Privacy Policy
Last updated: February 17, 2026
🔒 Your Privacy Matters
At MoodLift, operated by TailwindX, LLC (Wyoming), we take your privacy seriously. Your mental health data is yours alone. We encrypt it, protect it, and never sell it.
1. Information We Collect
Information You Provide:
- Account information: Email address, name, password (encrypted)
- Mood data: Mood ratings, energy levels, activities, social context, location type, sleep data
- Journal entries: Text you write in your private journal
- AI chat conversations: Messages you send to and receive from Milo, our AI companion
- Exercise data: Completed breathing exercises, meditations, CBT exercises
- Payment information: Processed by Stripe (we do not store your credit card details)
Information We Collect Automatically:
- Device information: Browser type, operating system, device type
- Usage data: Pages viewed, features used, time spent in app
- IP address: For security and analytics purposes
- Cookies: To keep you logged in and improve your experience
2. How We Use Your Information
We use your information to:
- Provide the Service: Track your moods, generate insights, power AI conversations
- Personalize your experience: Tailor insights and AI responses to your patterns
- Process payments: Handle Premium subscriptions via Stripe
- Improve MoodLift: Analyze aggregate usage data to build better features
- Communicate with you: Send account updates, feature announcements, support responses
- Ensure security: Detect fraud, prevent abuse, protect your account
3. How We Protect Your Data
🔐 Encryption & Security
- Data at rest: Encrypted using AES-256 (military-grade encryption)
- Data in transit: Protected by TLS 1.3 (HTTPS)
- Passwords: Hashed and salted (we cannot see your password)
- Access controls: Only authorized personnel can access infrastructure
- Regular audits: We continuously monitor for security threats
4. Who We Share Your Data With
We do NOT sell your data. Period.
We only share your information with:
- Service providers:
- Firebase/Google Cloud (authentication, database)
- Stripe (payment processing)
- OpenRouter/Anthropic (AI chat functionality - conversations are sent to AI model)
- Legal requirements: If required by law or to protect rights/safety
- With your consent: If you explicitly authorize us to share your data
Important: When you use the AI chat feature, your messages are sent to Anthropic (via OpenRouter) to generate responses. These are processed securely and not used to train AI models without your consent.
5. Your Rights
You have the right to:
- Access your data: View all data we have about you
- Export your data: Download your mood logs, journal entries, and chat history (JSON format)
- Delete your data: Permanently delete your account and all associated data
- Opt out of analytics: Disable usage tracking (in Settings)
- Opt out of AI training: Request that your chat data not be used for AI improvement
- Correct inaccuracies: Update your account information
To exercise these rights, contact us at privacy@moodlift.us or use in-app settings.
6. Data Retention
We retain your data for as long as your account is active. If you delete your account, we permanently delete your mood data, journal entries, and chat history within 30 days. Some data (e.g., anonymized usage analytics) may be retained longer for product improvement.
7. Children's Privacy
MoodLift is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you are between 13-17, you must have parental consent to use MoodLift. If we learn we have collected data from a child under 13, we will delete it immediately.
8. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to know what personal information we collect
- Right to delete your personal information
- Right to opt-out of the "sale" of personal information (we do not sell your data)
- Right to non-discrimination for exercising your rights
9. European Privacy Rights (GDPR)
If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):
- Right of access, rectification, erasure
- Right to data portability (export your data)
- Right to restrict processing
- Right to object to processing
- Right to withdraw consent
Our legal basis for processing your data is your consent and our legitimate interest in providing the Service.
10. Cookies & Tracking
We use cookies to:
- Keep you logged in
- Remember your preferences
- Analyze how you use MoodLift (aggregate data)
You can disable cookies in your browser settings, but some features may not work properly.
11. Third-Party Links
MoodLift may contain links to third-party websites (e.g., crisis resources). We are not responsible for the privacy practices of these sites. Please review their privacy policies separately.
12. Data Breach Notification
In the unlikely event of a data breach that affects your personal information, we will notify you via email within 72 hours and provide details on what data was affected and steps we are taking to remedy the situation.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. The "Last updated" date at the top will reflect when changes were made. Your continued use of MoodLift after changes constitutes acceptance of the updated policy.
14. Contact Us
If you have any questions about this Privacy Policy or how we handle your data, please contact us at:
privacy@moodlift.us
💙 Our Commitment to You
Your mental health data is deeply personal. We build MoodLift with privacy as a core value, not an afterthought. We encrypt your data, never sell it, and give you full control. Thank you for trusting us.