Moodrate — Privacy Policy

Effective date: 25 October 2026 Version: 2.10 Applies to: the Moodrate mobile app (Android and iOS) and our website at https://moodrate.app.

TL;DR

• Moodrate runs entirely on your device by default. Your trackers, ratings, notes and settings stay in a local database on your phone. We never see them.
• No data brokers, no tracking cookies, and we don't sell your data. Moodrate is currently ad‑free.
• Anonymous diagnostics are on by default — and you can turn them off. To fix bugs and improve the app, Moodrate shares anonymous usage and crash data through Google's Firebase Analytics and Crashlytics. This never includes your mood entries, notes or name, uses no advertising ID, and can be switched off anytime in Settings.
• Cloud backup is optional and off by default. If you turn it on, you sign in with your Google account and your app data — including your mood entries — is uploaded to a cloud storage provider in the European Union. This is not end-to-end encrypted: it is protected by encryption and access controls, but not by a passphrase only you hold. If that matters to you, leave backup off.
• Shared boards are optional. If you share a board, its content becomes visible to the people you invite by email. Members see each other's names, never a name made from an email address; email addresses are shown only to the board's owner, unless the owner chooses to show them to the members.
• Shared-board notifications are optional. If you use shared boards, your phone can be notified when another member rates a shared tracker. You can turn this off in Settings.
• The community leaderboard is optional. If you join, the nickname you choose and six activity numbers (your streak lengths and rating counts) are shown publicly to every Moodrate user. Nothing else is: the leaderboard never receives your ratings, notes or tracker names.
• Golden Clover Pass and its features, Describe & Create and Clover Insights, are optional and paid. Both run on a language model from our AI provider. If you use them, the text you type into Describe & Create, or, for Clover Insights, your trackers' names and tags with figures computed on your phone from your ratings (counts, averages, comparisons, trends and dates — never notes, never your individual ratings), is sent to our AI provider, OpenAI, which under its API terms does not use it to train its models. Google Play handles payment; we store a purchase token and the subscription status, nothing about your card.
• Mood data is sensitive (health-related) data and is treated accordingly.
• The app is for ages 13 and over. You can delete everything we hold for you at any time from inside the app's Settings.

1. Who we are

The data controller is EZ Dev, an independent developer brand based in Israel, operating the Moodrate product.

• Privacy contact: contact@zedeasydev.com

We respond to privacy requests by email, which we treat as a durable medium.

2. What data we process, and why

We designed Moodrate so that, by default, no personal data leaves your device.

2.1 Offline core (the default)

Your trackers, ratings, notes, reminders and preferences are stored only on your device, and local notifications are scheduled on-device — this content is never sent to us. The only data that may leave your device by default is the anonymous diagnostics described in 2.7, which you can turn off. If you uninstall the app, the operating system destroys the on-device data.

2.2 Optional Google sign-in

If you choose to use cloud features, you sign in with your Google account. We receive your email address and account identifier, used only to identify you and your data. We never create or hold a password.

2.3 Optional cloud backup

If you turn on backup, your app data — including your mood entries — is uploaded and stored with a cloud storage provider located in the European Union, so you can restore it on another device. Because mood entries can reveal information about your mental or physical health, we treat them as sensitive (special-category) data under GDPR Article 9 and rely on your explicit consent to store them.

This is not end-to-end encrypted: there is no passphrase, so the data is protected by encryption and access controls rather than by a key only you hold. If you treat your mood data as highly sensitive, the most protective choice is to leave backup off.

2.4 Optional shared boards

If you share a board, the trackers and ratings on it are uploaded to the same EU cloud storage and made visible to the people you invite by email. We send each invitee a one-off invitation email. The invitation email does not name the person who sent it or show their address. Everyone on a shared board, the owner and every member, sees the names of everyone on it: the short form of the name on each person's Google account (the first name and the initial of the last name). A person whose Google account has no name, or whose account name is the same as the part of their email address before the @, is shown as "Member" followed by a number on that board. A name is never taken from an email address. Beside each rating you add or edit, the other members also see your name and the value it replaced. Email addresses (the owner's, the members' and those of pending invitations) are shown to the board's owner only, unless the owner turns on "Members can see emails" for that board, in which case its members see them too; the owner can turn this off again at any time. A person you have invited sees your name before accepting, or your email address only if you have turned that setting on. Deleting a board you own removes it for everyone; deleting your own data or account never deletes boards owned by other people.

