Legal
Privacy Policy
Effective Date: September 10, 2026 - Last Updated: October 13, 2026
This Privacy Policy explains how Moodscape (“Moodscape,” “we,” “us,” or “our”) collects, uses, shares, and protects personal information when you use our mobile application and related services (collectively, the “Service”).
This Policy is designed to comply with the EU General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA), India's Digital Personal Data Protection Act, 2023 (DPDP Act), and other applicable privacy laws. This notice describes our practices; it does not replace consent where consent is required.
1. Who We Are (Data Controller / Data Fiduciary)
For the purposes of GDPR, UK GDPR, and similar laws, the data controller is:
Atul Kumar Jaiswal, operating Moodscape
Blue Sky High Rise, Aakriti Eco City
Bawadiya Kalan, Bhopal
Madhya Pradesh 462039
India
Email: support@getmoodscape.com
For the purposes of India's DPDP Act, Atul Kumar Jaiswal, operating Moodscape, is the data fiduciary. Moodscape is operated from India.
You can contact us at the address above for any privacy-related questions, requests, or complaints. If you are located in the European Economic Area (EEA) or the United Kingdom and we are required to appoint a representative under Article 27 GDPR, we will publish their contact details here.
2. Information We Collect
2.1 Information You Provide Directly
| Category | Examples |
|---|---|
| Account information | Email address, name, profile image, and authentication identifiers received from our authentication provider or your chosen sign-in provider. |
| Profile and onboarding information | First name, last name, date of birth (optional), wellness goals, onboarding questionnaire responses, app preferences. |
| Journal content | Journal entries, titles, mood selections, and associated timestamps you create. Journal content is stored using encryption controls and is private to your authenticated account. |
| AI moodscape prompts | Text prompts you submit to personalize moodscape sessions, plus saved moodscape records. |
| Support and feedback | Messages, cancellation reasons, and survey responses you submit. |
| Subscription information | In-app purchase product IDs, transaction identifiers, original transaction IDs, app account tokens, subscription status, renewal status, period start/end dates, environment (sandbox/production), and auto-renew flags received from the app store payment provider. We do not receive or store your payment card details. Payments are processed by the app store payment provider. |
2.2 Information Collected Automatically
| Category | Examples |
|---|---|
| Usage and progress data | Listening activity, listening seconds, streaks, achievements, recently played items, journal activity, moodscape generation counts, completion rates, feature interactions, and non-content safety-control events such as whether a journal save was blocked. |
| Device and notification data | Push notification tokens, notification preferences, timezone, app version, operating system, and basic device information needed to operate notifications and core functionality. |
| Advertising attribution data | Advertising identifier (IDFA) only when you allow tracking through Apple's App Tracking Transparency prompt, app version, referral or attribution metadata, and limited measurement events: app installs/opens, completed registration, login, trial activation, verified subscription activation (including server-confirmed trial-to-paid conversion), and aggregate SKAN revenue measurement. We do not send journal content, moodscape prompts, listening activity, or health-related information for advertising attribution. |
| Diagnostics | Error and performance information generated by the app or service infrastructure used for reliability and security. |
| Email communications data | Whether emails we send you were delivered, opened, clicked, bounced or marked as spam, and your email preferences, including unsubscribe requests. |
Product analytics and subscription measurement
We use Amplitude for product analytics. It receives feature and screen events, listening interactions, purchase-funnel events and subscription lifecycle events, with an analytics device identifier and, when signed in, our account identifier. Campaign source, campaign/ad metadata and an AppsFlyer identifier may be attached to that analytics profile so we can understand how people discover and use Moodscape. This data is linked to an account or device, not anonymous merely because an identifier is pseudonymous.
We configure Amplitude's client SDK not to record the device IP address as an analytics property. Network providers still process connection metadata to deliver requests. Generated soundscape names are replaced with a generic label in analytics; prompts and journal text are not event properties.
