Compliance

moodlog takes data protection seriously. We comply with applicable data protection regulations and follow industry best practices to safeguard user information.

Data protection & privacy

GDPR

For users in the European Union, we comply with the General Data Protection Regulation (GDPR). You have the right to access, correct, delete, and export your personal data at any time.

CCPA

For California residents, we comply with the California Consumer Privacy Act (CCPA). You have the right to know what personal information we collect, opt-out of data sales (we don't sell your data), and request deletion of your information.

Data rights

You have the following rights regarding your data:

01 Right to access. Request a copy of all data we have about you.

02 Right to rectification. Correct inaccurate or incomplete data.

03 Right to erasure. Request deletion of your personal data. Self-serve in Settings · Account: erase all journal data while keeping your account, or delete the account entirely.

04 Right to data portability. Export your data in a machine-readable format.

05 Right to object. Object to certain data processing activities.

To exercise these rights, visit your account settings or contact us at privacy@moodlog.io.

Data retention

We retain your data only as long as necessary to provide our services or as required by law:

Active accounts data retained while account is active

Deleted accounts personal data deleted within 30 days of account deletion

Backups backup copies removed within 90 days of deletion

Legal requirements some data may be retained longer if required by law

Security measures

We implement industry-standard security measures to protect your data:

· Encryption of data in transit (TLS/SSL)

· Encryption of data at rest

· Regular security audits and updates

· Access controls and authentication

· Secure data centers with physical security

For more details, see our security page.

Third-party services

We use carefully selected third-party services to operate moodlog:

Hosting secure cloud infrastructure

We ensure all third parties comply with applicable data protection regulations.

Data breach notification

In the unlikely event of a data breach that affects your personal information, we will:

01 Notify affected users within 72 hours of discovery

02 Report to relevant supervisory authorities as required by law

03 Take immediate steps to contain and remediate the breach

04 Provide guidance on protective measures you can take

Cookie policy

We use essential cookies to provide our services:

Session cookies authentication

Security cookies CSRF protection

Preference cookies user settings

We do not use tracking or advertising cookies.

Questions

Privacy & compliance questions

Write to privacy@moodlog.io.