When rating on a shared board, a member can mark the rating as being for another member (for example, a parent rating a child's mood). That member's name is then stored with the rating and shown with it to everyone on the board, beside the name of whoever filled it in. Such ratings are board content: they stay on the board after that member leaves it, until they are deleted or the owner deletes the board. The owner or an editor can turn this option off for a tracker.

If Shared board activity is on (it is on by default and can be turned off in Settings), we store a push token for your phone with your account on the same EU cloud. When another member rates a tracker on a board you share, we send your phone a notification through Google's Firebase Cloud Messaging. The message carries the tracker's name, that member's name as shown on the board, and the value they gave (or the tracker's tag for that value, if it has one); Google delivers it to your phone and does not use it for advertising. When you turn the setting off or sign out, your phone's token is deleted.

2.5 Email correspondence

If you email us, we process your message and email address only to reply. We do not add you to any marketing list.

2.6 Optional calendar entry

If you switch on "Add to calendar" for a tracker, Moodrate asks for permission to read and write your device calendar, and creates one repeating entry for that tracker. We read the calendar only to find entries this app itself created — each carries a marker derived from the tracker — so that turning the option on twice cannot add a duplicate, and so we can verify an entry is ours before changing or removing it. We never read, collect, transmit or store your other appointments, and nothing from your calendar leaves your device. The permission is requested at the moment you turn the option on, never at launch, and revoking it in Android settings simply stops the feature.

2.7 Optional analytics & crash diagnostics

To understand how the app is used and to fix crashes, Moodrate uses Google's Firebase Analytics and Crashlytics. This is on by default, and you can turn it off at any time in Settings (and during onboarding). It collects anonymous app-usage events, basic device and app information, crash reports, and an app-instance identifier — and never your mood entries, ratings, notes, names or email. It uses no advertising identifier. This data is processed by Google and may be stored outside the EU, including in the United States. When diagnostics are off, nothing is collected.

2.8 Optional community leaderboard

If you join the leaderboard from the Achievements screen, we store on the same EU cloud your chosen nickname, six activity numbers (your longest streaks and how many ratings you made this week, this month, this year and in total), and the anonymous account identifier from your Google sign-in. Your nickname and the six numbers are public: every Moodrate user who opens the leaderboard can see them. The numbers say how often you rated, never what you rated — your ratings, notes and tracker names are not uploaded for this feature. Any user can report a nickname. A profile reported by two different users is hidden automatically; we review every report and may remove a nickname or keep a profile hidden. You can leave the leaderboard at any time from the leaderboard screen or from Settings, and leaving deletes your nickname, your numbers and your profile immediately.

2.9 Optional Golden Clover Pass: Describe & Create and Clover Insights (paid)

Golden Clover Pass is an optional paid subscription that unlocks two features: Describe & Create (you describe the tracker you want, and the app drafts it for you) and Clover Insights on the Statistics screen. Both are powered by a language model (artificial intelligence) run by our AI provider; the names in the app do not say so, this Policy does. Both require Google sign-in (2.2). Everything else in Moodrate — trackers, ratings, notes, statistics, reminders, backup, shared boards and the leaderboard — works exactly the same without the Pass, and nothing in this section applies unless you use these features.

What is sent to the AI provider. We use OpenAI as our AI provider, acting as our processor.

