# Privacy Policy for MindfulMood
**Effective Date:** 2026-05-01
**Developer:** Muhammad Ilyas
**Contact:** muhammadilyas15@gmail.com
## 1. Introduction
MindfulMood ("we", "our", "the app") is a private mood-reflection journal that lets you log how you feel, see your patterns over time, and receive an AI-generated weekly Reflection. This Privacy Policy explains how we collect, use, store, and protect your information when you use our mobile application.
By using MindfulMood, you agree to the collection and use of information as described in this policy.
## 2. Information We Collect
### 2.1 Information You Provide
MindfulMood is designed to collect the **minimum** information needed for the app to function. You provide:
- **Mood entries** — your selected position on a 2D mood grid (a "valence" value from negative to positive and an "arousal" value from low energy to high energy)
- **Activity tags** — the activity chips you tap (Work, Exercise, Family, Sleep, Social)
- **Optional notes** — free-text notes up to 140 characters per entry, written entirely by you
- **Timestamp** — the date and time each entry is logged
We do **not** collect your name, email address, date of birth, phone number, contacts, photos, audio, location, or any biometric data.
### 2.2 Information Collected Automatically
- **Crash reports** — if the app crashes, technical details (device model, Android version, stack trace) are sent to Firebase Crashlytics so we can fix the bug. Crash reports do **not** include your mood entries or notes.
- **Anonymous usage analytics** — Firebase Analytics records aggregate, anonymous events such as which screens are visited and which features are used. This helps us understand how the app is used and improve it.
- **Advertising identifiers** — Google AdMob may access your device's advertising ID for ad personalization (free tier only). You can reset or opt out of this in your device's Google Settings.
### 2.3 No Account Required
MindfulMood does not require you to sign in. There is no Firebase Authentication, no Google Sign-In, and no user account. Your data is associated with your device, not with an identity.
## 3. How We Use Your Information
We use the information you provide to:
- Display your mood history (line chart, Year-in-Pixels grid, recent entries list)
- Compute correlations between your activities and mood
- Generate a weekly written **Reflection** using AI (see Section 5.4 for details)
- Allow you to export your data (CSV / Markdown) for your records
- Show ads (free tier) and process Premium purchases
- Diagnose and fix crashes and bugs
We do **not** sell, trade, or rent your personal information.
We do **not** use your mood data for advertising.
## 4. Data Storage and Security
### 4.1 Local Storage
Your mood entries are stored **on your device** in a local Room (SQLite) database (`mindful_mood_db`). They are not uploaded to our servers. Uninstalling the app removes all locally stored data.
### 4.2 Cloud Backup
Cloud sync is **not enabled** in MindfulMood version 1.0. If we add a cloud backup feature in a future version, it will be opt-in, encrypted in transit (TLS) and at rest, and isolated per user account.
### 4.3 Security Measures
- All network communication uses HTTPS / TLS encryption
- AI requests are routed through a stateless Cloudflare Worker proxy (does not log requests)
- Crash reports use Firebase Crashlytics' standard transport encryption
## 5. AI-Generated Weekly Reflection
This section is the most important to read because it describes the only data that leaves your device.
### 5.1 What Leaves Your Device
When you tap "Generate Reflection" — or once per week automatically on Sunday evenings — MindfulMood prepares a **pre-aggregated summary** of your week's mood data and sends it to our AI service.
The summary contains:
- The number of entries you logged this week
- Your average mood (valence and arousal) for the week
- Your average mood **per day of the week** (e.g., Mondays: -0.2)
- Your top 3 activity tags by frequency, with the average mood when each was tapped
- The valence value of your best and worst moments this week, plus a note snippet (≤ 80 characters) for each
- Up to 3 representative note snippets (≤ 80 characters each)
- Pre-computed correlation deltas (e.g., "exercise: +28")
It does **not** contain raw entries, full notes verbatim beyond the snippets above, or any device identifier.
### 5.2 How It Is Processed
The summary is POSTed to a Cloudflare Worker proxy (`gemini-proxy.muhammadilyas15.workers.dev`) that we operate. The Worker:
- Authenticates the request with a per-app API key
- Forwards the summary to **Google Gemini** (`gemini-2.5-flash-lite` model)
- Receives the AI-generated Reflection text
- Returns it to your app
The Worker is **stateless** — it does not log requests, does not store summaries, and does not persist any data.
### 5.3 What Google Receives
Google Gemini receives the summary described in Section 5.1 along with our system instruction. Per the Gemini API terms for paid usage, Google does **not** use this data to train its models. See [Google's Gemini API privacy](https://ai.google.dev/gemini-api/terms) for details.
### 5.4 What the Reflection Is — and Is Not
- The Reflection is **always labelled "Reflection" — never "Advice."** This is enforced both in the AI's system instruction and in the user interface.
- The Reflection is **not** medical advice, diagnosis, treatment, or therapy.
- We deliberately instruct the AI to avoid clinical terms (e.g., "depression", "anxiety disorder").
- The in-app disclaimer reads: *"For self-reflection only. Not medical advice. If you're struggling, please reach out to a qualified professional."*
## 6. Data Sharing
### 6.1 We Do NOT Sell Your Data
We do not sell, trade, or rent your personal information to third parties. We do not use your mood entries or notes for advertising.
