In short: we only collect what the app needs to work. We don't sell your data, show ads or use trackers. Mood tracking is optional, and because mood entries can reveal information about your health, we only store them with your explicit consent. You can download or delete everything at any time from your Account page.
1. Who is responsible for your data
Mood Logger (moodlogger.online) is run by Manuel Gonçalves, an individual based in Portugal, who is the controller of your personal data. Contact: [email protected].
2. What we collect
Your account
- Your email address and your password, which we only store as a secure hash, never in readable form.
- Your time zone, detected by your browser, so days and times show correctly.
- Your language, your reminder settings (times, and whether they come by email, notification or both) and which notifications you've turned on.
- When you confirmed your email address, accepted these terms and gave the consents described below.
What you add to the app
- Mood entries: emotion, intensity, energy, stress and focus levels, date and time, the contributors you select (for example sleep, alcohol or medication), and an optional tag and notes.
- Objectives, tasks and habits: titles, descriptions, notes, deadlines, schedules, statuses, and when you completed them.
Technical data
- For each login: the IP address and browser type, so suspicious logins can be spotted. A login ends when you log out or after 6 months without use, and is then deleted.
- If you turn on notifications on a device: the push address your browser gives us for that device, its encryption keys, and the browser type. They're removed when you turn notifications off on that device, log out, or your browser cancels them.
- Server logs of requests (IP address, page, time), kept for a short period by our hosting provider for security and troubleshooting. Passwords, email addresses and links from emails are filtered out of the logs.
3. Health information and your consent
Mood, stress and energy ratings, and contributors such as "medication" or "alcohol", may reveal information about your physical or mental health. Under the GDPR this is a special category of data. We treat all your mood entries this way and process them only on the basis of your explicit consent (Article 9(2)(a) GDPR), which you give when you turn on mood tracking, at sign-up or later. Mood tracking is optional: planning, boards and habits work without it.
You can withdraw this consent at any time by turning off mood tracking on your Account page, which permanently deletes your mood entries. Withdrawing doesn't affect processing that took place before.
4. Why we use your data, and our legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Providing your account and the app's features, and sending service emails (email confirmation, password reset, and the reminder emails and notifications you turn on) | Performance of our contract with you (Art. 6(1)(b)) |
| Processing your mood entries | Your explicit consent (Art. 9(2)(a)) |
| Keeping the service secure: login records, logs, limits on repeated attempts | Our legitimate interest in protecting the service and its users (Art. 6(1)(f)) |
| Complying with legal obligations | Legal obligation (Art. 6(1)(c)) |
5. Who processes your data
We use these service providers, who process data on our behalf and only for the purposes below:
- Railway (Railway Corp., USA): hosting of the app, database and cache. Our servers are in the EU (Amsterdam).
- Resend (USA): sending emails, which involves your email address and the content of those emails. If you turn on reminder emails, they include the titles and times of that day's tasks and habits.
- Your browser's push service (Google for Chrome and most Android browsers, Apple for Safari, Mozilla for Firefox, Microsoft for Edge), only if you turn on notifications: it delivers them to your device. Notifications are encrypted for your device, so the push service can't read what they say (task and habit titles and times); it does see your device's push address and when a notification is sent.
Where a provider is based outside the European Economic Area, the transfer is covered by the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework.
We don't sell or rent your data, and we don't share it for advertising. We may disclose data if the law requires it.
6. Cookies and similar technologies
We only use what's strictly necessary for the app to work, so we don't ask for cookie consent:
| Name | Purpose | Duration |
|---|---|---|
session_id | Keeps you logged in | Until you log out |
_mood_logger_session | Remembers where to take you after logging in, and short on-screen messages | Until you close your browser |
| Local storage | Remembers whether you've seen the "too many tasks in progress" tip | Until you clear it |
| Session storage | Remembers which board column you're viewing on a phone | Until you close the tab |
| Service worker | Shows the notifications you turn on, and lets you install the app on your device | Until you clear the site's data |
We don't use analytics, advertising or tracking cookies, and pages don't load anything from third-party servers.
7. How long we keep your data
- Your account and content: until you delete them. Deleting an entry or your account removes it from our database immediately. Copies in our hosting provider's backups, if any, are deleted when those backups expire.
- Login records: until you log out, or after 6 months without use.
- Notification subscriptions: until you turn notifications off on that device or the login they belong to ends.
- Server and email logs: for the limited period set by our providers.
8. Your rights
Under the GDPR you have the right to:
- Access your data and take it with you: download a PDF or JSON copy from your Account page.
- Correct it: you can edit everything in the app.
- Delete it: delete entries in the app, or your whole account from the Account page.
- Withdraw consent at any time, as described in section 3.
- Object to processing based on legitimate interests, and ask us to restrict processing.
For anything else, email [email protected]. We'll reply within one month. You can also complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), or the authority in the EU country where you live.
9. Security
Connections are encrypted with HTTPS, passwords are stored as bcrypt hashes, links in emails are signed and expire, and repeated login attempts are limited. No system is perfectly secure; if a breach affects your data and puts you at risk, we'll tell you as the law requires.
10. Age
Mood Logger is for people aged 16 or older. If you believe someone younger has created an account, contact us and we'll delete it.
11. Changes to this policy
If we make important changes, we'll tell you by email or in the app before they take effect. The date at the top shows the latest version.