Moodlog
Privacy Policy
The short version: your journal (moods, activities, notes, photos and voice clips) is saved on your iPhone. If you choose to sync, it is encrypted on your iPhone before it leaves, and we can't read it. We don't sell data, show ads or use tracking or analytics tools.
1. What stays on your device
Everything you log in Moodlog is stored on your iPhone, protected by iOS data protection. This includes moods, activities, notes, reflection answers, energy and sleep values, photos and voice clips. The optional app lock PIN is stored only as a salted hash in your device's Keychain.
Voice clips are transcribed on your iPhone using Apple's on-device speech recognition. Insights, Ask Your Journal and Mood Forecast are calculated on your iPhone. On devices with Apple Intelligence, Moodlog may use Apple's on-device language model to word insights and answer questions; this also runs on your device.
2. Accounts (optional)
You can use Moodlog without an account. If you create one, we store your email address (or the identifier Apple provides if you use Sign in with Apple) so you can sign in, sync across devices and keep your Pro purchase.
3. Encrypted sync (optional, Pro)
If you turn on sync, your journal is encrypted on your iPhone with a key only you hold before it is uploaded. Our servers store only this encrypted data and cannot read it. The key is kept in your iCloud Keychain and can be restored with your 12-word recovery phrase. We also store technical information needed for sync, such as the type of each record (for example "entry"), when it last changed, file sizes and device identifiers, but never its contents. If you lose your recovery phrase and all your devices, we cannot recover your synced data.
4. Purchases
Payments are processed by Stripe or Apple. We never see or store your full card details. We store your purchase status (plan, renewal date and status) and, for Stripe purchases, a Stripe customer identifier, so we can unlock Pro on your account. Stripe's and Apple's own privacy policies apply to the payment itself.
5. Service providers
- Supabase hosts accounts, encrypted sync data and purchase status (servers in the United States).
- Stripe processes card payments.
- Apple provides the App Store, in-app purchases, Sign in with Apple and iCloud Keychain.
- An email delivery provider sends sign-in emails to the address you enter.
We don't share your information with anyone else, and we never sell it.
6. Permissions
Moodlog asks for the microphone (voice entries), speech recognition (transcripts, processed on device), photos or camera (attaching pictures), notifications (reminders) and Face ID (app lock). Each is used only for that feature, and you can change them any time in iOS Settings.
7. Keeping and deleting your data
Data on your iPhone stays until you delete it or delete the app. In the app you can delete everything under More › Backup & restore. If you have an account, More › Account › Delete account permanently deletes your account, your encrypted synced data and stored files, and cancels any Stripe subscription. Journal data on your iPhone is kept unless you delete it too. Apple subscriptions are managed in your Apple ID settings.
8. Children
Moodlog is not directed to children under 13, and we don't knowingly collect personal information from them.
9. Health information
Moodlog is a personal journal, not a medical device, and it does not provide medical advice or diagnosis. If you're struggling, please reach out to a professional or a local helpline.
10. Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal information. You can export your journal in the app (CSV, PDF or an encrypted backup) and delete your account at any time. For anything else, contact us.
11. Changes
If we change this policy, we'll update the date above and, for significant changes, let you know in the app.
12. Contact
Questions about privacy: support@moodlog.us