How Mood8 handles your data.
Mood8 is a habit & wellbeing app. This policy explains what we collect, how we use it, and the controls you have. Plain language, no dark patterns — we don't sell your data, and we don't run advertising.
01 Who we are
Mood8 is a habit and wellbeing app that helps you build habits, track your mood, and stay accountable through group challenges and an AI coach. This policy covers the Mood8 mobile app, the web app at mood8.app/app, and the marketing site at mood8.app.
When we say "we", "us", or "Mood8", we mean the operators of these services. When we say "you", we mean the person using them.
02 Data we collect
Account information
- Your email address and name.
- If you sign up with a password: a securely hashed version of your password (we never store or see the plaintext).
- If you sign in with Google: your email address and name as provided by Google Sign-In. We do not receive your Google password.
- Optional profile fields — profile photo and short bio, if you choose to add them.
Content you create in the app
- Habits you track, together with the completions and streaks tied to them.
- Daily mood, energy, and focus check-ins.
- Gratitude entries and morning intentions you record.
- Challenge participation — the challenges you join, your check-ins, upvotes, badges, and rank progression.
- Comments you post inside challenges.
- Reminders you configure and the times they're set for.
- Coach conversation history — messages you send to the AI Coach and its replies, kept so you can revisit them.
Technical & account state
- Your time zone — used so streaks and reminders honour your local day.
- Whether you've granted notification permission.
- Your subscription status (free or Premium) and the type (monthly, annual, lifetime) — no card details ever reach us.
Crash & diagnostics
For the Android app we use Firebase Crashlytics to collect crash reports so we can fix bugs. Crash reports include your device model, OS version, and the stack trace at the moment of a crash. They do not include your habits, moods, or messages.
Guest accounts
You can start using Mood8 without an account. When you do, we create an anonymous guest account on our servers so your data can sync and be restored. The guest account holds the same categories of content data described above, but no email or name until you register — at which point the guest account is upgraded in place and your data continues under your real account.
03 How we use data
To provide the service
We use your data to run Mood8 for you: sync your habits across devices, restore your data after a reinstall, calculate streaks, deliver reminders, run challenges, and show your history.
AI features (OpenAI)
When you chat with the AI Coach, the messages you send — along with relevant context (your recent mood, streak, active habits, current intention) — are transmitted to OpenAI to generate the coaching reply. When you post user-generated content (challenge title or description, comments, bio), that content may be sent to OpenAI for automated safety moderation before it appears to other users.
OpenAI processes this data solely to provide the AI response and the moderation decision. We do not use this data — or allow it to be used — for advertising or profiling. OpenAI's own handling is covered by its API data policy.
Payments (Stripe)
Premium subscriptions are handled by Stripe on our website. We never see or store your card number. Stripe processes payment data under its own privacy policy; we receive only the subscription status and a Stripe customer ID so we can unlock Premium in your account.
We send transactional email for account verification and password reset. If you opt in, we may send a weekly recap email summarising your week. You can disable recap emails at any time in Settings or via the unsubscribe link on every recap.
04 Data storage & security
Your data is stored on our servers, currently hosted in Europe. Data in transit is protected with HTTPS/TLS between the app and our servers.
Passwords are stored as one-way hashes (never in plain text) and cannot be recovered — only reset. Access to production data is restricted to a minimal number of Mood8 operators.
No system is perfectly secure. If a breach affecting your data ever happens, we will notify affected users promptly as required by applicable law.
05 Data sharing
We share data only with the service providers we need in order to run Mood8. These providers act as our processors and use the data solely to deliver the specific service.
- OpenAI — receives your AI Coach messages, related habit / mood context, and user-generated content submitted for safety moderation.
- Stripe — receives payment information you enter on our website when subscribing to Premium.
- Google — receives sign-in requests you initiate via Google Sign-In. Google (via Firebase Crashlytics) also receives crash reports from the Android app.
- Email delivery provider — receives your email address and the transactional or recap message to be delivered.
We do not sell your personal data. We do not share it with data brokers, and we do not integrate with advertising networks. We may disclose specific data if we are legally required to (e.g. under a valid court order), and only to the extent required.
06 Your rights & controls
Access and edit
You can view and edit most of your data directly in the app — your habits, check-ins, gratitude, intentions, profile, and reminders.
Delete your account and data
To delete your account, open the Mood8 app and go to Settings → Account → Delete account. This removes your account and content from active systems. If you can't access the app for any reason, email us and we'll delete it manually (see contact below).
Export
You can request a copy of your data in a portable format by contacting us. We'll respond within a reasonable timeframe.
Disable emails
Disable the weekly recap email in Settings → Notifications, or via the unsubscribe link at the bottom of every recap. Transactional emails (verification, password reset) can't be disabled while your account is active because they're required to secure it.
For EEA / UK users (GDPR)
If you are in the European Economic Area or the United Kingdom, you have the right to:
- Access the personal data we hold about you.
- Rectify data that is inaccurate or incomplete.
- Erase your personal data ("right to be forgotten"), subject to legal limits.
- Port your data — receive it in a structured, machine-readable format.
- Object to or restrict processing in certain cases, and to withdraw consent where our processing is based on it.
- Lodge a complaint with your local data protection authority.
To exercise any of these rights, email us using the address in section 10.
07 Public content
Some parts of Mood8 are inherently social. When you join a challenge, the following are visible to other participants of that challenge:
- Your profile name and profile photo if you set one.
- Your badges, rank, and check-in history within the challenge.
- Your comments on the challenge.
Sharing your wellbeing data (mood, energy, focus, streaks) on your public profile is off by default. It turns on only if you opt in from Settings. You can turn it off again at any time.
Content you post publicly (challenge titles/descriptions you created, comments) may remain visible to other users until you delete it.
08 Children
Mood8 is not directed at children under the age of 13 (or the higher minimum age required by your country's law where applicable — for example, 16 in some parts of the EEA). We do not knowingly collect personal data from children under that age.
If you believe a child has provided us with personal data without a parent's consent, please email us and we will delete it.
09 Retention
We keep your personal data for as long as your account is active. If you delete your account, we remove your account and content from active systems as quickly as reasonably possible — usually within 30 days. Some records may persist a little longer in encrypted, rolling backups until those backups age out (typically within another 60 days), after which they are irretrievably overwritten.
We may retain a minimal set of records longer where required by law (for example, financial records related to a Premium subscription) or to resolve disputes and enforce our terms.
10 Changes & contact
Changes to this policy
We may update this policy from time to time — usually when we ship a new feature that changes how data is handled, or to clarify existing language. When we make a material change, we'll update the Effective date at the top and, where appropriate, notify you inside the app or by email.
Contact us
Questions, requests, or feedback about this policy — including privacy rights requests and account deletion by email — go to: