This Privacy Policy explains how MoodSpace ("MoodSpace", "we", "us", or "our") collects, uses, shares, and protects information when you use the MoodSpace mobile and web applications and related services (collectively, the "Service").
MoodSpace is designed to support emotional communication between teens and parents through mood check-ins, journaling, and private family messaging. Because the Service is intended for use by minors with parental involvement, we treat the information you share with us as sensitive and handle it accordingly.
By using MoodSpace, you agree to the practices described in this Policy. If you do not agree, please do not use the Service.
Contents
- Who we are
- Who can use MoodSpace
- Information we collect
- How we use information
- Legal bases (EEA/UK)
- How information is shared
- International data transfers
- Data security and encryption
- Data retention
- Your rights and choices
- Push notifications and communications
- Children's privacy
- Changes to this Policy
- Contact us
1. Who we are
MoodSpace is the data controller for personal information processed through the Service. If you have questions about this Policy or your data, contact us at the address in Section 14.
2. Who can use MoodSpace
MoodSpace is intended for:
- Teens, used with the knowledge and involvement of a parent or legal guardian.
- Parents and legal guardians of those teens.
We do not knowingly create accounts for children under the minimum age required by applicable law in your jurisdiction without verifiable parental consent (for example, under 13 in the United States, or under 16 in parts of the EEA/UK). Where required, a parent or guardian must consent to the creation and use of a teen's account.
If you believe a child has provided us with personal information without appropriate parental consent, contact us and we will delete the relevant data.
3. Information we collect
3.1 Information you provide
- Account information: email address, password (handled by our authentication provider), username, display name, role (teen or parent), and avatar.
- Profile information: birthdate (used to calculate age and tailor the experience), themes, preferences, timezone, notification settings, and check-in reminder time.
- Mood and wellbeing data: mood selections (emoji/category), intensity ratings, optional notes, optional voice messages, and context tags associated with check-ins.
- Journal content ("Daily Reflections"): written reflections you save in your private space, including text and derived metrics such as word and character counts.
- Messages: the content of chats you send within MoodSpace, including text, optional voice messages, attached media, mood shares, and read state.
- Family connections and invitations: information you provide when inviting or linking family members, such as the invitee's name, email address, phone number, age (for child invitations), invitation codes, and chosen avatar metadata.
- Support communications: information you share when you contact us for help or feedback.
3.2 Information collected automatically
- Authentication tokens and session data: stored securely on your device (using platform secure storage where available) to keep you signed in.
- Service usage data: limited operational logs needed to run the Service, including timestamps, streak and check-in counts, points and rewards activity, and similar in-app metrics.
- Safety and audit logs: where authorized administrative review occurs (for example, when reviewing a reported chat), we may log the reviewer, the time of access, the duration of the review, the reason, and the IP address used to perform that review. We do not routinely log end-user IP addresses for ordinary product features.
- Device and technical information: information necessary to operate the app on your device, such as a basic client identifier sent with API requests (e.g.
moodspace-app).
3.3 Information from third-party sign-in providers
If you sign in using Google or Apple, we receive the basic profile information those providers share with us (such as your name, email address, and a unique provider identifier) as permitted by your settings with that provider.
3.4 What we do not collect
- We do not collect precise location data.
- We do not access HealthKit, Google Fit, or other health platform data.
- We do not knowingly collect biometric identifiers.
- We do not currently process payments and do not collect payment card information.
If we add such features in the future, we will update this Policy and obtain any consents required by law.
3.5 Camera, photos, microphone, and notifications
With your permission, MoodSpace may access:
- Your camera and photo library, only to let you choose or take a profile photo.
- Your microphone, only to record voice messages or voice check-ins where that feature is available.
- Push notifications, only to deliver reminders, family activity, and messages you have asked to receive.
You can change or withdraw these permissions at any time in your device settings.
4. How we use information
We use the information we collect to:
- Provide, operate, and maintain the Service, including mood check-ins, journaling, messaging, family linking, points/streaks, and notifications.
- Authenticate you, secure your account, and prevent abuse, fraud, and unauthorized access.
- Personalize your experience (for example, themes, reminders, age-appropriate content).
- Enable family features, including sharing mood check-ins, reflections, and messages with linked family members in accordance with permissions you (or, for younger teens, a parent) have configured.
- Send transactional messages, such as invitation emails, password resets, and important service notices.
- Respond to your support requests and feedback.
- Detect, investigate, and respond to safety, security, or policy issues, including reviewing reported content where permitted.
- Comply with legal obligations and enforce our terms.
We do not sell your personal information, and we do not use your mood data, journal content, or messages for advertising.
5. Legal bases for processing (EEA/UK users)
Where the GDPR or UK GDPR applies, we rely on the following legal bases:
- Contract: to provide the Service you've signed up for.
