← Everflow LabsPrivacy

Privacy Policy

MoodUp · Effective 1 October 2026

The short version: MoodUp has no accounts and no server of its own. Your name and your favourites stay on your phone, and the full record of your answers and your history lives only there. Three services do receive data from the app, and this page names each one and says exactly what it gets: RevenueCat to validate purchases, PostHog for usage statistics, and the Meta SDK to measure whether our ads bring installs. None of them receives your name. On Android, Meta also receives your phone's advertising identifier, which you can delete from your phone's settings. Version 1.0 of the app sends three of your onboarding answers to PostHog, which discards them on arrival; from version 1.0.1 they are not sent at all.

Who we are

MoodUp is made by Everflow Labs, Inc., a Delaware corporation. Contact: hello@everflowlabs.io. MoodUp was previously published under the working name "Afirmaciones"; this policy replaces the version dated 11 September 2026, which wrongly said that no service received your onboarding answers and that the Android advertising identifier was not collected.

What stays on your device

All of the following is written to the app's local storage on your phone, and the complete record stays there: we have no way to read it. Your name and your favourites never leave the device. A few of the other items also travel, in reduced form, inside the usage events described in the next section, which lists each one.

WhatWhy
A name, if you give oneSo the app can address you
Your onboarding answers: what you want to work on, how you want to be addressed, the voice you preferTo choose which affirmations you hear
How many affirmations a day you want, and whether notifications are onTo schedule your notifications
Which sessions you listened to, when, and how each one feltTo show your calendar and pick new sessions
Your favourites and the affirmations you dismissedSo the app remembers them
When you first closed the paywall, and whether a limited-time offer was shownTo show the offer once and on time

What leaves your device, and to whom

MoodUp uses three third-party services. Each one receives a random identifier generated on your phone the first time the app opens (RevenueCat's, which PostHog also uses, and Meta's own). It is a pseudonym: it is not your name, email, phone number or Apple/Google ID, and we cannot turn it back into you. On Android, RevenueCat and Meta also receive your phone's advertising identifier, explained below the table.

ServiceWhat it receivesWhy
RevenueCat
purchase infrastructure, USA
The random identifier; your App Store or Google Play purchase receipt; the country of your store account; device model, operating system and app version; your IP address; on iPhone, the vendor identifier (IDFV), the status of the tracking permission (which MoodUp never requests, so there is no IDFA) and an Apple attribution token (AdServices); on Android, your phone's advertising identifier (GAID); the Meta identifier described below. To confirm with Apple or Google that a purchase or trial is valid, unlock MoodUp Pro on all your devices, and restore purchases. On our behalf, RevenueCat also reports trials and purchases to Meta (see below) and uses the Apple token to learn from Apple whether the install came from an Apple Search Ads campaign. RevenueCat's own policy: revenuecat.com/privacy.
PostHog
product analytics, servers in the USA
The random identifier and a log of events: the app installed, opened, brought back to the screen, sent to the background or updated (with the previous version), and how many days have passed since you first opened it; each onboarding step reached (the step number, not your answer); onboarding finished, with the voice you chose (for three of your answers in that same event, see "Sensitive answers" below); whether you allowed notifications and how many per day; paywall shown or closed, offer shown or closed; a session started or completed, its type (daily, collection or extra), the theme it belonged to (for example "calma" or "confianza"), whether it was your first, whether you are subscribed and how many seconds you listened; a purchase started, completed, pending or cancelled, a trial started or a purchase confirmed (the product, the offer and the store, never card details); which share option you tapped; and whether the app asked you for a review. Each event carries device manufacturer and model, operating system and version, app version and build, language, time zone, screen size and a timestamp. PostHog also receives your IP address with each event, stores it with the event and derives an approximate, city-level location from it (country, region, city and postal code). To understand where people drop off and which features are used, so we can improve the app. No session recording, no screen capture, no reading of what you type.
Meta (Facebook SDK and Conversions API)
advertising measurement
From the app, through the Meta SDK: that the app was installed, opened and closed, that the SDK started, that onboarding was completed, that the paywall was shown (and whether for the first time); a Meta-generated identifier stored in the app; technical information such as device model, operating system, app version, language and time zone; your IP address, as with any connection; and, on Android, your phone's advertising identifier (see below). If the Meta SDK itself fails, it may send Meta an error report about its own code. From RevenueCat, on our behalf: that a trial started or a purchase was made or renewed, with product, amount and currency, together with the Meta identifier, your IP address and the device identifiers RevenueCat holds for your phone. On iPhone we do not request tracking permission (App Tracking Transparency), so the advertising identifier (IDFA) is not available to the app or to Meta; the app also tells the Meta SDK that advertiser tracking is off, and install attribution goes through Apple's SKAdNetwork, which reports to Meta in aggregate. Meta may combine what it receives with information it already has, for example if you use Facebook or Instagram, under its own policy. To know whether our Meta ads lead to installs and subscriptions, and to stop spending on the ones that do not. Meta processes this under its own terms: facebook.com/privacy/policy.

The advertising identifier on Android

On Android phones with Google Play services, the Meta SDK and RevenueCat read your phone's advertising identifier (GAID), and it is shared with Meta together with the events above, so that Meta can tell whether an install or a subscription came from one of our ads. We use it only for that: there are no ads inside MoodUp and we do not sell it. You can switch it off from the system: on Android 12 or later, open Settings → Privacy → Ads (the exact path varies by phone; on some it is under Settings → Google → Ads) and choose Delete advertising ID. From then on every app, MoodUp included, receives only a string of zeros. On older versions, the same screen lets you reset the identifier or turn on Opt out of Ads Personalization, which tells apps and Meta not to use it for personalised ads. On iPhone, MoodUp never requests tracking permission, so the IDFA is not available.

Sensitive answers

Some onboarding questions touch on how you feel or what you believe. Most of your answers never leave your device. The exception is version 1.0 of the app, which attaches three of them to the "onboarding finished" event it sends to PostHog: what you want to work on first, the outlook you prefer (practical, spiritual or a mix of both) and the kind of words you find most believable. Since 1 October 2026 PostHog discards those three answers as each event arrives, before it is stored, and from version 1.0.1 the app no longer sends them. The few events received before that date remain in PostHog only for the retention period described below. None of your answers is ever sent to Meta or RevenueCat. What the analytics service does receive is the theme of the sessions you start and finish (the name of the collection, such as "calma"), tied to the random identifier, never to your name; because your daily session is built around what you said you want to work on, its theme reflects that choice. The questions need an answer to continue, but none of them asks for your name or contact details, and you can change these three answers at any time in Perfil.

Notifications

If you allow them, your daily affirmations are scheduled by your phone, not by us. There is no push server: we do not collect a push token and we cannot send you anything. You choose how many a day in onboarding or in your profile, and you can turn them off there or in your device settings at any time. If you have not subscribed, the app may also schedule a few local reminders about the limited-time offer, on the same basis.

Purchases

Subscriptions and the lifetime purchase are processed by Apple or Google, not by us. We never see your card. Those companies handle payment data under their own privacy policies. Through RevenueCat we receive the receipt, which tells us which product you bought, when it renews or expires, and the store's country.

What we do not do

How long we keep it

Local data stays on your device until you delete it. Purchase records in RevenueCat are kept for as long as needed to honour your subscription or purchase and to meet accounting obligations. Analytics events in PostHog are kept for up to two years and then deleted. Meta retains measurement data under its own policy.

Deleting your data

Open the app, go to Perfil → Privacidad y datos → Borrar mis datos de este dispositivo. That erases your profile, history, favourites and scheduled notifications from the device. Deleting the app removes everything local as well. The analytics and purchase records described above are tied to the random identifier (and, on Android, to the advertising identifier), not to your name; if you want them deleted too, write to hello@everflowlabs.io from the device, and we will help you find the identifier and remove what can be removed. Purchase records needed to honour an active subscription or a refund are kept until that need ends.

Children

MoodUp is not directed to children under 13, and we do not knowingly collect information from them.

Your rights

Depending on where you live, you may have rights to access, correct, delete or port your personal data, and to object to some processing. For everything stored on your device you can exercise them yourself, immediately. For the anonymous records held by the services above, write to hello@everflowlabs.io. If you are in the European Economic Area or the United Kingdom, the legal basis for analytics and ads measurement is our legitimate interest in improving the app and spending our advertising budget responsibly, and you can object at any time by writing to us; on Android you can also delete the advertising identifier yourself, as explained above. You also have the right to complain to your local data protection authority.

Changes

If the app starts sending new kinds of data off your device, we will update this page and say so in the app before it happens. The effective date at the top always reflects the current version.