Privacy Policy

01

Introduction

Moodlog, LLC ("we," "our," or "us") operates moodlog. This privacy policy explains how we collect, use, and protect your personal information when you use our service.

02

Information we collect

Account information

When you create an account, we collect your name, email address, username, and timezone. Your password is stored as a salted hash, never in readable form, and we cannot see it. If you enable two-factor authentication, we store the secrets and backup codes needed to verify you.

Journal content

We store the journal entries you create. Entry text is encrypted at rest. The emotion tags attached to entries are stored separately, unencrypted, so the service can compute your stats and insights efficiently.

Derived insights data

To power the insights features, our servers analyze your entries and store what the analysis produces: the names of people, places, and things your entries mention (for pattern detection), suggested emotion tags from our machine learning model, and language-pattern counts such as how often pronouns, tenses, negations, and categories of words appear. The counts are numbers only and cannot reconstruct your writing; they are stored unencrypted, like your emotion tags. Descriptive words drawn from your writing (used for the "in your own words" feature) are stored encrypted, like your entry text.

Usage and security data

We collect login history and active session information, including IP address, approximate device and browser type, and timestamps. We use this to secure your account, and we show it to you on your security settings page.

Payment information

None. The service is free during the research preview, and we do not collect or process payment information.

Cookies and analytics

We use session cookies to keep you signed in. We use Google Analytics 4 on our public pages only (such as the homepage and this page): analytics never loads on signed-in journal pages, so which entries and insights you view is never sent to a third party. On public pages, Google Analytics collects information such as:

· Pages you visit and features you use

· How long you spend on each page

· Your approximate location (city/country level)

· Device and browser information

We have enabled IP anonymization, which means Google Analytics anonymizes your IP address before processing. Google Analytics uses cookies to track your interactions across sessions. You can opt out of Google Analytics by installing the Google Analytics opt-out browser add-on, or by adjusting your browser's cookie settings.

For more information on how Google uses data, visit Google's privacy policy.

03

How we use your information

· To provide and maintain the service

· To process your journal entries and generate insights

· To communicate with you about your account

· To improve and develop new features

· To conduct research (only with explicit consent)

04

Research data

If you participate in our research preview tier or opt into research data sharing, we may use anonymized, aggregated data for research purposes. You can control this setting in your privacy preferences. Individual entries are never shared in identifiable form.

05

Data sharing and disclosure

We do not sell your personal information. We may share data in these limited circumstances:

· With service providers who host our infrastructure and deliver our email (they process data for us under their service agreements; we do not send your journal content to third-party analytics or AI services)

· When required by law or to protect rights and safety

· In connection with a business transfer or acquisition

06

Data security

We implement appropriate technical and organizational measures to protect your data, including encryption, secure authentication, and regular security assessments. However, no method of transmission over the internet is 100% secure.

Your journal entries are encrypted at rest. moodlog operates the servers and holds the encryption keys, which means moodlog can access the contents of your entries to provide features such as insights and pattern detection, and, only if you opt in, to include anonymized entries in research. moodlog is not end-to-end encrypted: your entries are protected against theft of the database or disk, but they are not hidden from moodlog itself. Sharing anonymized entries for research is off by default, and individual entries are never shown to other users.

07

Your rights

You have the right to:

· Access your personal data

· Export your data (available via settings)

· Request deletion of your account and data

· Control research data sharing preferences

· Opt out of marketing communications

08

Data retention

We retain your data as long as your account is active. Deletion runs on a 30-day grace period so an accidental or regretted request can be undone:

· When you erase your journal data, the entries are removed from your journal and every reading immediately and scheduled for permanent deletion 30 days later. You can restore them from your archive at any point in those 30 days; after that, they are permanently deleted.

· When you delete your account, it is scheduled for permanent deletion 30 days later and you are signed out. Signing back in within those 30 days lets you cancel; after that, your account and all personal data are permanently deleted.

We keep the data only to make the grace period possible; it is not used for any other purpose during that window. We may retain limited data beyond 30 days only where required for legal purposes.

09

Machine learning and automated analysis

We use machine learning and language analysis to power the service's features: suggesting emotion tags for your entries, detecting the people, places, and things you write about, and computing the language patterns shown on your insights page. All of this processing runs on our own servers using models we operate. We do not send your journal content to third-party AI services, and we do not use your content to train models unless you have opted in to research data sharing.

Automated suggestions and readings are descriptive and can be wrong. You can always edit or remove suggested emotion tags, and nothing the analysis produces is shown to anyone but you.

10

Children's privacy

The service is for adults. You must be at least 18 years old to use it, and we do not knowingly collect information from anyone under 18. If we learn that we have, we will delete it.

11

Changes to this policy

We may update this privacy policy from time to time; the date at the top shows the latest revision. For material changes, we present the update inside the service and ask you to review and acknowledge it before continuing.

12

Contact us

Questions about this privacy policy or our data practices?

Privacy privacy@moodlog.io