← Back to Home
Privacy Policy
Effective Date: April 7, 2026
This policy explains what data MyMoodLab collects, why, and what rights you have over it. We process personal data — including special-category data about your emotional and psychological patterns — under the EU General Data Protection Regulation (GDPR). We've written this in plain language so it's actually readable.
1. Who We Are
App: MyMoodLab
Developer: Leonardo Ferhati
Contact: support@advancedmoodanalyzer.com
Effective Date: April 7, 2026
Leonardo Ferhati acts as the GDPR data controller and is responsible for how your personal data is collected and used. MyMoodLab processes special-category data — specifically, data about your emotional and psychological patterns — under Article 9 of the GDPR.
2. Data We Collect
Data you provide
- Name, age, and persona — entered during onboarding for profile personalization
- WhatsApp chat text — the conversation you choose to upload, which includes messages from other participants
- Relationship type — whether the conversation is romantic, friendship, or a group chat
- Onboarding survey responses — how you found the app, texting frequency, relationship duration, and your goal
Data generated by AI analysis
- Mood and emotional scores — reciprocity, emotivity, romanticism, and green flags
- Relationship summaries, hook lines, vibe verdicts, and AI-generated feedback
- Texting statistics — who texts first, response times, streaks, and silence gaps
- Court verdicts, behavior profiles, and power dynamic analysis
- Daily emotional timeline — per-day emotional scores across the conversation
Data collected automatically
- Firebase anonymous user ID and auth tokens — used to secure API access; no email or name is linked to this ID
- Subscription and purchase data — via RevenueCat, to validate and manage your Pro subscription
- Monthly usage counts — number of analyses, AI assistant messages, and court verdicts used, to enforce plan limits
Special-Category Data (Art. 9 GDPR)
Mood scores, emotional analysis, relationship insights, and behavior profiles derived from your conversations qualify as health-related and psychological data under GDPR Article 9. This is a special category of personal data. Processing it requires your explicit consent — which we ask for before your first analysis. You can withdraw that consent at any time in Settings → Manage Privacy Consent.
3. How We Use Your Data
For every processing activity, we rely on a specific legal basis under the GDPR.
| Processing |
Purpose |
Legal Basis |
| Profile data (name, age, persona) |
Personalize your experience |
Contract — Art. 6(1)(b) |
| Chat analysis via AI |
Analyze your conversations for emotional patterns |
Explicit consent — Art. 9(2)(a) |
| Mood & emotional scoring |
Generate relationship insights and feedback |
Explicit consent — Art. 9(2)(a) |
| Court verdicts & behavior profiles |
Conflict resolution and communication analysis |
Explicit consent — Art. 9(2)(a) |
| Subscription management |
Process purchases and manage Pro access |
Contract — Art. 6(1)(b) |
| Anonymous authentication |
Secure API access |
Legitimate interest — Art. 6(1)(f) |
| Usage tracking |
Enforce monthly usage limits |
Contract — Art. 6(1)(b) |
4. How We Process Your Chats
Here is exactly what happens when you upload a chat:
- You select a WhatsApp chat export from your device.
- Before the chat leaves your device, our name anonymization pipeline replaces all participant names with pseudonyms (Person A, Person B, etc.).
- The anonymized text is sent securely over HTTPS to our servers — Google Cloud / Firebase Cloud Functions, deployed in Europe (europe-west1).
- Our servers forward the anonymized text to OpenAI's API for analysis.
- OpenAI generates mood scores, feedback, verdicts, and insights, which are returned to our servers.
- Results are sent back to your device and stored locally only.
- The anonymized chat text is deleted from our servers after processing — we do not retain it.
- Server logs do not contain chat content.
5. Third-Party Chat Data (Art. 14 GDPR)
When you upload a conversation, it contains personal data belonging to the other participants — people who have no direct relationship with MyMoodLab and have not individually consented to this processing.
Here is how we reduce risk to them:
- We anonymize all participant names (replacing them with pseudonyms) before the chat text is transmitted to our servers or to OpenAI.
- The anonymized text is not stored on our servers after processing is complete.
- We display a clear warning before every upload reminding you that the conversation contains other people's personal data.