• Describe & Create: only the text you type into the builder conversation is sent, together with the app's language. Nothing is read from your database: your existing trackers, ratings and notes are not sent. Please type only what is needed to describe the tracker; whatever you type is sent as written. The draft tracker comes back to your device and is created only when you save it.
• Clover Insights: only figures computed on your phone are sent, never your entries themselves — for the trackers shown on your Statistics screen (trackers you hide there are left out), or for the one tracker whose insights you open. For each: its name, rhythm (daily, weekly, …), scale and what a higher rating means, whether it has a goal, and its tags (the words it gives its values, if any). For the time span you choose (the last 7 days, the last 30 days or all time): number of ratings, averages and totals, best and worst period or day of the week, streaks, records and rating milestones, how the latest days or ratings compare with the months before, an estimate of where a running total or a steady trend is heading, for a tracker you log every few days or weeks (for example a cycle) its usual interval with the dates of the latest entries and when the next is expected, for a tracker rated several times a day how its morning and evening ratings compare, and how two of your trackers relate on the same days (for example your sleep on the days you exercised). These figures carry labels such as a weekday and date, a week or a month. Never your notes, never a list of your individual ratings or the time each was made, and never the names of other members of a shared board. Because these figures are derived from your ratings and may say something about your health or wellbeing, we send them only when you ask — when you tap to get insights, change the time span, open a tracker's insights or open the weekly summary — and we rely on that as your explicit consent (GDPR Art. 9(2)(a)).
• Weekly summary (optional, off by default): a reminder scheduled on your phone; nothing is sent until you open it, and then only as described for Clover Insights.
• Report a problem: opens your email app with the insight text shown, the reason and note you add, the time span, the app version and language. Nothing is sent unless you send that email; we handle it as email correspondence (2.5).
• Compare with Clover: to set up a comparison, what you type in that screen is sent together with the names and settings of your trackers (how often each is rated, its scale and direction, whether it allows several ratings per period, and whether it has ratings in the last 7, 30 or 90 days or at all). Your ratings, notes, dates and tracker identifiers are never sent. Your words, the tracker names and the suggested comparison are not stored on our servers; we keep only a short-lived count of the questions asked in that session, under the pseudonymous identifier, for up to 2 days. Nothing changes in the app until you choose to show or save the comparison.

You can turn each of these features off in Settings → Golden Clover Pass features.

How OpenAI handles it. Requests go from our server (in the European Union) to OpenAI's API; the API key never leaves our server. Under OpenAI's API data-usage terms as published at the date of this Policy, content sent through the API is not used to train OpenAI's models by default, and OpenAI may keep it for a limited period (currently up to 30 days) to monitor for abuse before deleting it. OpenAI processes this data in the United States (section 6). We do not send OpenAI your name, email address or account identifier.

What we keep. The builder conversation is not stored on our servers beyond the request: your device sends the conversation with each turn and holds it only until you close the builder. For 2 days we keep a small record of each builder session, without your words: how many questions were asked, which kinds of question (from a fixed list), and whether it ended with a tracker. The text of Clover Insights is cached for up to 2 days with your account, so that reopening the same statistics does not send the numbers again; the numbers themselves are not stored. To enforce fair-use limits we keep a per-account daily count of use of these features (requests, insights, tokens and cost) for 3 days, and a per-account monthly count of trackers created with Describe & Create for up to 13 months. To keep each subscription's use in proportion to what it pays, we also keep, for each subscription and billing period, the estimated cost of these features and the subscription's price and country as Google Play reports them, until 7 days after that period ends. These Golden Clover records (plan status, usage counts and the cached insights) are stored under a pseudonymous identifier: a keyed one-way hash (HMAC-SHA256) of your account identifier, computed with a secret key held separately in our cloud provider's secrets store and readable only by the Clover service and our administrator. They contain no email address or name, and without that key they cannot be linked to your account, your cloud backup or your shared boards. To verify your subscription with Google Play we also store the Play purchase token with that pseudonymous identifier.

Subscription and trial. The Pass is currently offered on Android through Google Play, which handles payment: we never see your card or bank details. Google sends us a purchase token, and we store with your account that token, the product you bought (weekly or monthly), the expiry date and the subscription state (active, in grace period, on hold, cancelled), so our server can check that you are entitled to the features. The free trial of the monthly Pass (currently three days) is offered and run by Google Play, which decides who is eligible; for it we store the same purchase records, plus whether the subscription is in its trial phase and when that ends. Unless you cancel it in Google Play before it ends, it becomes a paid monthly subscription. The one-day trial of earlier app versions is tied to the account you signed in with: we store when it started and ended and how many trackers were created, so it is not offered twice. You cancel the subscription in Google Play (Settings → Account → Manage in Google Play, or the Subscriptions page of the Google Play app). Deleting your Moodrate account does not cancel a subscription with Google — cancel it in Google Play first. Google processes your purchase under its own privacy policy (section 4).