App stores also notify our servers about subscription changes while the app is closed. We send trial conversion, renewal, cancellation, renewal re-enabling, expiry and refund events to Amplitude. For advertising measurement, our servers send only eligible verified trial-to-paid conversions to AppsFlyer, not cancellation or renewal events. We store analytics identifiers and the last reported tracking choice to address these events. The server checks that recorded permission before AppsFlyer delivery; a changed device setting is synchronized when the app next opens or returns to the foreground. Sandbox server events are excluded from AppsFlyer delivery.
AppsFlyer measures installs and limited conversions and can forward these to Meta and Google Ads, including privacy-preserving SKAN measurement. We do not send journal text, moodscape prompts, listening history or wellness questionnaire responses to these attribution or advertising partners. Product analytics in Amplitude and advertising measurement have different data scopes.
2.3 Information We Do Not Collect
We do not collect:
- Payment card numbers, CVVs, or billing addresses (handled by the app store payment provider).
- Precise geolocation. Attribution providers may derive approximate country or region from network information; this is not GPS location.
- Contacts, calendars, photos (beyond images you explicitly choose to use), microphone audio, or biometric identifiers.
- The IDFA when you decline Apple's App Tracking Transparency prompt. App-scoped analytics and attribution identifiers are distinct from the IDFA and may still be processed as described. We do not display third-party advertising inside the app.
2.4 Sources
Personal information comes from: (a) you directly; (b) your device; (c) our authentication provider; (d) the app store payment provider, when you make in-app purchases; and (e) advertising attribution providers, when you interact with a Moodscape ad or allow tracking.
3. How and Why We Use Information (Purposes and Legal Bases)
For users in the EEA and the UK, the table below sets out the legal basis under GDPR for each purpose:
| Purpose | Legal Basis (GDPR) |
|---|---|
| Provide authentication, account management, and access to the Service. | Performance of a contract (Art. 6(1)(b)). |
| Store and sync journal entries, listening progress, achievements, saved moodscapes, and notification preferences. | Performance of a contract. |
| Apply journal privacy, local-lock, and safety controls, including preventing certain high-risk journal entries from being saved. | Performance of a contract; legitimate interest in protecting the Service and our users. |
| Personalize moodscape sessions when you submit a prompt. | Performance of a contract; consent where required for AI processing of your prompts. |
| Verify purchases, manage subscriptions, and prevent payment fraud. | Performance of a contract; legitimate interest in preventing fraud (Art. 6(1)(f)). |
| Send push notifications you have enabled (journal, journey, reengagement reminders). | Consent (Art. 6(1)(a)); you may withdraw consent at any time in app or OS settings. |
| Send service emails about your account, such as a welcome email after you sign up. | Performance of a contract; legitimate interest in helping you start using the Service. |
| Send occasional emails about features, tips and content, and measure email delivery and engagement. | Legitimate interest, or consent where required by law. You can opt out at any time using the unsubscribe link in any email or the Email updates setting in the app. |
| Measure the effectiveness of Moodscape ads and optimize paid acquisition using limited attribution and subscription-funnel events. | Consent where required, including through Apple's App Tracking Transparency prompt; otherwise legitimate interest in measuring our marketing. |
| Understand feature use and subscription retention through product analytics, and improve app reliability, performance, and user experience. | Legitimate interest in operating and improving the Service. |
| Comply with legal obligations, respond to lawful requests, enforce terms, protect rights. | Legal obligation (Art. 6(1)(c)); legitimate interest. |
| Detect, prevent, and investigate security incidents and abuse. | Legitimate interest in protecting the Service and our users. |
We do not use your personal information for automated decision-making producing legal or similarly significant effects. We use limited, non-sensitive attribution data to measure advertising and optimize paid acquisition. We do not use journal content, moodscape prompts, listening activity, or wellness questionnaire responses for advertising or attribution.
3.1 Journal Privacy, Local Lock, and Safety Controls
Journal entries are encrypted in transit and stored using server-managed encryption controls. Authorized backend services decrypt journal data only when needed to return entries to your authenticated account, save your edits, search entries at your request, or delete entries at your request.
Journal text is not used for analytics, advertising, or AI training, and journal entries are not sent to AI services for moodscape generation.