### 6.2 Third-Party Services
| Service | Purpose | Data Accessed | Privacy Policy |
|---|---|---|---|
| Google AdMob | Banner / interstitial / rewarded ads (free tier) | Advertising ID, ad interactions | [Google Privacy](https://policies.google.com/privacy) |
| Firebase Analytics | Aggregate, anonymous usage analytics | Screen visits, feature usage, device info | [Firebase Privacy](https://firebase.google.com/support/privacy) |
| Firebase Crashlytics | Crash reporting | Crash logs, device model, stack traces | [Firebase Privacy](https://firebase.google.com/support/privacy) |
| Google Play Billing | Premium one-time purchase | Purchase history, subscription status | [Google Privacy](https://policies.google.com/privacy) |
| Google UMP (Consent) | EU consent management | Your consent preferences | [Google Privacy](https://policies.google.com/privacy) |
| Google Gemini (via our Worker) | Generate weekly Reflection text | Pre-aggregated mood summary (see Section 5) | [Gemini API Terms](https://ai.google.dev/gemini-api/terms) |
### 6.3 Ad Personalization
- Free-tier users see ads served by Google AdMob.
- AdMob may use device identifiers and usage data for ad personalization.
- You can opt out of personalized ads at any time through your device's Google Settings → Ads.
- **Premium users see no advertisements.**
## 7. Mental Health Information
### 7.1 What This App Is
MindfulMood is a **personal self-reflection journal**. The mood data you log is, by Google Play's classification, "mental health information" for purposes of the Health Apps Policy.
### 7.2 Protections
- Mood data is stored **locally on your device only** in version 1.0
- Mood data is **never** shared with advertisers, marketing partners, or third parties for commercial purposes
- The pre-aggregated summary sent for AI Reflection (Section 5) is the only data that leaves your device, and it does not include raw entries
### 7.3 Important Disclaimer
MindfulMood is **not** a medical device. It does not diagnose, treat, prevent, or cure any condition.
The AI-generated Reflection is **not** medical advice, therapy, or counseling. It is a written summary of patterns in the data you logged.
If you are experiencing distress, suicidal thoughts, or any mental-health crisis, please contact a qualified mental-health professional or your local emergency services. In the US, you can dial or text **988** for the Suicide & Crisis Lifeline.
## 8. Children's Privacy
MindfulMood is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided personal information, we will delete it promptly. Parents who believe their child has used the app may contact us at the email above.
## 9. Your Rights and Choices
### 9.1 Access and Control
- You can view all your mood entries at any time within the app (Home → History)
- You can edit or delete individual entries at any time (tap any entry to edit; long-press / Delete button)
- You can export your full history as CSV or Markdown for your records (Settings → Export your data — free, no premium gate)
### 9.2 Account and Data Deletion
Since the app does not require a sign-in, there is no account to delete. To delete your data:
- **Delete entries individually** in the app (History → tap entry → Delete)
- **Delete all data**: uninstall the app or use Android Settings → Apps → MindfulMood → Storage → Clear data
- Email us at muhammadilyas15@gmail.com if you need help
### 9.3 Notifications
You can disable the weekly-reflection notifications and any other notifications from the app via Android Settings → Apps → MindfulMood → Notifications.
### 9.4 Ad Preferences
- Premium one-time purchase removes all advertisements
- You can opt out of personalized ads via device Settings → Google → Ads
## 10. GDPR Compliance (European Users)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the GDPR / UK GDPR:
- **Right to access** — request a copy of your data
- **Right to rectification** — correct inaccurate data
- **Right to erasure** — request deletion of your data
- **Right to restrict processing** — limit how we use your data
- **Right to data portability** — receive your data in a portable format (we support this directly via Settings → Export)
- **Right to object** — object to data processing for marketing purposes
- **Right to lodge a complaint** with your supervisory authority
Because mood data is stored locally on your device, you can exercise the rights to erasure, access, and portability without contacting us. For any other request — including questions about data we collect via Crashlytics, Analytics, or AdMob — email muhammadilyas15@gmail.com.
The app uses Google's User Messaging Platform (UMP) to obtain consent for personalized advertising in compliance with GDPR / ePrivacy.
## 11. Data Retention
- **Local mood data** — retained on your device until you delete it or uninstall the app
- **AI Reflections** — cached locally; replaced when you generate a new one for the same week
- **Crash reports** — retained by Firebase Crashlytics for 90 days
- **Analytics events** — retained by Firebase Analytics for up to 14 months (Google default)
- **AI processing** — the Cloudflare Worker is stateless and does not retain requests; the Google Gemini API processes requests and does not use them for training under paid API terms
## 12. Changes to This Policy
We may update this Privacy Policy as the app evolves. We will notify you of material changes by:
- Updating the "Effective Date" at the top of this policy
- Posting a notice within the app on the next launch following a significant change
Your continued use of the app after changes constitutes acceptance of the updated policy.
## 13. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices:
**Email:** muhammadilyas15@gmail.com
**Developer:** Muhammad Ilyas