Generated content. Insights and draft trackers are generated automatically by the language model and can be wrong. They are observations for you to read and edit, not decisions about you, and never medical advice.

3. Legal bases (GDPR Art. 6 and 9)

• Offline core: no processing by us — your data stays on your device.
• Sign-in, backup, and shared boards: performance of the optional service you chose to use (Art. 6(1)(b)); for the mood content within backup or a shared board, your explicit consent (Art. 9(2)(a)).
• Community leaderboard: performance of the optional service you chose to join (Art. 6(1)(b)). The nickname and activity counts are not health data, so Art. 9 does not apply to them.
• Golden Clover Pass (Describe & Create, Clover Insights): performance of the paid service you chose to buy or try (Art. 6(1)(b)), including the text you type into Describe & Create and the purchase and trial records; for the statistics sent for Clover Insights, your explicit consent each time you ask (Art. 9(2)(a)).
• Analytics/diagnostics: your consent (Art. 6(1)(a)) — on by default and withdrawable at any time in Settings. While off, no usage or crash data is collected.
• Replying to your email: our legitimate interest in answering you (Art. 6(1)(f)).

You are never required to provide personal data to use Moodrate — the app works fully without an account.

4. Who receives your data

We share data only with service providers acting on our instructions, described as categories:

• A cloud hosting and storage provider in the European Union — for backups and shared-board data.
• A sign-in provider — to let you sign in with your Google account (it never receives your mood content).
• An email provider — to deliver shared-board invitations and account emails.
• A push-notification provider (Google — Firebase Cloud Messaging) — delivers shared-board activity notifications to members' phones; for each notification it receives the tracker's name, the member's name and the value (or its tag).
• A diagnostics provider (Google — Firebase Analytics & Crashlytics) — receives anonymous usage and crash data while diagnostics are on; it never receives your mood content.
• An AI provider (OpenAI) — receives the text you type into Describe & Create and the figures Clover Insights sends when you ask for insights, as described in 2.9; it never receives your name, email, account identifier or notes.

If you join the community leaderboard, your nickname and six activity numbers are also shown to other Moodrate users, publicly, as described in 2.8.

We do not currently share your data with advertisers, and we do not use data brokers or sell your personal data.

The app stores themselves (Apple, Google) process your store-account activity, and Google Play processes any Golden Clover Pass payment, under their own privacy policies; they are not our processors. From Google Play we receive only the purchase token and the subscription status described in 2.9.

5. Retention

• On-device data: kept until you delete it in the app or uninstall.
• Cloud backup and your sign-in/account record: kept until you delete the backup, disconnect, or delete your account from inside the app — then removed.
• Push tokens for shared-board notifications: kept until you turn the setting off or sign out, and deleted automatically 60 days after your phone last checked in.
• Community leaderboard: your nickname, numbers and profile are kept until you leave the leaderboard — then removed at once. Nickname reports are kept for up to 90 days.
• Describe & Create: the conversation is not stored on our servers beyond the request that carries it; the session record without your words is kept for 2 days.
• Clover Insights: the generated text is cached for up to 2 days.
• Usage counters for these features: daily counts for 3 days; the monthly count of trackers made with Describe & Create for up to 13 months.
• Golden Clover Pass purchase and trial records: kept while your account exists, so your subscription keeps working and the one-day trial of earlier app versions is not offered twice. Per-period cost records are deleted 7 days after their billing period ends. Deleting your account in the app does not yet remove them automatically: email contact@zedeasydev.com and we will erase them within 30 days. Google Play keeps its own record of your purchases under its privacy policy.
• Server logs: technical records of requests to our servers (the kind of request, its outcome and timing, the app version and an account reference kept only as a keyed, truncated hash, never the identifier itself and never the content) are kept for 30 days.
• Support email: kept up to 24 months.

