Privacy policy

In short

Moody (moody.no) brings small everyday tools together behind one login. We only store what the service needs to work. We do no marketing or advertising, we do not sell data, and we use no tracking or analytics. What you add is yours, and you can download or delete it at any time.

Who is responsible

Developia AS is the controller for personal data in Moody.

• Developia AS, org. no. 929 523 695
• Vestlisvingen 80, 0969 Oslo, Norway
• Email: kontakt@moody.no

What data we process

Account

• Email address, password (stored only as a hash, never in plain text), first name and last name.
• Language, when the account was created, when you last signed in, and when your email address was confirmed.
• When you accepted the terms, and which versions of the terms and privacy policy you have accepted or seen.
• Account status (pending, approved, rejected or deactivated), whether you are an admin, and which projects you can access.

Login protection

To stop password-guessing attempts, we store a one-way hash of the email address together with the number of failed attempts. The address itself is not stored here. The counter is reset when you sign in.

Email log

When we send you an email, we log the time, the type of email, the language, the recipient address, the delivery status and any error message. We do not store the contents of the email.

Invitations

If someone is invited, we store the invitee's email address, language, which projects the invitation covers, who sent it, and timestamps.

Clothes

In Clothes (wardrobe) we store what you enter yourself. This may be name, category, colours, size, season, brand, price (including approximate), purchase date, where the garment was bought, material, care, condition, notes and similar. The "gift from" field may contain another person's name. We also store outfits, the dates garments and outfits were worn, collections, storage locations, settings, and the time of each AI suggestion you request.

Photos are stored as an original and a thumbnail. They may show things like labels or receipts. Before upload, photos are resized and re-encoded in your browser. This normally removes metadata such as location. Photos are stored privately per user and shown only through links that expire after 30 minutes. While a photo waits to be uploaded, it may be kept in the browser's own storage (IndexedDB), so the upload completes even if you close the app.

Diary

In Diary we store what you write and add: your diaries with name and colour, entries with date, time, title and text, tags, photos, videos and attachments. We also store moods (1-5) with time, activities and a note, and your settings for reminders and locking. From this we make statistics that only you can see.

What you write in Diary may be health data, for example about your mood, sleep and how you feel. Such data has extra protection. That is why we ask for your explicit consent before you start using Diary, and we store when you consented and which version of the text you accepted. You withdraw your consent under Settings in Diary. Diary is then locked, and you can export or delete everything you have added there. Nothing is deleted without your confirmation.

Photos are resized and re-encoded in your browser before upload. This removes location data and other metadata. Videos and attachments are stored as they are, and may contain such information.

You can choose to have Diary lock after 5, 15 or 60 minutes without use. You then have to enter your login password again. While Diary is locked, the account export includes nothing from Diary. Unlock Diary first if you want it included.

You can turn on an email reminder at a time you choose. The email contains nothing from your diary, only a link to Diary and to the settings.

If you add content from another service, such as a YouTube video, it is loaded from that service when the entry is shown. The service then sees your IP address. In encrypted diaries, such content is only loaded when you click it.

Nothing from Diary is sent to AI.

Tasks

In Tasks we store what you add: lists with name, colour and icon, sections, tasks with title, note, due date, priority, labels, assignee, recurrence and reminders, comments, attachments and a log of changes in the list. We also store your personal plan ("Do today"), your time zone and your settings for notifications and AI quick add. If you share a list, we also store who is in it and what role they have. There is more about this under "Sharing and guests in Tasks".

Why we process the data

• Providing the service and your account. The legal basis is our contract with you (GDPR Art. 6(1)(b)).
• Security and abuse prevention. Captcha, limits on login attempts and bot checks. The legal basis is our legitimate interest in protecting the service and its users (Art. 6(1)(f)).
• Service emails, such as confirmation, approval and password reset. The legal basis is the contract.
• AI suggestions in Clothes, AI analysis in Inventory and AI quick add in Tasks. This is part of a feature you choose to use. The legal basis is the contract. You can turn it off. The names of other members sent along from Tasks are processed on the basis of legitimate interest, so you can assign a task to someone by writing their name (Art. 6(1)(f)).
• Sharing in Tasks. For you as a Moody account holder, the legal basis is the contract. For guests, the legal basis is legitimate interest: that the person sharing a list can work together with people who have no account, and that guests receive the notifications they have not unsubscribed from (Art. 6(1)(f)).
• Diary. The legal basis is the contract and your explicit consent to our processing of health data (Art. 9(2)(a)). You can withdraw your consent at any time. This does not affect the lawfulness of processing before the withdrawal.

Who can see the data

You see your own data. Moody admins see your name, email, status, language, when the account was created, last sign-in, when your email was confirmed, when you accepted the terms, and which projects you can access. From Clothes, admins only see how many garments you have registered. They never see the garments themselves or the photos. From Diary, admins only see how many diaries, entries, moods and files you have, and how much space the files take. They never see what you write, what your diaries are called or which tags you use. From Tasks, admins only see how many lists, tasks, members and guests you have as owner, and how much space the attachments take. They never see titles, names or email addresses from Tasks. Admins see how many AI calls you have made and what they cost, but never what was sent. Admins also see the email log, with the recipient address and type of email, but not the contents. There they can see that you receive reminders from Diary, and the addresses of guests who receive email from Tasks.

When someone registers, admins receive an email with the new user's name and email address, so the account can be reviewed.

Sharing and guests in Tasks

You can share a list in Tasks with others. The owner of the list enters the first name, last name and email address of the person being invited, and chooses whether that person can view or edit. The invitee may have a Moody account or be a guest without one. Developia AS is the controller for the data about members and guests too.

What other members see

Everyone in a shared list sees the name and role of the other members, and what each of them does in the list: tasks, comments, attachments and changes. Your email address is not shown to the other members. Only the owner of the list sees the guests' email addresses and when they last used the list.

The other members can get what they see in the list in their own data export, meaning your name and what you have written and uploaded. Your email address is not included. The exception is guests: the owner gets the guests' email addresses in lists they own, since the owner is the one who entered them.

If you leave a list, are removed, or delete your account, what you have written in the list stays without your name.

Guests

When the owner adds a guest, we store the guest's first name, last name, email address, language, time zone and role, when the guest last used the list, and what the guest writes and uploads. We also log the emails we send to the guest, as described under "Email log".

The guest receives an email with a personal link to the list. Every email from Tasks to a guest contains the same personal link, so anyone who gets hold of the email can open the list. Guests should therefore not forward these emails. The link is stored encrypted with us, so we can include it in new emails. It stops working after 90 days without use, or when the owner revokes it or sends a new one.

To stop attempts to guess links, we store a one-way hash of the IP address together with the number of failed attempts. The IP address itself is not stored, and the hash is deleted after about a day.

Guests do not accept the Moody terms. The first email and the guest page say who shared the list, and link to this policy.

How guests unsubscribe and use their rights

Every email to a guest has a link to unsubscribe from notifications. On the guest page, the guest can also turn notifications on and off, and leave the list. If the guest leaves the list, the data about the guest is deleted straight away, and what the guest has written stays without a name.

Guests can ask for access, correction or erasure by writing to kontakt@moody.no. We reply within 30 days.

AI in Clothes, Inventory and Tasks

Clothes can suggest details about a garment based on its photos. The feature is on by default for users with access to Clothes, and you can turn it off in the Clothes settings. Suggestions are never filled in unless you confirm them. There is a limit of 300 suggestions per 24 hours.

When you ask for a suggestion, the garment's photos (up to 10) are sent to Anthropic with a fixed instruction. We do not send your name, email or user ID. The photos are used only to create the suggestion. Avoid photographing other people or sensitive documents.

Inventory can analyse the photos of an item and fill in empty fields. The feature is on by default, and you can turn off automatic analysis in the Inventory settings. You can still start an analysis yourself. The fields Inventory fills in are saved straight away, but what you have written yourself is never overwritten. There is a limit of 500 analyses per 24 hours.

For an analysis, the item's photos (up to 10) are sent to Anthropic with a fixed instruction and the fields you have filled in yourself: name, description, category, brand, model, quantity, value, condition, purchase date and note. We do not send your name, email or user ID. The photos have been resized and re-encoded in your browser, so metadata such as location has been removed. Do not write personal data in the note if you use the analysis.

Tasks has a quick add where you write a task in plain words, for example "Call the dentist Friday at 9". AI turns the text into a title, due date, reminder, list, labels, assignee and similar, and you see the suggestion and can correct it before the task is saved. The feature is on by default, and you can turn it off in the Tasks settings. There is a limit of 300 interpretations per 24 hours. Guests do not have AI in quick add.

When you use quick add, your text is sent to Anthropic together with the date, time, time zone and language, the names of lists, sections and labels, and the first and last names of the members of the list, including guests. We do not send email addresses, notes or IDs. We do not store the text itself, only the task you end up saving. We store when the interpretation was made, so the daily limit works, and this is deleted after 30 days. In the log of AI calls we also store the time, how many tokens the call used and what it cost. That log is deleted after one year.

Encryption in Diary

You can choose to encrypt a diary end-to-end with a separate diary password. The content is then encrypted in your browser before it is sent to us, and we only store the encrypted version. What is encrypted: the diary's name and colour, for each entry the date, time, title, text, tags and mood, and the files with file name and file type.