By uploading a chat, you confirm that you have a legitimate reason to share that conversation and that you understand the other participants have not directly consented to this analysis.
6. Third-Party Services
We share data with the following processors, strictly for the purposes described.
| Service |
Data Received |
Purpose |
Location |
| Google Cloud (Firebase) |
Anonymized chat text, anonymous user ID, auth tokens |
AI analysis infrastructure |
Europe (europe-west1) |
| OpenAI |
Anonymized chat text (forwarded via Firebase) |
AI language model for analysis |
United States |
| RevenueCat |
Device ID, purchase and subscription events |
Subscription management |
United States |
| Apple (App Store / StoreKit) |
Purchase data |
Payment processing |
Per Apple's terms |
7. International Data Transfers (Art. 44–49 GDPR)
Data is transferred to the United States for AI processing and subscription management. Transfers are covered by:
- Certification under the EU–US Data Privacy Framework (adequacy decision of July 2023), or
- Standard Contractual Clauses (SCCs) where DPF certification is not in place
- Data Processing Agreements (DPAs) signed with all processors
8. Data Storage & Security (Art. 32 GDPR)
- Analysis results and court verdicts are stored only on your device, encrypted using iOS NSFileProtectionComplete.
- Profile data (name, age, persona) is stored on your device.
- Consent records are stored on your device, encrypted at rest.
- All data transmission uses HTTPS/TLS encryption.
- The OpenAI API key is stored in Firebase Secret Manager — it is never embedded in app code.
- Server logs do not contain chat content or personal data.
- No personal data is retained on our servers after processing is complete.
9. Data Retention (Art. 5(1)(e) GDPR)
| Data |
Retention Period |
| Analysis results and court verdicts |
Stored on your device; automatically deleted after 12 months |
| Profile data |
Stored on your device until you delete it or uninstall the app |
| Consent records |
Stored on your device until you delete your data or uninstall |
| Firebase anonymous ID |
Deleted when you use "Delete My Account" in Settings |
| Chat text |
Not retained on our servers after processing |
| Monthly usage counts |
Reset automatically on the 1st of each calendar month |
| RevenueCat data |
Subject to RevenueCat's own retention policy |
10. Your Rights (Art. 15–22 GDPR)
Under the GDPR, you have the following rights. Here is how to exercise each one:
- Access (Art. 15): Use "Export My Data" in Settings to download all your data as JSON files.
- Rectification (Art. 16): Edit your name, age, and persona in the app at any time.
- Erasure (Art. 17): Use "Delete My Account" in Settings to permanently delete all local data and your server-side account. Use "Clear All History" to delete analyses while keeping your account.
- Data Portability (Art. 20): Use "Export My Data" to receive your data in a machine-readable JSON format.
- Restriction (Art. 18): Withdraw consent in Settings → Manage Privacy Consent.
- Objection (Art. 21): Withdraw specific consent at any time in Settings.
- Automated Decision-Making (Art. 22): All mood scoring, relationship analysis, court verdicts, and behavior profiles are generated automatically by AI without human review. You have the right to contest any result or request human review — email support@advancedmoodanalyzer.com.
11. Consent (Art. 7 GDPR)
- We ask for your explicit consent before processing any special-category data (mood and emotional analysis).
- Consent is collected during onboarding and can be withdrawn at any time in Settings → Manage Privacy Consent.
- Withdrawing consent prevents new analyses but does not delete existing data already stored on your device.
- Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
12. Usage Limits
- Free and Pro plans include monthly usage limits on analyses, AI assistant messages, and court verdicts.
- Limits reset on the 1st of each calendar month.
- Your current usage is visible in Settings.
13. Children's Privacy
MyMoodLab is not intended for users under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has submitted data to us, please contact us at support@advancedmoodanalyzer.com and we will delete it promptly.
14. Changes to This Policy
We may update this policy from time to time. When we do, the effective date at the top of this page will be updated. Continued use of MyMoodLab after changes are posted constitutes your acceptance of the updated policy. For material changes, we will notify you within the app.
15. Contact & Complaints
For any data protection question or to exercise your rights, contact us at: support@advancedmoodanalyzer.com
You also have the right to lodge a complaint with your local data protection supervisory authority: