Privacy Policy — MoodCanvas

1. Introduction

Welcome to MoodCanvas ("we", "our", or "us"). We operate the website moodcanvas.in and the MoodCanvas application (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using MoodCanvas, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the Service.

2. Information We Collect

2.1 Information You Provide

Account data: Email address, password (hashed), and optional date of birth when you register.
Profile data: Language preference, location (city/region), and content preferences you set explicitly.
Payment data: Subscription transactions are processed by Razorpay. We do not store card details — only your subscription tier and status.

2.2 Information Collected Automatically

Mood & context signals: Mood selections, activity, time of day, and weather data (fetched from OpenWeather using your approximate location).
Usage data: Canvas generation history, content feedback (thumbs up/down), and feature interactions — used to personalise your experience.
Device data: Browser type, device type, and IP address for security and analytics purposes.

2.3 Third-Party Data

When you connect via Google OAuth, we receive your name and email address from Google. We do not access your Google account beyond authentication.

3. How We Use Your Information

To generate personalised content canvases based on your mood and context.
To build and refine your taste profile for better recommendations over time.
To manage your account, subscription, and billing.
To send transactional emails (account confirmation, subscription receipts).
To improve the Service through aggregated, anonymised analytics.
To enforce our Terms of Service and prevent abuse.

We do not sell your personal data to third parties. We do not use your data for advertising profiling.

4. Data Sharing

We share your data only with the following service providers, strictly to operate the Service:

Supabase — database and authentication hosting.
OpenAI — AI-powered content recommendations (mood and context signals are sent; no personally identifiable information is included in prompts).
Razorpay — payment processing.
YouTube / Spotify / OMDb — content metadata enrichment (no personal data is shared).
OpenWeather — weather data based on your approximate location.
Resend — transactional email delivery.

5. Data Retention

We retain your account data for as long as your account is active. Canvas history and taste profile data are retained to power personalisation. You may request deletion of your account and all associated data at any time by emailing [email protected].

6. Cookies

MoodCanvas uses essential cookies and local storage to maintain your session and preferences. We do not use third-party advertising cookies. You may clear cookies via your browser settings, though this will log you out of the Service.

7. Children's Privacy

MoodCanvas is not directed at children under the age of 13. We require users to be at least 13 years old at signup. If we become aware that a child under 13 has provided personal data, we will delete it promptly.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your data ("right to be forgotten").
Object to or restrict processing of your data.
Data portability.

To exercise any of these rights, contact us at [email protected].

9. Security

We implement industry-standard security measures including encrypted connections (HTTPS), hashed passwords, and row-level security on our database. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us at:
[email protected]