Some things cannot be encrypted, because the service needs them to work. The server sees IDs, that the diary is encrypted, when the diary, entries and files were created, changed or deleted, how large the files are, and how many entries and files there are. Moods you record without an entry, and the list of activities, are not encrypted.

The keys are only kept in your browser's memory and are forgotten when the diary locks or you close the tab. Encrypted diaries always lock, after the time you have chosen, or after 15 minutes.

If you forget your diary password, an admin can help you get access again. For this, the admin has a recovery key that is kept outside Moody. This means an admin can technically open encrypted diaries. We only do this when you ask for it yourself in Support. You get an email when a recovery is started, and every recovery is listed in the Diary settings. The encryption therefore protects against someone getting hold of the database or a backup, but not fully against us.

In the account export, entries from encrypted diaries stay encrypted. When an encrypted diary is unlocked, you can export it in plain text.

Providers we use

We use these processors. They process data on our behalf and follow our instructions.

• Supabase – database, authentication and file storage. Data is stored in the EU (Ireland, AWS eu-west-1).
• Vercel – hosting. Functions run in Dublin, Ireland. Vercel's global network may process IP addresses and request data.
• Resend – sends email from noreply@moody.no. EU region (eu-west-1).
• Anthropic: AI suggestions in Clothes, AI analysis in Inventory and AI quick add in Tasks, as described above. Anthropic is a US company. The transfer to the US is based on the EU standard contractual clauses.
• Cloudflare – Turnstile captcha on registration, sign-in and forgot password. Processes IP address and browser signals to tell humans from bots.

Supabase, Vercel and Cloudflare process IP addresses for technical reasons. Moody itself does not store IP addresses.

Cookies and browser storage

We only use what is strictly necessary for the service to work. That is why we do not need to ask for consent.

• Supabase login cookies (sb-…), shared between moody.no and its subdomains.
• NEXT_LOCALE remembers the language you chose.
• gjoremal_gjest is only set on gjoremal.moody.no when a guest opens their personal link, so the guest gets in without the link next time. Lasts 90 days and is renewed when used.
• moody_delt is a technical marker showing that the login cookies have been moved to the shared domain. Lasts 400 days.
• Cloudflare Turnstile may use its own technical storage for the security check.
• IndexedDB is used as a queue for photos waiting to be uploaded.
• Local storage (localStorage) is used in Diary for drafts that have not yet been saved with us, and to remember when you last used Diary, so the lock works. Drafts in encrypted diaries are stored encrypted.

We use no cookies for analytics or advertising.

How long we keep data

• Your account and content are kept until you delete your account.
• Accounts whose email address is never confirmed are deleted after 48 hours.
• Rejected registrations are deleted 30 days after rejection.
• Invitations are deleted 30 days after they are used, expire or are revoked.
• Email log entries are deleted after 12 months, and immediately if the account is deleted.
• Entries you delete in Diary stay in the trash for 30 days and are then deleted for good. The entry's files are deleted in the next daily clean-up.
• If you withdraw your consent in Diary, the content stays until you delete it or your account.
• The one-time code for recovering a diary password works for 7 days. The log of recoveries is kept for as long as you have your account.
• Data about a member of a shared list in Tasks is kept until the person leaves the list or is removed, until the list is deleted, or until the account is deleted. What the person has written stays without a name.
• Data about a guest is kept until the owner removes the guest, the guest leaves the list or the list is deleted. It is not deleted automatically after a set time.
• The time of each use of AI quick add in Tasks is kept for 30 days. The log of AI calls, with tokens and cost, is deleted after one year. If you delete your account, it is no longer linked to you.

You delete your account under Account. This requires your password. The account, all project data and all photos are deleted immediately, and you receive an email confirming the deletion. If you own shared lists in Tasks, the editor with an account who has been a member the longest becomes the new owner. If there is no such editor, the list is deleted with all its content. Backups at Supabase may contain data for a limited period afterwards.

Your rights

You have the right to:

• access the data we hold about you
• get a copy of your data. Under Account → "Download your data" you get a ZIP file with all data as JSON, all photos and files, and your Diary entries as Markdown. From Tasks you get all lists you are a member of, including lists others have shared with you
• correct your data. You do this yourself under Account or in the project
• have your data erased, by deleting your account
• ask us to restrict processing
• object to processing based on legitimate interest
• data portability, meaning you can take your data with you

Email kontakt@moody.no if you want to use your rights. This also applies to guests in Tasks. We reply within 30 days. You can also complain to the Norwegian Data Protection Authority, Datatilsynet.

Changes

When we change this privacy policy, we publish the new version here with a version number and date. If you are signed in, you are told in the app when a new version is published.

Contact

Questions about privacy? Write to kontakt@moody.no.