot guarantee that every user tells the truth.

If you are aged 13 to 17, we recommend using Moodii with the knowledge of a parent or legal guardian, especially before sharing emotional information or joining bubbles with people you do not know well in real life.

Parents and legal guardians: if you believe your child under 13 has created an account (for example by misrepresenting their age at sign-up), please email help@moodiiapp.co.uk as soon as possible. Include the account email address (if known), your relationship to the child, and any relevant details. We will investigate promptly and, where appropriate, delete the account and associated personal data from our production systems.

Actual knowledge of an under-13 user: under UK GDPR and similar laws (including US COPPA-style rules for services not directed at children under 13), if we obtain actual knowledge that a registered user is under 13 (for example because they tell us in a support email, contact form, or other message), our response is to delete that user's account and purge their personal data from our active production database as soon as reasonably practicable. We do not retain such accounts once we know the user is under 13.

If you believe any other person under 13 has an account, you may also report it to help@moodiiapp.co.uk and we will take the same steps after verification.

9. One account type, no special minor data pools
Every Moodii account is treated under the same privacy and security standards described in this policy. We do not maintain separate "restricted" data pools, parental tracking chains, or specialised caches solely because a user is under 18.

We do not store parent–child relationship links for the purpose of monitoring a child's activity, and we do not provide a parental dashboard showing a dependent's mood history. Bubble membership is chosen by each user through invites they accept; we do not operate a guardian-approval layer for standard account features.

This single-account model means your data is handled consistently with every other user's data, subject to the bubble privacy rules above. It is not under a separate minor-specific processing regime.

10. Retention and account deletion
We keep data while your account is active and as needed to provide the service.

Delete your account: Settings → Account Details → Delete Account & Data. After you confirm, we delete your account and associated emotional history from our active systems within 30 days. Backups and legal retention may hold limited data for a short period where required by law, then they are removed or anonymised. Deletion is irreversible.

If we delete an account because we have actual knowledge that the user is under 13, we prioritise removal from our active production database as soon as reasonably practicable, typically without waiting for the standard self-service deletion window.

This meets Apple and Google requirements for in-app account deletion.

11. International transfers
We aim to store and process data in the UK/EEA. If data is transferred outside the UK/EEA (for example where a sub-processor operates globally), we use appropriate safeguards such as the UK International Data Transfer Agreement and/or EU Standard Contractual Clauses, so your data remains protected to UK GDPR standards.

12. Security
We use technical and organisational measures appropriate to the sensitivity of mood data (including access controls and encryption in transit). No system is completely secure; please use a strong password and keep your device secure.

If we become aware of a personal data breach likely to affect your rights, we will notify you and/or regulators as required by law.

13. Your rights
Under UK GDPR you may have the right to: access your data; rectify inaccurate data; erase your data ("right to be forgotten"); restrict or object to certain processing; data portability; withdraw consent (where processing is based on consent); and complain to the ICO (ico.org.uk).

To exercise rights, email help@moodiiapp.co.uk. We may need to verify your identity. We will respond within one month (or explain if we need longer).

14. Subscriptions (Moodii+)
Paid features are billed through the Apple App Store or Google Play. Subscriptions renew automatically unless you cancel in your store account settings before the renewal date. Refunds are handled under store policies. We receive subscription status, not your full card number.

Users under 18 should obtain a parent or guardian's permission before starting a paid subscription on a shared family payment method.

15. Changes to this policy
We may update this policy. We will post the new version in the App with a new "Last updated" date. Significant changes may be highlighted in-app where appropriate.

16. Contact and complaints
You may lodge a complaint with the UK Information Commissioner's Office if you believe we have mishandled your data.

Privacy & support: help@moodiiapp.co.uk