If you enable the optional journal lock, the app may ask your device to use Face ID, Touch ID, passcode, or an equivalent local authentication method before opening journal screens. Biometric authentication is handled by your device operating system. Moodscape does not receive or store your biometric identifiers.
The app may check journal text before saving to prevent entries containing certain high-risk self-harm language from being stored. If a save is blocked, the blocked journal text remains in the editor on your device and is not saved to our database by the new journal-save path. We may record a non-content safety event, such as that a journal save was blocked, but we do not record the journal text or exact matched term for analytics.
4. AI Processing
Moodscape uses AI-powered personalization to interpret text prompts you submit and prepare moodscape sessions. Your prompt is processed through our backend infrastructure and matched against our private moodscape audio catalog; the selected audio metadata and your prompt are stored so you can replay saved moodscapes.
Before you create a moodscape, the app requests your consent and reminds you not to include sensitive personal, medical, financial, emergency, or identifying information in prompts. If you do not consent, you can still use the rest of the app.
Moodscape prompts are used to provide the feature. They are not sold, used for advertising, or used by us to train AI models.
5. Third-Party Service Providers (Sub-Processors)
We use service providers for the purposes described below, under contractual data protection terms:
| Provider Category | Purpose | Data Processed | Location |
|---|---|---|---|
| Authentication and account management providers | Authentication, identity, and session management. | Email, name, profile image, authentication identifiers, and sign-in request metadata. | United States or global infrastructure. |
| Cloud database, storage, and backend infrastructure providers | Database, private file storage with signed URLs, backend functions, journal encryption, access control, and app reliability. | App data described in Section 2, processed only to provide the Service. | United States or global infrastructure. |
| App store payment and subscription providers | In-app purchases, subscription management, transaction verification, and subscription notifications. | App store account identifiers, transaction receipts, app account tokens, and subscription state. | United States or global infrastructure. |
| Push notification delivery providers | Delivering notifications you have enabled. | Push notification tokens and notification delivery metadata. | United States or global infrastructure. |
| Product analytics providers (Amplitude) | Understand feature use, reliability and subscription retention, and relate acquisition to product use. | Device/account identifiers, feature and listening events, subscription lifecycle and verified monetary events, campaign metadata, and email delivery and engagement events. The client SDK is configured not to record the device IP address as an analytics property. No journal text or moodscape prompt text. | United States or global infrastructure. |
| Email delivery providers (Resend) | Sending service and product emails and reporting delivery, opens, bounces and unsubscribes. | Email address, first name, account identifier, email content, and email delivery and engagement events. | United States. |
| Mobile attribution and advertising measurement providers (AppsFlyer; Meta and Google Ads) | Measure which paid campaigns result in installs and limited subscription-funnel conversions. | Advertising identifier when permitted, device and app identifiers, IP-derived technical metadata, campaign/referral metadata, app-open and limited conversion events, eligible server-confirmed trial-to-paid conversions and aggregate SKAN revenue measurement. No journal content, moodscape prompts, listening activity, or wellness questionnaire responses. | United States or global infrastructure. |
| Public website, CDN, and security hosting providers | Hosting public legal pages, public assets, secure media delivery, and protection against abuse. | IP address and request metadata when you visit public web pages or request hosted media. | Global infrastructure. |
6. How We Share Information
We do not sell personal information for money. We disclose limited identifiers and conversion data for advertising measurement as described. We disclose personal information only:
- With the providers and recipient categories identified in Section 5.
- With app store payment providers, to verify, manage, and refund subscriptions.
- With advertising measurement providers and advertising platforms, only as needed to measure Moodscape campaigns and optimize paid acquisition, subject to applicable consent and privacy choices.
- For legal reasons, where required by law, subpoena, court order, or to protect rights and safety.
- In connection with a business transaction, such as a merger, acquisition, or sale of assets.
- With your consent, or at your direction.
7. International Data Transfers
Moodscape is operated from India and uses service providers located in the United States and other countries. When we transfer personal data from the EEA, UK, or Switzerland to a country without an adequacy decision, we rely on appropriate safeguards, including Standard Contractual Clauses (SCCs), the UK International Data Transfer Addendum, or equivalent mechanisms.
