← Back to Home

Privacy Policy

Effective Date: August 11, 2026

This policy explains what data MyMoodLab collects, why, and what rights you have over it. We process personal data — including special-category data about your emotional and psychological patterns — under the EU General Data Protection Regulation (GDPR). We've written this in plain language so it's actually readable.

1. Who We Are

App: MyMoodLab
Developer: Leonardo Ferhati
Contact: support@myellelab.com
Effective Date: August 11, 2026

Leonardo Ferhati acts as the GDPR data controller and is responsible for how your personal data is collected and used. MyMoodLab processes special-category data — specifically, data about your emotional and psychological patterns — under Article 9 of the GDPR.

2. Data We Collect

Data you provide

Data generated by AI analysis

Data collected automatically

Special-Category Data (Art. 9 GDPR)

Mood scores, emotional analysis, relationship insights, and behavior profiles derived from your conversations qualify as health-related and psychological data under GDPR Article 9. This is a special category of personal data. Processing it requires your explicit consent — which we ask for before your first analysis. You can withdraw that consent at any time in Settings → Manage Privacy Consent.

3. How We Use Your Data

For every processing activity, we rely on a specific legal basis under the GDPR.

Processing Purpose Legal Basis
Profile data (name, age, persona) Personalize your experience Contract — Art. 6(1)(b)
Chat analysis via AI Analyze your conversations for emotional patterns Explicit consent — Art. 9(2)(a)
Mood & emotional scoring Generate relationship insights and feedback Explicit consent — Art. 9(2)(a)
Court verdicts & behavior profiles Conflict resolution and communication analysis Explicit consent — Art. 9(2)(a)
Subscription management Process purchases and manage Pro access Contract — Art. 6(1)(b)
Anonymous authentication Secure API access Legitimate interest — Art. 6(1)(f)
Usage tracking Enforce monthly usage limits Contract — Art. 6(1)(b)

4. How We Process Your Chats

Here is exactly what happens when you upload a chat:

  1. You select a WhatsApp chat export from your device.
  2. Before the chat leaves your device, our name anonymization pipeline replaces all participant names with pseudonyms (Person A, Person B, etc.).
  3. The anonymized text is sent securely over HTTPS to our servers — Google Cloud / Firebase Cloud Functions, deployed in Europe (europe-west1).
  4. Our servers forward the anonymized text to OpenAI's API for analysis.
  5. OpenAI generates mood scores, feedback, verdicts, and insights, which are returned to our servers.
  6. Results are sent back to your device and stored locally only.
  7. The anonymized chat text is deleted from our servers after processing — we do not retain it.
  8. Server logs do not contain chat content.

The same pipeline applies to the AI Court and the AI assistant: participant names are replaced with pseudonyms before the conversation, the stored analysis summary, or the chat partner's name is transmitted, and the real names are restored in the result on your device. One exception applies — a question you type into the AI assistant is sent as you wrote it, so avoid typing the names of people the app does not already know about.

Alongside the conversation text we send your age and the persona you selected, so the AI can match its tone. We do not send your name, email address, phone number, contacts, photos, or the original chat file.

5. Third-Party Chat Data (Art. 14 GDPR)

When you upload a conversation, it contains personal data belonging to the other participants — people who have no direct relationship with MyMoodLab and have not individually consented to this processing.

Here is how we reduce risk to them:

By uploading a chat, you confirm that you have a legitimate reason to share that conversation and that you understand the other participants have not directly consented to this analysis.

6. Third-Party Services

We share data with the following processors, strictly for the purposes described.

Service Data Received Purpose Location
Google Cloud (Firebase) Anonymized chat text, your age and chosen persona, anonymous user ID, auth tokens AI analysis infrastructure Europe (europe-west1)
OpenAI, L.L.C. Anonymized chat text (forwarded via Firebase), your age and chosen persona, and any question you type to the AI assistant — no real names, no email address, no account identifiers AI language model that generates your scores, feedback, court verdicts and behaviour profiles United States
RevenueCat Device ID, purchase and subscription events Subscription management United States
Apple (App Store / StoreKit) Purchase data Payment processing Per Apple's terms

All third-party processors listed above operate under Data Processing Agreements that contractually require data protection standards equivalent to those described in this policy. Each processor is bound to process your data only for the purposes described here, to maintain appropriate technical and organisational security measures, and not to use your data for any other purpose, including AI model training.

7. International Data Transfers (Art. 44–49 GDPR)

Data is transferred to the United States for AI processing and subscription management. Transfers are covered by:

8. Data Storage & Security (Art. 32 GDPR)

9. Data Retention (Art. 5(1)(e) GDPR)

Data Retention Period
Analysis results and court verdicts Stored on your device; automatically deleted after 12 months
Profile data Stored on your device until you delete it or uninstall the app
Consent records Stored on your device until you delete your data or uninstall
Firebase anonymous ID Deleted when you use "Delete My Account" in Settings
Chat text Not retained on our servers after processing
Monthly usage counts Reset automatically on the 1st of each calendar month
RevenueCat data Subject to RevenueCat's own retention policy

10. Your Rights (Art. 15–22 GDPR)

Under the GDPR, you have the following rights. Here is how to exercise each one:

11. Consent (Art. 7 GDPR)

12. Usage Limits

13. Children's Privacy

MyMoodLab is not intended for users under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has submitted data to us, please contact us at support@myellelab.com and we will delete it promptly.

14. Changes to This Policy

We may update this policy from time to time. When we do, the effective date at the top of this page will be updated. Continued use of MyMoodLab after changes are posted constitutes your acceptance of the updated policy. For material changes, we will notify you within the app.

15. Contact & Complaints

For any data protection question or to exercise your rights, contact us at: support@myellelab.com

You also have the right to lodge a complaint with your local data protection supervisory authority: