Privacy Policy

Effective Date: March 14, 2026

InsightMood ("we", "us", or "our") is the data controller responsible for your personal information. We operate from Canada and are committed to protecting your privacy in accordance with applicable Canadian privacy laws. This Privacy Policy explains how we collect, use, and share your personal information when you use the InsightMood mobile application (the "App").

1. Information We Collect

In this policy, "personal information" means information that identifies you as an individual. "User content" refers to the text you write in journal entries and stress tags. "Aggregated data" means statistical information derived from multiple users that cannot identify any individual.

1.1 Account Information

Email address — used for authentication and account recovery.
Timezone — used to display dates and schedule notifications correctly.

1.2 Emotion Data

Emotion type — the emotion you select (e.g., happy, anxious, calm).
Intensity — a numeric value (1–10) indicating how strongly you feel the emotion.

These are stored on our servers to provide analytics and feature functionality.

1.3 Data Stored Only on Your Device

Privacy Highlight The following data is not stored on our servers:

Journal text — your written reflections.
Stress tags — labels you assign to entries.
Detailed AI analysis — trigger words, reflections, and extended analysis results.

When AI analysis is performed, your journal text and stress tags are transiently transmitted through our server to the AI provider for processing, but are not retained on our server afterward. See Section 1.4 for details.

1.4 AI Analysis

AI analysis is automatically performed when you create an emotion entry that includes journal text. The following user content is sent to our AI provider: your emotion type, intensity value, journal text, and stress tags. You can disable this in the App settings.

This content is used solely to generate your analysis and is sent without any personally identifiable information (such as your email address, name, or account identifier). The AI provider cannot link the content back to your identity.

We store on our servers only the classification result (primary/secondary emotion, intensity score, context category). Detailed analysis content is stored locally on your device.

1.5 Other Data

Subscription status — to manage Free and Premium features.
Device notification token — to send push notifications you have opted into.

2. Third-Party Services

We use the following third-party services to operate the App:

Service	Provider	Data Shared	Purpose
Firebase Authentication	Google LLC	Email, unique identifier, device info	User authentication
Firebase Cloud Messaging	Google LLC	FCM token	Push notifications
Firebase Analytics	Google LLC	App usage events, screen views, device model, OS version (no advertising identifier)	Anonymous usage analytics to improve the App
xAI Grok API	xAI Corp.	Emotion type, intensity, journal text, stress tags (without PII)	AI emotion analysis
RevenueCat	RevenueCat Inc.	Firebase UID, purchase receipt	Subscription management
Apple	Apple Inc.	Purchase transactions	In-app purchases

Each third-party provider processes data in accordance with its own privacy policy. We encourage you to review their respective policies. We do not control, and are not responsible for, the privacy practices of these third parties.

3. How We Use Your Information

Provide and improve the emotion tracking and AI analysis features.
Authenticate your identity and maintain your account.
Process subscription purchases.
Send push notifications you have opted into (e.g., daily reminders).
Generate aggregated statistics (emotion trends, patterns) for your personal use.
Collect anonymous app usage analytics (such as screen views and feature usage) to improve the App experience. We do not collect your advertising identifier (IDFA) and you will not be prompted for tracking permission.

We do not sell your personal information. We do not use your personal information for advertising.

4. Data Retention and Account Deletion

Server-side data — retained for the duration of your account. When you delete your account, all server-side personal information (including emotion entries, AI analysis results, and account details) is permanently deleted.
Local data — cleared when you sign out. Removed from your device when you uninstall the App.
xAI API logs — xAI may retain API request logs in accordance with their privacy policy.

Subscription records: After account deletion, we may retain minimal transaction records (such as anonymized purchase identifiers and subscription dates) as required for legal compliance, financial auditing, or fraud prevention. Apple and RevenueCat may independently retain purchase records in accordance with their own policies. These retained records do not include your email address or other personal information.

5. Your Rights

Under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Canadian privacy laws, you have the right to:

Access your personal information — view your entries and account details within the App.
Correct inaccurate personal information — update your email or account details.
Request deletion of your account and all associated personal information — available in the App under Settings > Delete Account.
Withdraw consent — you can disable automatic AI analysis in the App settings. You can disable push notifications in your device settings or within the App.

To exercise any of these rights, you may use the in-app controls or contact us at the email address below.

6. International Data Transfers

Our servers are located in Canada. However, some of the third-party services listed in Section 2 may process your data in jurisdictions outside Canada (including the United States). When your data is transferred internationally, it is subject to the privacy laws and practices of the receiving jurisdiction. We take reasonable steps to ensure that third-party providers offer an adequate level of data protection.

7. Children's Privacy

InsightMood is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will promptly delete it.

8. Security

We take reasonable measures to protect your personal information, including:

All data is transmitted over HTTPS (TLS encryption).
Authentication is handled via Firebase JWT verification.
API endpoints are protected by rate limiting to prevent abuse.
Journal text and stress tags remain on your device only.

However, no method of electronic storage or Internet transmission is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

9. Data Breach Notification

In the event of a data breach involving your personal information that poses a real risk of significant harm, we will notify you and the Office of the Privacy Commissioner of Canada as required by PIPEDA. Notification will include a description of the breach, the types of information involved, and steps we are taking in response.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy within the App or by email. The "Effective Date" at the top indicates when the policy was last revised. Your continued use of the App after a revised policy becomes effective constitutes your acceptance of the updated terms.

11. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at:

Email: support@insightmood.app