Privacy Policy
Last updated: October 21, 2026
This policy explains how Moodstreak handles information when you use our app, including mood journaling and private sharing with your partner. The information processed depends on the features available in your app version and the features you use.
1. Your account and information
You can use Moodstreak without entering an email address or password. The app uses a generated installation identifier for partner connections and purchases. For the updated private shared space, it also creates an anonymous account and stores its secure session on your device. “Anonymous” means you do not need to sign in with personal contact details; content you share is still associated with that account and your connected partnership.
| Information | How Moodstreak handles it |
|---|---|
| Mood journal and media | Your saved mood history, journal entries, attached photos and recordings, and local chat history are stored on your device. These features do not automatically upload your whole journal or media library to the couple-sharing service. Content used in an AI conversation is handled as described below. |
| Connection quiz and plan | Your relationship preferences, quiz answers, practice drawing, practice note and suggested connection plan are stored locally. Completing the quiz does not send those answers to your partner. The name you use to connect a shared space is sent to our service; a note or answer you later choose to share is sent separately. |
| Private couple sharing | Our service stores account and partnership identifiers, display names, invitation and connection information, hand-drawn notes and their text, shared drawing drafts, daily-question answers, and shared mood updates, notes and closeness signals. Saved notes and answers can retain the sender's previous display name after a profile-name change; the current connection name and future content can use the new name. This lets the two connected accounts exchange content and reopen it later without relabelling past messages. Original Moodstreak partner connections also use an installation identifier, display names, mood updates and subscription status. |
| Safety choices and reports | Received-content screening, individual approval, hidden-content choices and the automatic-drawings choice for your current connected partner are saved on your phone. Hiding content does not delete its cloud record. A report includes your account identifier, the content reference, chosen reason, optional details, review status and time. Drawing reports refer to the existing stored note. Reports of received answers or check-ins also store sender and room identifiers, the content's time and a private copy of the reported version: answer text, question and day, or check-in text, mood and closeness. This preserves the version you reported if the content later changes. These reports are for private review, not public posts. Blocking stores hashed installation identifiers for the two accounts and the time, to prevent that pair from reconnecting. |
| Purchases | Apple and RevenueCat process purchase and subscription information. Moodstreak uses your generated purchase identifier and subscription status to verify Pro access, restore purchases and share an active plan with a connected partner. We do not receive your payment card details. |
| Reminders | If you enable a reminder, its preferences are saved on your device and iOS schedules the local notification. The current version does not register your device for remote love-note alerts or send a push notification token to the shared-space service. |
| Technical and support information | Requests to our service and providers include the information needed to process the request, such as account identifiers and network connection information. We keep limited request counts and deletion verification records for service security and reliable operation. If you email support, we receive your email address and the information you include. |
2. How information is used
We use this information to save and display your content, generate your local connection plan and mood summaries, connect the two accounts you choose to pair, exchange private content, update widgets after the app receives shared content, schedule the local reminders you choose, verify subscriptions, restore purchases, handle support and safety reports, enforce blocks, and protect the service against unauthorized access or repeated requests.
Advertising measurement is described in section 4a. Your journal and shared relationship content are not public posts.
3. What your partner can see
When you connect to a partner, they can see the display name and content you share in that connection. Live drawing drafts may appear while you draw. A daily-question answer becomes visible to your partner after both of you have answered that day’s question. Your unshared local journal and connection quiz are not automatically shown to your partner.
Received drawings can be displayed in a Love Notes widget you add to your Home Screen. Your partner’s shared feeling can be displayed in a Partner feeling widget you add to your Lock Screen. In Us → Widgets, you can explicitly turn on Show new drawings automatically for your current connected partner. Eligible new drawings from that partner may then appear without individual approval. That permission does not carry over to a different or ended connection; hidden and restricted content remain subject to the app’s safety controls. Open Moodstreak to receive new shared content; widgets use content the app has already received. iOS controls when the widget display refreshes. Anyone who can see that screen may be able to see the widget. A partner can also save or copy content they receive. Copies saved outside Moodstreak are controlled by the person who saved them.
The updated private space lets you screen received notes and answers before viewing them, hide received content, report a received note, answer or check-in, disconnect or block your partner. Reports are confirmed only after the service stores them; a confirmed report also hides that content on your phone. Reporting a check-in hides that reported version while allowing a later check-in to appear. Screening uses your viewing choices; it does not use an AI classifier. Love Notes widgets honor hidden-note choices, individual approval and your automatic-drawings permission for the active connection. Content that still needs safety review remains covered until you approve it. You choose whether to show the live canvas.
Before storing a chosen name, note text, daily answer or mood-note text for sharing, the new private-sharing service checks it against a limited set of normalized threatening and hateful phrases. Matching text is rejected for revision. This text check does not classify artwork or detect every form of objectionable content; recipient screening, reports and human review remain separate controls.
After the service confirms a disconnect or block, the active private space ends, its live drafts are removed, and the original partner link is revoked. Further sharing and shared-plan access through that connection stop. This does not delete your account, journal, purchases or the finished content stored in the ended space. A block prevents the same installation pair from reconnecting, including after an anonymous account is recreated. Existing offline copies and copies saved outside Moodstreak cannot be recalled by that action.
4. Services that process information
- Supabase provides authentication, cloud storage and the service that handles partner sharing. Cloud content is processed by Moodstreak and its infrastructure providers to deliver these features.
- Apple processes App Store purchases, and iOS schedules local reminder notifications on your device. If you use voice transcription in a version that offers it, Apple’s speech recognition service processes the audio needed to produce the transcript.
- RevenueCat processes purchase history and our generated app user identifier to validate purchases, maintain subscription access and provide subscription reporting. Its data practices are described in the RevenueCat Privacy Policy.
- AppsFlyer processes installation, session and subscription-measurement information. Meta can receive configured advertising-measurement events and Apple's aggregate attribution signals, subject to the privacy limits described below. See the AppsFlyer Services Privacy Policy and Meta Privacy Policy.
- OpenAI processed conversation text and emotional-profile context for AI coach or reflection features in older versions that offered them. This could include mood-related context and was not limited to the last message typed. The updated couples interface does not expose those AI features. Its shared drawings, daily answers, safety reports and text-filtering service do not automatically send content to OpenAI. Older local chat history and provider records may remain as described under retention. See OpenAI’s Privacy Policy and API data controls.
Providers that process information on our behalf are required to provide the same or equivalent protection for that information under applicable data-processing terms and the safeguards described in this policy. Supabase's Data Processing Addendum and RevenueCat's Data Processing Addendum, incorporated into their service terms, include purpose limits, confidentiality and security obligations. Apple and providers' independent records are also governed by their own applicable terms and data practices.
Provider records, such as Apple purchase records or older AI service security logs, are not all erased by deleting local app content. We do not promise that information already processed by a provider can be immediately removed from its systems.
4a. Advertising measurement
The updated app includes AppsFlyer's Strict SDK, which starts automatically when the app opens to measure installations and sessions. AppsFlyer processes its installation identifier, Apple's vendor identifier (IDFV), network IP address, an approximate region derived from that IP address for reporting, and technical app and device information such as app version, device model and operating system. Moodstreak also supplies its existing generated purchase identifier as a customer user ID to associate measurement with subscription events. This SDK does not collect Apple's advertising identifier (IDFA), and the app does not request Apple's tracking permission. It does not use GPS location. Measurement is not fully anonymous: the generated identifiers described above still link an installation and its subscription events.
Moodstreak supplies the AppsFlyer installation identifier to RevenueCat. This integration does not use RevenueCat's automatic device-identifier collection or populate its IDFA, IDFV or IP advertising attributes. Through the configured server integration, RevenueCat can forward subscription purchases, renewals and related revenue information to AppsFlyer with the AppsFlyer identifier. AppsFlyer can send configured subscription events to Meta for campaign measurement. Reporting is subject to AppsFlyer's Advanced Privacy (AAP) settings, Meta's Advertiser Tracking Enabled (ATE) restrictions, account configuration and platform rules; the Strict SDK does not make every installation individually attributable to a Meta campaign.
Separately, the app uses Apple's SKAdNetwork through native iOS APIs for aggregate installation and eligible paid-subscription conversion measurement. Moodstreak controls these conversion updates; the AppsFlyer SDK's own SKAdNetwork updates are disabled. The current aggregate schema records installation and whether a paid subscription purchase occurred, not the exact purchase amount or subscription renewals. Depending on the campaign configuration and Apple's attribution rules, Apple can send delayed, privacy-preserving postbacks to Meta and copies to AppsFlyer. Apple controls their availability, timing and privacy limits; some conversion details may be withheld. These aggregate Apple postbacks do not contain a user-level identifier supplied by Moodstreak.
