Privacy Policy

This Privacy Policy explains how InmiMood ("the App") handles your data. The App is a personal journaling tool for logging "earworm" songs (songs stuck in your head), your mood, how the song came up, and notes about what was going on at the time.

This version replaces the prior policy to match how the App works today, including cross-device sync of your profile, the details you share when setting up that profile, optional paid subscriptions, and reminders. If anything below is unclear, contact us using the details at the end.

The App stores the following information, all of which you enter voluntarily:

• Song information (titles, artists, and related metadata)
• Your mood at the time of the entry, and the song's mood, each recorded as a numeric score
• How the song came up (for example, triggers or associations)
• Optional free-text notes about what you were doing or feeling
• Timestamps for each entry
• App settings and preferences, including any reminder times you choose
• If you set up your personal profile (see below), the details you share there: what to call you, your age, who you live with, your current situation, and what you hope to understand

The App does not require your name, email address, phone number, or other direct identifiers. Setting up the personal profile does ask for what you would like to be called, your age, who you live with, and your current situation (a fifth question, what you hope to understand, is optional). You can enter a nickname instead of your real name. Anything you type, in a note or in the profile, becomes part of your data and is handled as described below.

Mood and health data. Your mood scores and mood-related notes are health information. We treat it with the same care as the rest of your journal: it is never used for advertising, never sold, and never shared with third parties. It stays under your control as described below.

On supported devices, the App can use on-device AI (Apple Intelligence / Apple's Foundation Models) to build a short written summary of patterns in your journal, such as recurring situations, relationships, or emotional patterns you've written about. We call this your profile. It also holds the details you share when setting it up.

• Generated on your device. Your journal entries and profile details are never sent to us, to Apple, or to any other party in order to generate the profile.
• Stored encrypted. The profile is kept on your device as an encrypted file, with the encryption key held in your device's Keychain, separate from the file.
• Synced like the rest of your journal. If you use cloud sync (see below), your profile is synced along with your entries: through your private iCloud account on iOS, or through the private app-data area of your Google Drive on Android. It is also included in your encrypted device backup. We cannot read it through any of these channels.
• Optional. Devices that don't support Apple Intelligence don't generate a profile; the App works normally without one.
• Yours to delete. Deleting all of your data in the App removes your profile from your device and from cloud sync (see "Your Choices").

Your data is used only to provide the App's core features:

• Recording and organizing your song entries
• Letting you review your mood and listening patterns over time
• Generating your on-device profile to personalize what the App shows you
• Scheduling the reminders you ask for

We do not use your data for advertising, third-party analytics, or marketing.

Where your data lives depends on your device and settings:

• On your device. Entries, settings, and your profile are stored locally in the App's own storage.
• iCloud device backup (iOS). If iCloud Backup is on for your device, your entries and encrypted profile are included in your regular device backup, like other apps' data. This is automatic and controlled by your iOS settings, not something the App initiates.
• iCloud sync through CloudKit (iOS). If you are signed into iCloud, the App also actively syncs your entries and profile across your own devices using Apple's CloudKit service. This sync is scoped to your private iCloud account: Apple encrypts it in transit and at rest, we cannot access it, and it is not shared with other users or apps.
• Google Drive sync (Android). If you sign in with Google on Android, the App syncs your entries and profile to a private, app-specific area of your Google Drive (Google's "app data" folder). It is not visible in your regular Drive file list and is not accessible to us or to other apps. Signing in is optional; without it the App works but does not sync across devices.

We do not operate our own database or server for storing your journal data. Sync happens through Apple's and Google's infrastructure, scoped to your personal account.

• Song search. When you search for a song while logging an entry, your search text is sent in real time to Apple's Music and iTunes search services to find matches, like any search-as-you-type feature. We do not store or retain your search queries.
• Music access token. To search Apple Music, the App requests a short-lived access token from a small server we operate on Cloudflare. That request necessarily includes your device's IP address. To limit abuse, we keep a per-IP request counter that is automatically deleted within about two hours. Cloudflare may also record standard technical request information (such as the request time and IP address) in its operational logs for a limited period. We do not link any of this to your journal, mood data, or identity.
• Subscriptions. Optional paid features are purchased and managed through Apple's App Store (or Google Play on Android). Apple or Google processes your payment; we never receive your payment card details. The App checks your subscription status directly with Apple on your device, and we do not receive your purchase history or Apple ID.
• Reminders. If you turn on reminders, the App schedules local notifications on your device. They are not sent through any server.
• Feedback email. If you choose to email us feedback from within the App, the email includes the app version and platform (iOS/Android) plus whatever you write. This is optional and entirely user-initiated.

We do not sell your data, and we do not share it with third parties for advertising or marketing.

Your data passes through Apple's and Google's infrastructure only as described above: to sync your own data across your own devices, to search for songs, and to process purchases. We do not otherwise share, transmit, or provide access to your journal entries, mood data, or profile to anyone.

Your data is protected using the security mechanisms of your device and of Apple's and Google's platforms, including device-level encryption, Keychain-protected encryption keys, and the isolation of your private iCloud (CloudKit) database. While we design the App carefully, no system can be guaranteed completely secure.

We do not hold your journal data, so there is nothing for us to retain or delete on our side. Your data stays on your device, and in your own iCloud or Google Drive if you use sync, until you delete it.

• Delete all data in the App. The App has a "delete all my data" option that removes your entries and profile from your device and from your iCloud or Google Drive sync copy.
• Device backups. Copies already in an iCloud device backup are controlled by iOS. They remain until you delete that backup or it is overwritten by a newer one.
• Uninstalling. Removing the App deletes data stored locally on your device. It does not by itself remove your cloud sync copy, so use "delete all my data" first if you want that gone.

• Edit or delete individual entries at any time in the App.
• Delete all of your data from within the App, including your profile and cloud sync copy.
• Turn off iCloud Backup or iCloud sync at any time in your device's system settings.
• On Android, sign out of Google to stop Drive sync.
• Turn off reminders in the App or in your system notification settings.
• Cancel a subscription at any time in your App Store (or Google Play) subscription settings.

The App is not intended for children under 13. We do not knowingly collect data from children under 13.

We will update this policy when we add or change features that affect how your data is handled, and we will update the "Last updated" date above. If a change is significant, we will aim to make that clear in the App as well.