MoodMirror Privacy Policy

Welcome to MoodMirror. MoodMirror is a product focused on drawing-based emotional expression, AI emotional insights, AI companion conversations, mood records, trend tracking, and membership benefits. We understand that your drawings, chat messages, emotional records, and account information may contain personal and sensitive feelings. This Privacy Policy explains how we collect, use, store, share, and protect your personal information.

1. Information We Collect and Use

We collect only the information necessary to provide product features, protect account security, complete transactions, improve user experience, and comply with legal obligations. The information collected depends on the features you choose to use.

1.1 Account Registration, Login, and Identification

• Guest login information: device identifiers, installation identifiers, device tokens, User-Agent, IP address, time zone, language, and similar information used to create a guest identity, maintain login status, issue free quota, and detect abnormal use.
• Email login information: email address, verification code, and login result, used for registration, login, email binding, and account verification.
• Third-party login information: when you use Google, Apple, or another supported third-party account to log in or bind an account, we may receive account identifiers, email address, avatar, nickname, authorization credentials, and other information based on your authorization.
• Account profile: nickname, avatar, membership level, benefits, subscription status, account creation time, risk level, referral code, and similar information used to display your profile, manage benefits, and protect account security.

1.2 Drawings, Uploaded Images, and AI Emotional Analysis

• Drawings and images: drawings created on the canvas, uploaded images, exported canvas images, thumbnails, image URLs, or file keys, used to save drawings, generate analysis results, and display history.
• Drawing input data: strokes, colors, eraser actions, undo/redo actions, canvas state, and drafts, which may be stored locally or submitted to our servers to restore drafts, determine whether a canvas is empty, and improve analysis quality.
• AI analysis results: emotion vectors, emotion labels, psychological dimensions, visual/behavioral/cognitive/spatial/energy analysis, summaries, keywords, suggestions, confidence levels, analysis status, and analysis time, used to display reports, statistics, trends, and historical records.
• Self-reports: if you voluntarily describe your current mood or drawing, we may use that text together with your drawing to generate more context-aware, non-diagnostic analysis.

1.3 AI Companion Chat

• Conversation information: conversation RefID, conversation status, creation time, and end status, used to create, resume, clear, or end conversations.
• Message content: text you enter, recommended prompts you use, AI replies, streaming status, and pagination cursors, used to complete conversations, display chat history, and provide contextual continuity.
• Safety processing: we may process chat content for necessary safety checks, abuse detection, and risk mitigation to prevent unlawful, harmful, or unsafe use.

1.4 Mood Statistics, Trends, and Journal Features

• We process your drawing records, analysis results, time ranges, weekly/monthly filters, trend data, and overview statistics to display emotional stability, inner-state metrics, AI insight summaries, and long-term changes.
• If mood journal or related record features are made available, we may collect journal text, linked drawings, tags, and creation times that you voluntarily submit, for recording, searching, reviewing, and generating personalized insights.

1.5 Memberships, Orders, and Payments

• Products and benefits: membership plans, analysis packs, prices, currencies, validity periods, benefits, recommended products, and current plan information, used to display and calculate purchasable benefits.
• Order information: order RefID, product RefID, payment method, transaction amount, currency, payment status, payment session ID returned by payment providers, transaction ID, 3D Secure status, and similar information, used to create orders, redirect to payment, verify payment, query orders, and process subscription cancellation.
• Payment information: payment processing may be handled by third-party payment providers. We generally do not directly collect complete bank card numbers, payment passwords, or similar sensitive payment credentials.

1.6 Customer Support, Feedback, and Notifications

• When you submit feedback, contact support, request account deletion, report a problem, or dispute an order, we may collect the contact details, issue description, screenshots, order information, account information, and communication records you provide to verify identity, investigate issues, and respond.
• If you allow email, in-app, or browser notifications, we may send verification codes, service notices, subscription status updates, benefit changes, and security reminders when necessary.

1.7 Device, Log, Attribution, and Security Information

• Device and network information: device type, operating system, browser, screen information, language, time zone, IP address, network status, User-Agent, and similar information, used for compatibility, risk control, security auditing, and analytics.
• Log information: access time, page path, button actions, request results, error logs, crash information, and performance data, used to troubleshoot issues, improve experience, and prevent abuse.
• Attribution information: channel, campaign, ad group, creative, click label, device language, attribution parameters, Firebase Remote Config context, or similar data, used to understand promotion effectiveness, issue campaign benefits, and optimize delivery.

2. Permissions and Local Storage

3. Cookies and Similar Technologies

We may use cookies, localStorage, sessionStorage, IndexedDB, or similar technologies to store login status, language preferences, device identifiers, conversation information, drawing drafts, and basic configuration. These technologies help enable automatic login, page navigation, AI session recovery, error troubleshooting, and security controls. If you delete or restrict these technologies, you may be unable to log in, restore drafts, recover conversations, or use some features properly.

