Privacy Policy
July 6, 2026
This policy explains what MoodEvo ("we", "us") collects when you use moodevo.com, why, and what control you have over it. It's written to match what the product actually does — where we simplify for readability, the underlying behavior is still accurate as of the date above.
MoodEvo is operated as described at moodevo.com. This document is a template accurate to our current architecture and is not a substitute for advice from a lawyer qualified in your jurisdiction.
1. What we collect
- Account data: your email address, a password (stored only as a salted PBKDF2-SHA256 hash — we never see or store it in plain text), an optional display name and avatar choice, and your language preference.
- Mood entries: the mood(s) you log, intensity, optional notes, tags for context (sleep, activity, people, place) and triggers — all tied to your account, never shared publicly.
- Community content: posts and comments you choose to publish, shown under an auto-generated pseudonymous alias rather than your name or email. We still link posts to your account internally so we can let you delete your own content and so moderators can act on reports.
- AI coach data: your conversations with the AI coach, and a periodically generated aggregate summary of your mood entries (e.g. "most frequent mood, average intensity, common triggers over 7 days") that gives the AI context. The AI does not receive your raw private notes.
- Technical data: IP address (used transiently for rate-limiting and bot verification, see Section 4), browser cookies (Section 3), and standard Cloudflare server logs, which do not contain your content.
2. Why we collect it
- To provide the core product: storing and displaying your mood history, rendering analytics, running the community feed, and powering AI coach conversations.
- To keep your account secure: password hashing, session tokens, and rate limiting against automated abuse.
- To detect and respond to safety concerns: message and post content is scanned locally (no third-party service) for crisis-related language (e.g. self-harm, suicide) so we can surface hotline resources — this never blocks your ability to post, and is not used for any purpose beyond showing support resources and flagging content for human moderation if reported.
- To send transactional email: solely a password-reset link when you request one. We do not send marketing email.
3. Cookies
- moodevo_session — httpOnly, holds your signed sign-in token. Required to stay logged in.
- moodevo_locale — remembers your language choice (English/中文).
- moodevo_demo — set only if you use "Try demo" (guest mode); expires after 2 hours and enables no real data storage.
- We do not use third-party advertising or analytics cookies.
4. Third parties we use to run the service
- Cloudflare (Workers, D1, Workers AI, Turnstile) — hosts the entire application, database, and the AI models that power the coach feature, and provides bot-verification on login/signup. Cloudflare processes data as our infrastructure provider under its own privacy commitments.
- Resend — sends the single transactional email type we generate (password-reset links). It receives your email address and the reset link only.
- We do not sell, rent, or share your personal data with data brokers, advertisers, or any party not listed here.
5. Data retention and deletion
- Your data is retained for as long as your account exists.
- You can permanently delete your account at any time from Settings → Danger Zone, with password confirmation. This immediately and irreversibly removes your account, entries, community posts/comments/likes/follows, and AI coach conversations.
- Password-reset tokens expire after 30 minutes and are single-use regardless of whether they're consumed.
6. Your rights
- Access & export: download all your mood entries as JSON or CSV from Settings at any time.
- Correction: update your display name, avatar, and language directly in Settings.
- Deletion: delete your account and all associated data yourself, at any time, from Settings.
- Depending on where you live, you may have additional rights (e.g. under GDPR or CCPA) to object to or restrict certain processing. Contact us at hello@moodevo.com and we'll respond to verified requests.
7. Children's privacy
- MoodEvo is not directed at children and is not intended for use by anyone under 13 (or the minimum age required by your local law, if higher). We do not knowingly collect data from children under that age.
8. Changes to this policy
- If we materially change what we collect or how we use it, we'll update the date at the top of this page and, where required, notify you directly.
9. Contact
- Questions about this policy or your data: hello@moodevo.com.