- Consent: for optional features such as push notifications, microphone, camera, and (for younger teens) parental consent for account use.
- Legitimate interests: to keep the Service secure, prevent abuse, and improve reliability, balanced against your rights.
- Legal obligation: where we must process information to comply with applicable law.
You can withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
6. How information is shared
We share information only as described below:
- Within your family on MoodSpace. Mood check-ins, reflections, and messages may be visible to linked parents or family members based on the permissions configured for the account (for example,
parent_can_view_reflections). You and, where applicable, the responsible parent can review and adjust these settings. - Service providers ("processors"). We rely on a small number of vendors to operate the Service. They process information only on our instructions and under appropriate contractual safeguards:
- Supabase — authentication, database, real-time, storage, and edge functions hosting.
- Apple and Google — optional sign-in providers, app distribution, and (where enabled) push notification delivery.
- Resend — sending transactional emails such as invitations.
- Expo (EAS) — building and delivering app updates.
- Legal and safety. We may disclose information if we believe in good faith that it is necessary to comply with law, legal process, or enforceable government request; to protect the rights, property, or safety of users (including minors), MoodSpace, or the public; or to investigate violations of our terms.
- Business transfers. If MoodSpace is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to the protections of this Policy.
We do not share your information with advertisers or data brokers.
7. International data transfers
Your information may be processed in countries other than the one you live in, including in the United States and other regions where our service providers operate. Where required, we use appropriate safeguards (such as the European Commission's Standard Contractual Clauses) to protect international transfers.
8. Data security and encryption
We take the security of your information seriously, particularly given the sensitive nature of mood, journal, and family communications.
- All connections between the MoodSpace app and our servers are protected with TLS (HTTPS) encryption in transit.
- Authentication tokens are stored using your device's secure storage (such as iOS Keychain / Android Keystore) where available.
- Access to data is restricted using row-level security policies, JWT-based authentication, and least-privilege controls on the backend.
- At launch, mood check-ins, journal entries, messages, voice content, and other sensitive user data will be encrypted, both in transit and at rest, in accordance with industry-standard cryptographic practices. Additional details about our encryption approach will be made available as the implementation is finalized.
No security measure is perfect. If we become aware of a security incident affecting your information, we will notify you and the appropriate authorities as required by law.
9. Data retention
We keep your personal information only for as long as is necessary to provide the Service and for the purposes described in this Policy.
- Active accounts: information is retained while your account is active.
- Deleted or inactive accounts: when an account is deleted (by you, a parent, or due to prolonged inactivity), associated personal data is removed or anonymized within a reasonable period, subject to backups and to limited records we are required to keep for legal, security, or audit purposes (for example, abuse investigation logs).
- Soft-deleted records: some content is initially marked as deleted before permanent removal, so that accidental deletions can be recovered for a limited time.
10. Your rights and choices
Depending on where you live, you may have the following rights regarding your personal information:
- Access the personal information we hold about you.
- Correct information that is inaccurate or incomplete.
- Delete your account and associated personal information.
- Export a copy of your data in a portable format.
- Restrict or object to certain processing.
- Withdraw consent where processing is based on consent.
- Lodge a complaint with your local data protection authority.
For teen accounts, a parent or legal guardian may exercise these rights on the teen's behalf where appropriate.
To exercise any of these rights, contact us at the address in Section 14. We will respond within the timeframes required by applicable law. You can also manage many settings directly in the app (profile information, family links, notification preferences, and visibility settings).
11. Push notifications and communications
If you enable push notifications, MoodSpace may send you check-in reminders, family activity alerts, and other in-app updates. You can disable notifications at any time from your device settings or from the in-app notification preferences.
We may send you transactional emails (such as account verification, password reset, and invitations) that are necessary to operate your account. We do not send marketing emails without your consent.
12. Children's privacy
MoodSpace is designed with minors in mind and includes parent-managed features. We:
- Require parental involvement for younger teen accounts in line with applicable law.
- Do not knowingly collect more personal information from children than is necessary to provide the Service.
- Do not use children's data for behavioral advertising or sell it to third parties.
- Provide controls so that parents and teens can manage what is shared and with whom within their family.
If you are a parent or guardian and believe your child has provided personal information to MoodSpace without your consent, please contact us so we can review and, where appropriate, delete that information.
13. Changes to this Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you through the app, by email, or by other appropriate means, and update the "Last updated" date at the top of this Policy. Your continued use of the Service after the changes take effect means you accept the updated Policy.
14. Contact us
If you have questions, concerns, or requests about this Policy or your personal information, contact:
MoodSpace Privacy Team
Email: privacy@moodspace.app
We will do our best to respond promptly and resolve any concerns you have.
Ready to build healthy phone-era habits as a family?
MoodSpace is built for families who want practical, kind, and sustainable routines that support communication when life gets busy.