8. Data Retention
| Data | Retention |
|---|---|
| Account, profile, journal entries, saved moodscapes, activity, achievements, notification preferences. | Until you delete the data in app or delete your account. After account deletion these records are deleted, as described in Section 9. |
| AI moodscape prompts and saved moodscape records. | Until you delete the moodscape or your account. |
| Subscription entitlement records held by us. | Until you delete your account. Apple and Google hold the underlying transaction records and retain them under their own policies. |
| Cancellation feedback. | Up to 24 months after submission for product improvement, or until you delete your account, whichever is sooner. |
| Diagnostic and security logs. | Up to 90 days for routine operations, longer where needed for investigations or legal hold. |
| Email preferences and records of emails sent to you. | While your account exists. After account deletion we keep records of emails we sent you (the type of email, its delivery status and dates) without your email address or name. If you unsubscribe from all email, or an email to you permanently bounces or is marked as spam, we keep your email address on a do-not-email list so that we continue to honor that choice, including after account deletion. |
9. Account Deletion: What Happens to Your Data
You can request account deletion at any time from Profile → Delete Account in the app, or by emailing support@getmoodscape.com.
When you delete your account:
- Your authentication identity record is permanently deleted.
- Your account and profile records are deleted, not anonymized.
- Your journal entries and their encryption keys, saved moodscapes, listening progress, streaks, achievements, collections, breathing sessions, push tokens, notification preferences, support and cancellation feedback are deleted from our active databases in a single atomic database transaction.
- Your subscription records held by us are deleted. Note: Apple and Google retain their own transaction records under their own policies; deleting your Moodscape account does not automatically cancel an active App Store subscription.
- We retain only: (1) a one-way SHA-256 hash of your account identifier to prevent replay recreation, (2) advertising/analytics identifiers solely to request that external providers erase their copies, (3) if applicable, your email address on our do-not-email list, solely so we do not email you again, and (4) records of emails we sent you, without your email address or name.
- Residual backups are overwritten in the ordinary course within 35 days.
10. Security
We implement industry-standard technical and organizational safeguards including HTTPS/TLS encryption, row-level access controls, server-managed encryption keys for journal entries, private storage buckets with short-lived signed URLs, service-role isolation, and least-privilege internal access.
11. Your Rights
Subject to applicable law (GDPR, UK GDPR, CCPA/CPRA, India's DPDP Act, and state privacy laws), you have the right to access, rectify, erase, restrict processing of, port, or withdraw consent for your personal information.
California residents have the right to know, delete, correct, and opt out of the “sale” or “sharing” of personal information. See Your Privacy Choices for available controls. We do not sell personal information for money.
Most rights can be exercised directly within the app. For other requests, email support@getmoodscape.com with the subject line “Privacy Request”.
You can stop marketing emails at any time with the Email updates setting in the app, or stop all email from us with the unsubscribe link in any email. If you only turn off Email updates, we will still send essential service messages about your account.
12. Children's Privacy
Moodscape is not directed to and is not intended for children under 16, or under 18 where applicable law treats people under 18 as children, including India. We do not knowingly collect personal information from children under these age thresholds.
13. Health and Wellness Disclaimer
Moodscape provides wellness, relaxation, journaling, breathing, and meditation content. It is not a medical device and does not provide medical advice, diagnosis, treatment, therapy, or emergency services.
If you are experiencing a mental health crisis or emergency, contact your local emergency services or a qualified healthcare provider immediately.
14. Cookies and Similar Technologies
The Moodscape mobile app does not use cookies. Our public legal and informational web pages may use strictly necessary cookies or logs (e.g., for security and DDoS protection). We do not use advertising or analytics cookies.
15. Changes to this Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the app, App Store metadata, email, or another reasonable method, and update the “Last Updated” date above.
16. Contact
For privacy questions, requests, or complaints:
Moodscape
Blue Sky High Rise, Aakriti Eco City
Bawadiya Kalan, Bhopal
Madhya Pradesh 462039
India
Email: support@getmoodscape.com
Privacy requests subject line: “Privacy Request”