Last updated: July 10, 2026
Moodflow is a mental health and mood‑journaling app. It is a place to write down what you actually think and feel, so privacy is not a feature we bolt on — it is the way the app is built. This policy explains, in plain language, exactly what information Moodflow handles, where it is stored, who (if anyone) it is shared with, and how long it is kept.
Moodflow is operated by Walter Monecke ("Moodflow", "we", "us", "our"), based in Spain. For anything in this policy, you can reach us at hellomoodflow@gmail.com or through our Support page.
The short version. Your journal — your entries, notes, moods, photos, tags, location labels, sleep, vitals, and your Body & Hormones (cycle) data — lives on your device. We cannot see it and we never receive a copy. If you turn on backup, it goes to your own Google Drive, not to us. The only things that reach our servers are your account details (if you create an account), your backup photos if you subscribe to Moodflow Plus, limited technical and diagnostic data, and the coordinates you look up for maps and weather. We do not sell your data, we show no ads, and there are no advertising or tracking networks in the app.
The data controller responsible for your information is Walter Monecke, operating the Moodflow app (available on the Apple App Store and Google Play) and the website moodflow.co, based in Spain.
Moodflow is local‑first. You can use the core app — journaling, moods, insights, cycle tracking — without creating an account and without an internet connection. When you write an entry, it is saved in the app's private storage on your phone. It is not uploaded to a database we control.
An account (and the internet) is only needed for optional extras: backing up to your Google Drive, cloud photo backup for Moodflow Plus subscribers, weather on entries, turning coordinates into place names, and managing your subscription.
The following is stored only on your phone, in the app's private storage, and is never transmitted to us:
Some of the most sensitive information (your Body & Hormones section) can be locked behind your device's biometrics (Face ID / fingerprint) so that only you can open it. This on‑device data stays on your phone until you delete it or uninstall the app. Because we never receive it, we cannot retrieve, share, or restore it for you.
If you choose to create an account — required for Google Drive backup, Moodflow Plus photo backup, and syncing your subscription — we collect and store, through our authentication provider Google Firebase Authentication:
We do not collect your date of birth at sign‑up. If you choose to add a birthday inside the app, it is stored on your device only (see section A) and is optional.
If you enable backup, Moodflow creates a backup file and stores it in the hidden, app‑private folder of your own Google Drive (appDataFolder). We request only the narrow Google Drive permission needed for this hidden folder — we cannot see the rest of your Drive.
Because this is your Google account, its use is also governed by Google's Privacy Policy.
If — and only if — you are a Moodflow Plus subscriber, the photos you attach to entries are backed up to our secure cloud storage (Google Firebase Storage) so you don't lose them when you change phones. Each image is stored under your own account's private folder. This is the only journal content that is ever stored on our servers. Free users' photos never leave the device (except within the user's own Google Drive backup, if enabled).
Location is optional and used only in the foreground — Moodflow does not track your location in the background and does not follow your movements.
To keep the app stable and understand which screens are used, we collect a limited amount of technical data through Google Firebase:
Moodflow Plus is sold through the Apple App Store and Google Play. Payments are processed by Apple and Google — we never receive or store your card number or full billing details. We use RevenueCat to manage subscription status; RevenueCat receives your account identifier, email, name, and purchase history to keep your subscription in sync across devices.
Like any app that connects to the internet, when your device contacts our servers or our providers, those servers automatically receive your IP address and basic device information (such as app version, operating system, and device model). A device identifier and app/version information are also included in the metadata of your Google Drive backup (stored in your own Drive).
We use the information above only to:
We do not use your data for advertising, we do not sell it, and we do not share it with data brokers.
If you are in the European Economic Area (EEA) or the UK, we rely on the following legal bases:
Special‑category data (Article 9 GDPR). Some information you can record in Moodflow — such as data revealing your health, mental well‑being, or your Body & Hormones (cycle and reproductive‑health) information — is a "special category" of personal data that receives extra protection under Article 9 GDPR. Moodflow is built so that this information stays on your device and is not transmitted to us. Where you nonetheless choose to enable an optional feature that involves such data (for example, including your cycle data in your own Google Drive backup, or backing up photos that may reveal health information as a Moodflow Plus subscriber), we process it only on the basis of your explicit consent, given when you turn that feature on. You can withdraw that consent at any time by turning the feature off, and — because you control the data on your device and in your own Drive — you can delete it yourself.
No automated decision‑making. Moodflow's insights, correlations, trends, and predictions are generated automatically from the data you enter and are shown to you, for self‑reflection only. We do not use them to make any decision that produces legal effects concerning you or similarly significantly affects you, and we do not carry out that kind of solely automated decision‑making or profiling.
We keep information only for as long as it is needed for the purpose it was collected, or as long as the law requires. Because Moodflow is local‑first, most of your data is kept only on your device, under your control — we have no copy and therefore retain nothing.
| Data | Where it lives | How long we keep it |
|---|---|---|
| Entries, notes, moods, photos, tags, location labels, sleep, vitals, and Body & Hormones data | Your device only | Until you delete it or uninstall the app. We keep no copy. |
| Google Drive backup (optional) | Your personal Google Drive (hidden app folder) | The 4 most recent backups are kept; older ones are deleted automatically. Removed entirely when you delete your account or delete them yourself. |
| Account details (email, name, profile photo) | Our authentication provider (Google Firebase) | For as long as your account exists. Deleted when you delete your account. |
| Backup photos (Moodflow Plus only) | Our cloud storage (Google Firebase Storage) | Until you delete the photo or delete your account, after which the image is removed from our servers. |
| Location and weather lookups | Temporary server logs | Automatically deleted within 30 days. |
| Analytics (screen views, in‑app review feedback) | Google Firebase Analytics | Up to 14 months, in aggregate. |
| Crash and error diagnostics | Google Firebase Crashlytics | Up to 90 days. |
| Subscription and purchase records | RevenueCat, Apple, Google | For the life of the subscription and as long as tax and accounting law requires. |
| Support messages | Our email inbox | As long as needed to resolve your request. |
Deleting your data. You can delete individual entries at any time inside the app. You can delete everything at once using Settings → Delete account, which removes your account, deletes all of your Moodflow backups from your Google Drive, and erases the app's data from your device. Uninstalling the app removes all on‑device data. To request deletion of any remaining server‑side data, email us at hellomoodflow@gmail.com.
We do not sell your personal data and we do not share it for advertising. We use a small number of trusted service providers ("processors") strictly to run the features above:
| Provider | What it helps us do | What it receives |
|---|---|---|
| Google Firebase (Authentication, Storage, Analytics, Crashlytics, Cloud Functions) | Accounts, Plus photo backup, diagnostics, location/weather lookups | Account details, backup photos (Plus only), device and diagnostic data, location coordinates |
| Google Drive | Your optional personal backup | Your backup file (stored in your own Google account) |
| Google Maps Platform | Show maps and turn coordinates into place names | Location coordinates |
| WeatherAPI.com | Provide weather for your entries | Location coordinates |
| Unsplash | Offer background images | No personal data (only an image request) |
| RevenueCat | Manage your subscription | Account identifier, email, name, purchase history |
| Apple App Store / Google Play | Process payments | Purchase and billing data (handled by them) |
We may also disclose information if required to do so by law, or to protect our rights, safety, or the integrity of the service.
We operate from Spain (EU). Some of our providers (such as Google and RevenueCat) may process data on servers located outside the EEA, including in the United States. Where that happens, the transfer is protected by appropriate safeguards, such as the European Commission's Standard Contractual Clauses or an equivalent adequacy mechanism.
You have the right to:
Because most of your data is stored only on your device, you can exercise many of these rights directly in the app (edit or delete entries, delete your account). For anything else, email hellomoodflow@gmail.com and we will respond within one month. You also have the right to lodge a complaint with your local supervisory authority — in Spain, the Agencia Española de Protección de Datos (www.aepd.es).
You have the right to know what personal information we collect and how we use it, to request its deletion, to correct it, and to not be discriminated against for exercising these rights. We do not sell or share your personal information as those terms are defined under California law. To exercise your rights, contact us at hellomoodflow@gmail.com.
Moodflow is not directed to children under 16 (or the minimum age of digital consent in your country — 14 in Spain). We do not knowingly collect personal data from children below that age. If you believe a child has provided us with personal data, please contact us and we will delete it.
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top and, where appropriate, notify you in the app. Continued use of Moodflow after an update means you accept the revised policy.
If you have any questions, requests, or concerns about this Privacy Policy or your data, contact us at:
