Last updated: 10 May 2026
Moodz is a character-driven emotional wellness brand based in Portsmouth, United Kingdom. The Moodz app is published by Moodz. The data controller for any personal data described in this policy is Moodz, contactable at contact@moodz.xyz.
This policy covers both the Moodz mobile app (iOS and Android) and the moodz.xyz website. It applies in addition to the Apple App Store and Google Play Store privacy practices for app distribution.
We process the minimum data required to operate the app. Every purpose is listed below, with the lawful basis under UK GDPR and what you can do to opt out.
| Purpose | What's processed | Lawful basis | Opt-out |
|---|---|---|---|
| Mood tracking | Mood entries, journal notes, level progress, streak data, app preferences. Stored only on your device. | Not processed by us — we never receive this data. | Don't use the feature, or delete the app to wipe it. |
| Subscription management | Anonymous device identifier, subscription status (active / lapsed / refunded). Processed by RevenueCat on our behalf. | Performance of contract (UK GDPR Art. 6(1)(b)) — needed to deliver Pro features you've paid for. | Don't subscribe to Pro. The free tier requires no data processing. |
| Anonymous analytics | Which screens are opened, how long sessions last, app version, generic device type. No identifiers, no IP storage, no cross-session tracking. Processed by TelemetryDeck. | Legitimate interests (UK GDPR Art. 6(1)(f)) — to understand which features are used and prioritise development. | Settings → Privacy → toggle "Help improve Moodz" off. Default is off — you opt in, not out. |
| Newsletter signup | Email address only. Stored in our Supabase database. | Consent (UK GDPR Art. 6(1)(a)) — you give it by typing your email and submitting the form. | Email contact@moodz.xyz with "unsubscribe" — we'll remove you within 7 days. Or click the unsubscribe link in any email we send. |
| UK Mood Map voting | Your selected mood and city. We store a one-way hash of (your IP + the day's date + a server-side secret) to prevent multiple votes per day per device. Raw IPs are not stored. | Legitimate interests (UK GDPR Art. 6(1)(f)) — to provide a fair, abuse-resistant aggregate view of UK mood. | Don't vote. The map is browsable without participating. |
| Bot prevention (Cloudflare Turnstile) | Cloudflare runs an invisible challenge in your browser. Cloudflare may receive technical signals (browser type, screen size, mouse/touch behaviour) for the duration of the challenge. | Legitimate interests (UK GDPR Art. 6(1)(f)) — to prevent vote spam and abuse. | Voting requires this. Browsing the map and using the app does not. |
The following data is stored only on your device, in the app's secure local storage:
If you set a PIN, it's stored only on your device. We can't access or recover it. Biometric authentication (Face ID / Touch ID) goes through your device's secure enclave — we never see your biometric data.
If you delete the app, all of this is permanently deleted. We hold no cloud backup.
We use four third-party services. Each is listed below with the exact data they receive, the reason, and a link to their own privacy policy.
What they receive: An anonymous user identifier we generate (UUID, no link to you), your transaction receipt from Apple or Google, and your subscription status.
What they do not receive: Your name, email, payment card details, mood data, journal entries, IP address as a stored field, or any analytics about how you use the app.
Why: So we can verify whether you've paid for Pro and unlock those features. Without a third-party verification layer, we'd have to build subscription server infrastructure ourselves — which would be less secure and harder to audit.
Their policy: revenuecat.com/privacy
What they receive: Anonymous, aggregated events such as "user opened Insights screen" or "session lasted 4 minutes". Events include app version and a generic device type ("iPhone", "iPad", "Android phone"). The user identifier sent is hashed with rotating salts so the same user appears as a different ID across days — there is no persistent profile.
What they do not receive: Your moods, journal entries, location, name, email, IP address, advertising ID, or anything else that could identify you.
Why: So we know which features people actually use. This drives our development roadmap.
Opt-out: Settings → Privacy → "Help improve Moodz" can be turned off entirely. Default is off.
Their policy: telemetrydeck.com/privacy
What they receive: Newsletter email addresses you give us, and the Mood Map vote records (city, selected mood, hashed IP-per-day token). Hosted in EU (Frankfurt).
What they do not receive: Anything from inside the app. No moods, no journal entries, no app behaviour.
Why: A reliable, EU-hosted database for the two website-only features that need a server.
Their policy: supabase.com/privacy
What they receive: Browser fingerprint signals (Turnstile challenge data) at the moment you submit a Mood Map vote. Cloudflare does not see anything else.
Why: Without bot protection, the public Mood Map would be flooded with fake votes within hours.
Their policy: cloudflare.com/privacypolicy
The moodz.xyz website is mostly static. We collect the following:
We do not use cookies for tracking. The site sets only essential local storage entries needed for the Mood Map (your daily vote record, theme preference). Nothing is shared with third parties from these.
Our website and app may link to third-party websites (e.g. our Instagram, the App Store, NHS resources, charity partners). When you follow such a link, you leave Moodz and the destination's own privacy policy applies. We have no control over how external sites process your data and accept no responsibility for them. We recommend you read the privacy policy of any external site before submitting personal data to it.
Moodz is rated 4+ in the App Store and PEGI 3 on Google Play, which means content is suitable for all ages. Because we collect no personal information from anyone, we collect none from children. We do not knowingly process personal data of children under 13 in the UK or 16 in EU jurisdictions where that's the relevant age. If you believe a child has interacted with us in a way that involves personal data, contact us and we'll act swiftly.
You have the right to:
To exercise any of these rights, email contact@moodz.xyz. We aim to respond within 7 days and complete requests within 30.
App data is stored in your device's encrypted local storage. Newsletter and Mood Map data are held in an encrypted-at-rest Supabase database in the EU. Communication between app, website, and our servers uses HTTPS (TLS 1.2 or higher). We have no payment infrastructure to breach — Apple and Google handle payments, and we never see card details.
If we ever experience a breach affecting personal data, we will notify the UK ICO within 72 hours as required by law and notify affected users without undue delay.
Newsletter and Mood Map data are stored in the EU (Frankfurt). RevenueCat and TelemetryDeck are based in the United States and operate under standard contractual clauses approved by the European Commission for data transfers from the UK and EU to the US.
We may update this policy as the product and applicable laws evolve. We'll update the "last updated" date at the top of this page when we do. Significant changes (new third-party services, new data categories) will also be flagged in-app and via newsletter, where you've signed up for one.
Questions, requests, or concerns:
Email: contact@moodz.xyz
Postal: Moodz, Portsmouth, United Kingdom (full address available on request)
Website: moodz.xyz