Moodrate — Privacy Policy

Effective date: 23 June 2026 Version: 2.1 Applies to: the Moodrate mobile app (Android and iOS) and our website at https://moodrate.app.

TL;DR

• Moodrate runs entirely on your device by default. Your trackers, ratings, notes and settings stay in a local database on your phone. We never see them.
• No data brokers, no tracking cookies, and we don't sell your data. Moodrate is currently ad‑free.
• Anonymous diagnostics are on by default — and you can turn them off. To fix bugs and improve the app, Moodrate shares anonymous usage and crash data through Google's Firebase Analytics and Crashlytics. This never includes your mood entries, notes or name, uses no advertising ID, and can be switched off anytime in Settings.
• Cloud backup is optional and off by default. If you turn it on, you sign in with your Google account and your app data — including your mood entries — is uploaded to a cloud storage provider in the European Union. This is not end-to-end encrypted: it is protected by encryption and access controls, but not by a passphrase only you hold. If that matters to you, leave backup off.
• Shared boards are optional. If you share a board, its content becomes visible to the people you invite by email.
• Mood data is sensitive (health-related) data and is treated accordingly.
• The app is for ages 13 and over. You can delete everything we hold for you at any time from inside the app's Settings.

1. Who we are

The data controller is EZ Dev, an independent developer brand based in Israel, operating the Moodrate product.

• Privacy contact: contact@zedeasydev.com

We respond to privacy requests by email, which we treat as a durable medium.

2. What data we process, and why

We designed Moodrate so that, by default, no personal data leaves your device.

2.1 Offline core (the default)

Your trackers, ratings, notes, reminders and preferences are stored only on your device, and local notifications are scheduled on-device — this content is never sent to us. The only data that may leave your device by default is the anonymous diagnostics described in 2.6, which you can turn off. If you uninstall the app, the operating system destroys the on-device data.

2.2 Optional Google sign-in

If you choose to use cloud features, you sign in with your Google account. We receive your email address and account identifier, used only to identify you and your data. We never create or hold a password.

2.3 Optional cloud backup

If you turn on backup, your app data — including your mood entries — is uploaded and stored with a cloud storage provider located in the European Union, so you can restore it on another device. Because mood entries can reveal information about your mental or physical health, we treat them as sensitive (special-category) data under GDPR Article 9 and rely on your explicit consent to store them.

This is not end-to-end encrypted: there is no passphrase, so the data is protected by encryption and access controls rather than by a key only you hold. If you treat your mood data as highly sensitive, the most protective choice is to leave backup off.

2.4 Optional shared boards

If you share a board, the trackers and ratings on it are uploaded to the same EU cloud storage and made visible to the people you invite by email. We send each invitee a one-off invitation email. Deleting a board you own removes it for everyone; deleting your own data or account never deletes boards owned by other people.

2.5 Email correspondence

If you email us, we process your message and email address only to reply. We do not add you to any marketing list.

2.6 Optional analytics & crash diagnostics

To understand how the app is used and to fix crashes, Moodrate uses Google's Firebase Analytics and Crashlytics. This is on by default, and you can turn it off at any time in Settings (and during onboarding). It collects anonymous app-usage events, basic device and app information, crash reports, and an app-instance identifier — and never your mood entries, ratings, notes, names or email. It uses no advertising identifier. This data is processed by Google and may be stored outside the EU, including in the United States. When diagnostics are off, nothing is collected.

3. Legal bases (GDPR Art. 6 and 9)

• Offline core: no processing by us — your data stays on your device.
• Sign-in, backup, and shared boards: performance of the optional service you chose to use (Art. 6(1)(b)); for the mood content within backup or a shared board, your explicit consent (Art. 9(2)(a)).
• Analytics/diagnostics: your consent (Art. 6(1)(a)) — on by default and withdrawable at any time in Settings. While off, no usage or crash data is collected.
• Replying to your email: our legitimate interest in answering you (Art. 6(1)(f)).

You are never required to provide personal data to use Moodrate — the app works fully without an account.

4. Who receives your data

We share data only with service providers acting on our instructions, described as categories:

• A cloud hosting and storage provider in the European Union — for backups and shared-board data.
• A sign-in provider — to let you sign in with your Google account (it never receives your mood content).
• An email provider — to deliver shared-board invitations and account emails.
• A diagnostics provider (Google — Firebase Analytics & Crashlytics) — receives anonymous usage and crash data while diagnostics are on; it never receives your mood content.

We do not currently share your data with advertisers, and we do not use data brokers or sell your personal data.

The app stores themselves (Apple, Google) process your store-account activity under their own privacy policies; they are not our processors.

5. Retention

• On-device data: kept until you delete it in the app or uninstall.
• Cloud backup and your sign-in/account record: kept until you delete the backup, disconnect, or delete your account from inside the app — then removed.
• Support email: kept up to 24 months.

6. International transfers

Cloud data is hosted in the European Union. Our operator is in Israel, which the European Commission recognises as providing an adequate level of data protection, so transfers there do not require additional safeguards. Where a provider processes limited data outside the EU (for example, the sign-in provider), it does so under recognised safeguards such as Standard Contractual Clauses or an adequacy decision. Anonymous diagnostics (Firebase Analytics and Crashlytics) are processed by Google and may be handled outside the EU, including in the United States, under such safeguards.

7. Security

We protect your data with encryption in transit and at rest, and access controls that limit your data to your own account. No system is perfectly secure; if you treat your mood data as especially sensitive, leaving cloud backup off keeps it solely on your device.

8. Your rights

Depending on where you live, you may have rights to access, correct, delete, export, restrict, or object to the processing of your personal data, and to withdraw consent at any time. Because most data lives only on your device, you can exercise many of these directly in the app (edit or delete your data, or use Settings to delete your cloud backup and account).

To make a request, email contact@zedeasydev.com or use our deletion page at https://moodrate.app/delete-account. For requests affecting a cloud account, we may ask you to confirm control of the email address on file. We respond within the time limits set by applicable law.

We do not carry out automated decision-making or profiling that produces legal or similarly significant effects on you.

You also have the right to lodge a complaint with your data-protection authority (for example, your local EU supervisory authority, the UK ICO, or the Israeli Privacy Protection Authority).

United States. We do not currently sell or share your personal information for cross-context behavioural advertising, and we do not use sensitive information to infer characteristics about you. If you are a US resident, you may exercise the access, deletion, and correction rights available under your state's law by emailing us at the address above; we honour these rights and will not discriminate against you for using them.

9. Children

Moodrate is intended for users aged 13 and over, and we do not knowingly collect personal data from anyone under 13. If you are below the age of digital consent in your country, the optional account features (sign-in, backup, shared boards) require a parent or guardian's consent. If you believe a child has provided us with personal data, email contact@zedeasydev.com and we will delete it.

10. Changes to this Policy

We may update this Policy from time to time. We will update the effective date and version above and, for material changes, notify you in the app.

v1.0 (16 June 2026) — initial publication; v1.1 (22 June 2026) — added shared boards; v2.0 (23 June 2026) — major rewrite and condensation; audience set to 13+; v2.1 (23 June 2026) — disclosed optional, consent-based anonymous diagnostics (Firebase Analytics & Crashlytics; no advertising ID). Provided in English; if translated, the English version prevails.