6. International transfers

Cloud data is hosted in the European Union. Our operator is in Israel, which the European Commission recognises as providing an adequate level of data protection, so transfers there do not require additional safeguards. Where a provider processes limited data outside the EU (for example, the sign-in provider), it does so under recognised safeguards such as Standard Contractual Clauses or an adequacy decision. Anonymous diagnostics (Firebase Analytics and Crashlytics) are processed by Google and may be handled outside the EU, including in the United States, under such safeguards. Shared-board notifications are delivered through Google's Firebase Cloud Messaging, which may also route them outside the EU. If you use Describe & Create or Clover Insights, the text and statistics described in 2.9 are processed by OpenAI in the United States under such safeguards.

7. Security

We protect your data with encryption in transit and at rest, and access controls that limit your data to your own account. No system is perfectly secure; if you treat your mood data as especially sensitive, leaving cloud backup off keeps it solely on your device.

8. Your rights

Depending on where you live, you may have rights to access, correct, delete, export, restrict, or object to the processing of your personal data, and to withdraw consent at any time. Because most data lives only on your device, you can exercise many of these directly in the app (edit or delete your data, or use Settings to delete your cloud backup and account, or leave the leaderboard to delete your public profile).

To make a request, email contact@zedeasydev.com or use our deletion page at https://moodrate.app/delete-account. For requests affecting a cloud account, we may ask you to confirm control of the email address on file. We respond within the time limits set by applicable law.

We do not carry out automated decision-making or profiling that produces legal or similarly significant effects on you. Clover Insights are automatically generated observations for you to read; they do not decide anything about you.

You also have the right to lodge a complaint with your data-protection authority (for example, your local EU supervisory authority, the UK ICO, or the Israeli Privacy Protection Authority).

United States. We do not currently sell or share your personal information for cross-context behavioural advertising, and we do not use sensitive information to infer characteristics about you. If you are a US resident, you may exercise the access, deletion, and correction rights available under your state's law by emailing us at the address above; we honour these rights and will not discriminate against you for using them.

9. Children

Moodrate is intended for users aged 13 and over, and we do not knowingly collect personal data from anyone under 13. If you are below the age of digital consent in your country, the optional account features (sign-in, backup, shared boards, Golden Clover Pass) require a parent or guardian's consent. If you believe a child has provided us with personal data, email contact@zedeasydev.com and we will delete it.

10. Changes to this Policy

We may update this Policy from time to time. We will update the effective date and version above and, for material changes, notify you in the app.

v1.0 (16 June 2026) — initial publication; v1.1 (22 June 2026) — added shared boards; v2.0 (23 June 2026) — major rewrite and condensation; audience set to 13+; v2.1 (23 June 2026) — disclosed optional, consent-based anonymous diagnostics (Firebase Analytics & Crashlytics; no advertising ID); v2.2 (11 September 2026) — disclosed the optional calendar entry (2.6) and the community leaderboard (2.8); v2.3 (18 September 2026) — shared boards show members the name on your account beside your ratings (2.4); v2.4 (25 September 2026) — optional push notifications when another member rates a shared tracker (2.4); v2.5 (28 September 2026) — members of a shared board see the names of everyone on it, and a rating can be marked as being for another member (2.4); v2.6 (14 October 2026) — the optional Golden Clover Pass subscription and its AI features: the AI tracker builder and AI insights, OpenAI as processor, purchase and trial records (2.9); shared-board notifications can carry a tracker's tag (2.4); server logs (5); v2.7 (17 October 2026) — the Golden Clover features are named Describe & Create and Clover Insights in the app; what they do and who processes the data is unchanged (2.9). Provided in English; if translated, the English version prevails. v2.8 (20 October 2026) — Clover Insights: every figure it now sends is listed (time span, comparisons with earlier months, estimates of where a total or trend is heading, intervals and the latest dates for trackers logged every few days or weeks, morning and evening comparison, how two trackers relate), with the weekly summary, Report a problem and the feature switches (2.9); the leaderboard no longer says tracker names never leave your device, since Clover Insights sends them when you ask. v2.10 (25 October 2026) — the monthly Pass's free trial now runs through Google Play and becomes a paid subscription unless cancelled; Compare with Clover; per-period cost records (2.9, 5). v2.9 (20 October 2026) — shared boards: email addresses are shown to the board's owner only unless the owner allows members to see them, names are never taken from an email address, and the invitation email does not name its sender (2.4); Golden Clover records are stored under a keyed pseudonymous identifier (2.9); server logs keep account references only as a keyed hash (5).