Your feelings, drawings, question answers, conversations, names, partner codes and journal content are not sent to AppsFlyer or Meta by this integration.
A local installation/conversion marker remains during account cleanup so the same installation does not reset its conversion state; it contains no relationship content. Account deletion stops this integration's automatic requests and clears the advertising link in the app's RevenueCat attributes. Deleting the app or account does not retract aggregate reports or erase all information already processed by providers. For help with access or erasure requests, contact moodstreakco@gmail.com; we will handle applicable requests with the relevant providers, subject to retention obligations.
5. Retention and account deletion
Local content remains on your device until you remove it or complete local account cleanup. Shared cloud content remains associated with your account and partnership while needed for those features, unless it is removed through an available deletion action. Removing the app alone does not delete your cloud account.
Hiding received content changes its visibility on your phone; it is not a cloud deletion request. Disconnecting or blocking retains finished notes, answers, mood updates and the ended room in the service. Drawing reports remain in a private review queue and are removed when the reporting account or referenced note is deleted. Received-answer/check-in report copies remain available for review if the original content later changes; they are removed when the reporting account, sending account or associated room is deleted. Block records contain only hashed installation identifiers and a timestamp; they have no automatic expiry and remain to enforce the block.
In the updated app: open Us → Privacy & account → Delete Moodstreak account. Before purchase, tap Privacy in the subscription screen footer to open the same account controls and a link to this policy. Confirming deletion removes your cloud account, original cloud partner connection and mood updates, plus the drawings, answers and live canvas you created. It ends your partner connection. Your partner keeps their own content.
After the service confirms deletion, the app removes its local journal, media, chats, profile, quiz, drafts, saved partner history and widget snapshots from that phone. If the service or local cleanup cannot finish, the app shows the error and lets you retry. It does not report successful cloud deletion before the account removal is confirmed.
Minimal deletion verification records are retained so an interrupted request can finish safely. Completed requests have a 30-day retry window. A hashed original installation identifier is retained to prevent older app versions or delayed purchase events from recreating deleted partner data. These records do not contain your drawings, answers, journal entries or mood text.
Deleting your account does not cancel your App Store subscription or erase Apple and RevenueCat purchase records. The app retains the identifier needed to restore purchases. You can manage or cancel renewal in App Store subscription settings.
Purchase restoration and private-account recovery are separate. A retained secure session and installation identity may let the same phone reconnect after reinstalling the app. They are stored as device-specific records, not as a cross-device account login. If those records are lost, or you move to another phone, restoring an Apple purchase alone does not recover the previous anonymous account, partner room or shared history.
Received copies cached on your partner’s device may remain until their app reconnects and updates. We cannot remove screenshots, exports or copies saved outside Moodstreak. A new shared account is created after deletion only if you explicitly choose to create one; it does not restore the deleted relationship or content.
If your installed version does not have the account deletion option, or you need help with a data request, email moodstreakco@gmail.com.
6. Your choices and security
You choose whether to connect a partner, share a feeling or drawing, approve received content, show drawings automatically from your current partner, hide or report received content, disconnect or block, attach journal media, use an available AI or voice feature, add a widget, or enable local reminders. You can change camera, photo, microphone, speech-recognition and notification permissions in iOS Settings. Denying these optional permissions does not cancel your subscription. Turn off Show new drawings automatically in Us → Widgets to return to choosing received drawings individually. You can also hide a drawing, disconnect or block your partner.
Network connections to our sharing service use HTTPS. Shared-space requests are checked against the account and partnership before private content is returned. Cloud processing is used to provide the service; private sharing is not a promise that content is accessible only on the two phones. No service can guarantee absolute security.
7. Children and changes to this policy
Moodstreak is not directed to children under 13. If you believe a child has provided personal information, contact us so we can investigate and handle the request.
We may update this policy as the app changes. The date above identifies the latest version. Material changes will be made available through the updated policy and, where appropriate, in the app.
8. Contact
For privacy questions, account deletion help or other data requests, contact Moodstreak at moodstreakco@gmail.com.