Privacy policy

Information we collect

• From your Google account (when you choose to sign in with Google, through our sign-in provider Okta): your first name, last name, email address, and profile photo URL. We request only the standard openid, email and profile permissions. We do not access your Gmail, contacts, Drive, calendar or any other Google data, and we never see your Google password.
• Information you provide: a username, an optional phone number, an optional uploaded profile photo, and the mood updates you post.
• Account activity: when your account was created and when you last signed in.
• Technical data: our hosting provider keeps standard server logs (such as IP address, browser type and request time) for security and troubleshooting.

How we use Google user data

Information received from Google is used only to:

• sign you in and keep you signed in;
• create your account and pre-fill your name and photo;
• suggest a username from your email address;
• show your profile to you, and your public profile to others as described below.

Use of Google user data is limited to providing these user-facing features. User Moody's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We do not, and will not:

• use Google user data for advertising, including targeted, personalized, retargeted or interest-based ads;
• sell Google user data, or give it to data brokers or information resellers;
• use Google user data to determine creditworthiness or for lending purposes;
• use Google user data to develop, improve or train generalized or non-personalized AI or machine-learning models;
• allow humans to read Google user data, except with your consent, for security or legal reasons, or as needed to operate the service.

What is public and what is private

• Public (visible to anyone, including people who are not signed in): your first name, last name, username, profile photo, the date you joined, and your mood updates.
• Private (visible only to you when signed in): your email address and phone number. They are never shown on public pages or returned by the public API.

Who we share information with

We use these service providers to run User Moody. They process data on our behalf:

• Okta: handles sign-in and passes your Google profile details to the app.
• Google: verifies your identity when you sign in with Google.
• Vercel: hosts the website and stores uploaded profile photos.
• TiDB Cloud (PingCAP): stores the database of accounts and mood updates.

These providers receive data only to run User Moody, and never for any of the prohibited purposes listed above. We may also disclose information if required by law.

Cookies

We use one essential, encrypted session cookie to keep you signed in. It contains only your account number and username. We do not use advertising or tracking cookies.

How long we keep data

We keep your account and mood updates until you delete them or ask us to delete your account. Mood updates you delete, and photos you replace or remove, are deleted right away. When you ask us to delete your account, we remove its profile, moods and photos from the database and storage.

Your choices

• Change your name, phone number or photo at any time from Edit profile.
• Edit or delete any mood update from My moods.
• To delete your whole account or get a copy of your data, contact brian@kasing.ca.
• You can remove User Moody's access to your Google account at any time from your Google Account settings under Security, Third-party apps and services.

Security

All data is encrypted in transit with HTTPS/TLS, and our database and file storage providers encrypt data at rest. Sign-in is handled by Okta and Google, so the app never receives passwords. Your email address and phone number are excluded from every public page and public API response, and access to the production database is limited to the site owner.

Children

User Moody is not intended for children under 13, and we do not knowingly collect their information.

Changes to this policy

If we change this policy, we will update it on this page and change the effective date above.

Contact

Questions about this policy or your data: brian@kasing.ca.