4. AI Services and Data Processing

MoodMirror's AI analysis and AI companion features process your drawings, images, text, context, history, or analysis results to generate emotional insights, conversation replies, trend summaries, and suggestions. Processing may be performed by our own systems or authorized AI technology providers.

• Non-medical purpose: AI outputs are for self-expression, emotional awareness, and general companionship only. They do not constitute medical, psychological, legal, financial, or other professional advice.
• Accuracy limits: AI analysis depends on input content, model capability, and context. It may be inaccurate, incomplete, or unsuitable for your situation. Please use your own judgment.
• Safety boundary: if you are in immediate danger, severe psychological distress, or may harm yourself or others, please contact local emergency services, a medical institution, a crisis hotline, or a trusted person immediately.
• Model improvement: after de-identification, anonymization, or with required authorization, we may use data for model evaluation, product quality improvement, and safety governance.

5. How We Share, Transfer, or Publicly Disclose Information

We do not sell your personal information to unrelated third parties. We share information only when necessary, lawful, legitimate, and limited to the minimum required scope.

5.1 Service Providers

To provide the service, we may share necessary information with cloud storage, content delivery, AI processing, payment, email verification, analytics, error monitoring, customer support, attribution, and similar service providers. We require them to process information according to our instructions, this Privacy Policy, and applicable laws.

5.2 Payment and Subscription Platforms

When you purchase a membership, subscription, or analysis pack, order number, product information, payment amount, currency, payment status, and callback parameters may be transmitted between us and payment providers to complete transactions, reconciliation, refunds, or subscription cancellation.

5.3 Third-Party Login and Binding

When you use Google, Apple, or another supported third-party account to log in, bind an account, or sync benefits, we exchange necessary account identifiers, authorization credentials, and benefit status based on your authorization.

5.4 Legal Requirements and Rights Protection

We may disclose necessary information when required by laws, regulations, courts, or administrative authorities, or when necessary to protect the lawful rights, life, property, network security, or public safety of users, the public, us, or our affiliates.

5.5 Transfer

If a merger, division, acquisition, asset transfer, bankruptcy liquidation, or similar transaction occurs, and personal information is involved, we will require the new holder to continue to be bound by this Privacy Policy or obtain your consent again.

6. Third-Party SDKs, Plugins, and External Services

The service may integrate or connect to third-party capabilities, including Firebase, Google login and analytics, payment providers, CDN/object storage, email services, attribution services, error monitoring services, and AI model services. These third parties may process your information according to their own privacy policies. We select third parties based on functional necessity and make reasonable efforts to require lawful and compliant processing.

7. Storage and Protection of Personal Information

• Retention period: we keep personal information only for as long as necessary to achieve the purposes described in this Policy. While your account exists, we may retain account, drawing, analysis, chat, and order information. After deletion, account cancellation, or expiration of retention periods, we will delete or anonymize the information unless laws require otherwise.
• Storage location: we choose appropriate data storage regions based on service deployment, user location, and legal requirements. If cross-border transfer occurs, we will follow applicable legal requirements.
• Security measures: we use access control, encrypted transmission, permission management, log auditing, anomaly monitoring, and minimum-access principles to protect information security.
• Security incidents: if a personal information security incident occurs, we will notify you as required by law, including the incident situation, possible impact, measures taken, measures you can take, and contact information.

8. Your Rights

You may exercise rights to access, correct, copy, delete, withdraw consent, cancel your account, manage personalization, or submit complaints and feedback, subject to applicable law. You may do so by:

• Viewing or updating nickname, avatar, email binding, membership status, and privacy entries in the product's account and privacy center.
• Requesting account deletion through the in-product cancellation entry or by contacting support. After cancellation, your account, membership benefits, and historical records may not be recoverable.
• Deleting browser local data to remove local tokens, drawing drafts, recent conversations, language preferences, and other cached data.
• Contacting us by email to request access, correction, deletion, export, or withdrawal of certain authorizations.

To protect account security, we may verify your identity before processing your request. If a request cannot be fulfilled or may be refused under applicable law, we will explain the reason where appropriate.

9. Protection of Minors

If you are a minor, please use this service only with the consent and guidance of your legal guardian. We do not knowingly collect information from minors beyond what is necessary for the service. If a guardian finds that a minor has provided personal information without consent, please contact us and we will handle it after verification as required by law.

10. Updates to This Policy

We may revise this Policy due to feature changes, legal updates, changes in service providers, or adjustments to data processing methods. For material changes, we will notify you through page prompts, pop-ups, in-app notices, email, or other reasonable methods. If you do not agree with the updated Policy, please stop using the relevant services. Continued use means you accept the updated Policy.

11. Contact Us