MoodSync privacy policy
Last updated: 2026-05-09
Summary
MoodSync is built privacy-first. Your mood entries — clinical scales, sleep, medication, notes — never leave your device except to sync with your own private iCloud account. We collect a small amount of anonymous usage data to improve the app, which you can turn off in Settings.
What stays on your device
The following data is stored only on your device and (optionally) in your private iCloud:
- Mood entries: mood score, depression / elevation / irritability / anxiety scales, sleep hours, medication taken, notes
- Reminder preferences and theme
- Onboarding answers and app settings
We never read this data. If you sign out of iCloud, sync stops; if you delete the app, the data is removed from the device.
What we send to third parties
Anonymous usage analytics — TelemetryDeck
To understand how MoodSync is used and improve it, we send a small set of anonymous events to TelemetryDeck— a privacy-focused analytics service that does not track users across apps, does not use advertising identifiers, and does not link events to your identity.
The events tell us things like:
- Which screens you visited during onboarding
- Which onboarding goal you selected (e.g. Track patterns for my doctor, Catch episodes earlier)
- Which symptoms you said you relate to (e.g. Bad sleep throws me off, Hard to stay on meds)
- Whether you ever filled in optional fields like sleep or notes (yes/no, never the values themselves)
- Anonymous app launches, paywall views, citation taps
- Whether and which subscription tier was purchased
What we never send:
- Your mood scores, depression / elevation / irritability / anxiety values
- Your sleep hours, medication adherence, or notes
- Your name, email, Apple ID, or advertising identifier
- The contents of any individual entry
About the install identifier we DO send.TelemetryDeck identifies your install with a one-way salted hash of your device's vendor identifier (Apple's identifierForVendor). This hash is stable per install— that's how the dashboard counts distinct users and measures retention. It's a one-way hash, so we can't reverse it to anything that identifies you, and it never includes your name, email, or any data you've entered. Per Apple's classification this still counts as "linked to a user" because two events from the same install share the same hash, and we disclose it that way honestly in the App Store privacy nutrition label.
The onboarding answers (goal + pain points) are health-adjacent because they describe how you experience bipolar disorder. They are sent only as anonymous category strings (e.g. goal=doctor), tied to the install hash above so we can analyze whether (for example) people who picked "Track for my doctor" use MoodSync differently than people who picked "Catch episodes earlier" — but never linked to your real identity.
iCloud sync — Apple
If you are signed into iCloud, MoodSync uses Apple's CloudKit to sync your entries between your devices. This data is encrypted in transit, stored in your private iCloud database, and is not accessible to us. Disable sync via iOS Settings → iCloud → MoodSync.
App Store — Apple
Subscription purchases are processed entirely by Apple. We receive only an indication that an active subscription exists for your Apple ID (used to unlock Pro features). We do not see your billing details.
How to opt out
Open MoodSync → Settings → Privacy → Anonymous Usage Data and turn the toggle off. After opt-out, no further analytics events are sent. The TelemetryDeck SDK is also not initialized when the toggle is off, so no session metadata is sent in the background.
You can flip the toggle at any time. Opting out does not affect your ability to use any feature of the app.
Data we never collect
- Location
- Contacts
- Photos or files outside your CSV export (which is shared by you, only when you tap Export)
- Microphone or camera
- Web browsing
- Cross-app activity
Children
MoodSync is not directed at children under 13 (16 in the EU/UK). We do not knowingly collect any data from children.
Your rights (GDPR / CCPA)
The analytics we send is tied only to a one-way hash of your install — we have no way to identify you from it, retrieve your individual events on request, or correlate it to anything outside MoodSync's analytics dashboard. Your on-device data is fully yours: you can export it (CSV) or delete it via Settings → Data → Delete All Data. To stop sending new analytics, toggle off Settings → Privacy → Anonymous Usage Data.
If you have questions about your rights or this policy, contact us at contact@potylabs.com.
Changes to this policy
We will update this page when our practices change. Material changes will also be surfaced in-app via a release-notes update.
Contact
PotyLabs · contact@potylabs.com