Privacy Policy

Effective date: 14 May 2026 · Last updated: 21 October 2026

This Privacy Policy explains how Muddy Toes ELC Limited, a company incorporated in New Zealand, trading as MoodSpace ("MoodSpace", "we", "us", or "our"), collects, uses, shares, and protects information when you use the MoodSpace mobile and web applications and related services (collectively, the "Service").

MoodSpace supports personal wellbeing and communication through mood check-ins, journaling, family messaging, routines, a family planner, games, Guiding Hand (an AI helper for parents with MoodSpace Family+), and adult Solo accounts with chosen friend connections. Because the Service is intended for use by minors with parental involvement, we treat the information you share with us as sensitive and handle it accordingly.

By using MoodSpace, you agree to the practices described in this Policy. If you do not agree, please do not use the Service.

1. Who we are

Muddy Toes ELC Limited (trading as MoodSpace) is the agency responsible for your personal information under the New Zealand Privacy Act 2020, and the data controller for the purposes of the GDPR and UK GDPR where those laws apply. If you have questions about this Policy or your data, contact us at the address in Section 14.

2. Who can use MoodSpace

MoodSpace is intended for:

Teens, used with the knowledge and involvement of a parent or legal guardian.
Parents and legal guardians of those teens.
Adults using Solo accounts, including optional connections with other adults.

We do not knowingly create accounts for children under the minimum age required by applicable law in your jurisdiction without verifiable parental consent (for example, under 13 in the United States, or under 16 in parts of the EEA/UK). Where required, a parent or guardian must consent to the creation and use of a teen's account.

If you believe a child has provided us with personal information without appropriate parental consent, contact us and we will delete the relevant data.

3. Information we collect

3.1 Information you provide

Account information: email address, password (handled by our authentication provider), username, display name, role (teen or parent), and avatar.
Profile information: birthdate (used to calculate age and tailor the experience), themes, preferences, timezone, notification settings, and check-in reminder time.
Mood and wellbeing data: mood selections (emoji/category), intensity ratings, optional written notes, and context tags associated with check-ins. Mood categories, intensity and associated metadata are not end-to-end encrypted. Written notes use end-to-end encryption when the required keys are available; see Section 8 for limitations.
Journal content ("Daily Reflections"): written reflections you save in your private space. Reflection text uses end-to-end encryption when the required keys are available. Word and character counts, dates and account identifiers are stored separately and are not end-to-end encrypted. See Section 8 for legacy records and key-unavailable cases.
Messages: text messages and mood check-in shares sent within MoodSpace. Chat text uses end-to-end encryption when the conversation has the required keys. Sender and recipient identifiers, timestamps, check-in references and read status are processed separately to operate messaging and are not end-to-end encrypted. See Section 8 for legacy conversations.
Family connections and invitations: information you provide when inviting or linking family members, such as the invitee's name, email address, phone number, age (for child invitations), invitation codes, and chosen avatar metadata.
Routines and the Family Planner: routine steps you or a parent set up (names, icons, times and days) and which steps were ticked off and when; and planner events (titles, dates and times, places, notes, bring lists, who an event is for and who can see it), including a child's request to add a plan or a note that they feel nervous about one. Routine and planner content is not end-to-end encrypted, because reminders are sent from our servers. Only add details, such as medical appointments, that you are comfortable storing on this basis.
Chores, goals and rewards: the chores, goals and rewards a parent sets up, points earned and rewards redeemed.
MoodBuddy and games: the MoodBuddy character chosen for an account, outfits and items owned and worn, game progress (each game's saved state, such as levels reached, items collected and in-game settings), which games a parent has allowed for each child (including the choice made when inviting the child), and games unlocked as rewards. See Section 3.7.
Friend connections: the adult friends you invite or accept, for Solo accounts and, with MoodSpace Premium, for parents in a family.
Marketing preferences: whether you chose to receive marketing emails, when and where you made that choice (at sign-up or in settings), and the wording you were shown.
Policy acceptances and promotion codes: which versions of this Policy and our Terms you were shown and accepted, and when; and any promotion codes you redeem.
Guiding Hand conversations: if you are a parent with MoodSpace Family+ and use Guiding Hand, what you write or say to it, its replies, the suggestion cards it offers and what you did with them, conversation titles and summaries, the things it remembers about your family, any reply you report and why, and the choices you made on its consent screen and its other permissions. See Section 3.8.
Support communications: information you share when you contact us for help or feedback.

3.2 Information collected automatically

Authentication tokens and session data: stored securely on your device (using platform secure storage where available) to keep you signed in.
Service usage data: limited operational logs needed to run the Service, including timestamps, streak and check-in counts, points and rewards activity, and similar in-app metrics.
Safety and audit logs: where authorized administrative review occurs (for example, when reviewing a reported chat), we may log the reviewer, the time of access, the duration of the review, the reason, and the IP address used to perform that review. We do not routinely log end-user IP addresses for ordinary product features.
Device and technical information: information necessary to operate the app on your device, such as a basic client identifier sent with API requests (e.g. moodspace-app).
Crash and diagnostic data: if the app crashes or encounters an error, we collect diagnostic information through our error-reporting provider (Sentry), such as device model, operating system version, app version, and technical details of the error. This reporting is configured to minimize personal information and does not include the content of your messages, reflections, or mood entries.
Subscription and entitlement data: if you purchase MoodSpace Premium or MoodSpace Family+, or start a trial, we receive subscription status information from your app store and our subscription-management provider (RevenueCat), such as the product and plan purchased (Premium or Family+), trial and renewal status and dates, and pseudonymous transaction identifiers. We do not receive your payment card details.
Subscription event log: a record of each subscription event our subscription-management provider reports (for example a purchase, renewal, cancellation or refund) and its date, kept to manage entitlements, answer support requests and confirm eligibility for any promotion that depends on a subscription.
Subscription screen events: when you view the MoodSpace Premium screen or the end-of-trial screen, choose a plan, or start, complete, cancel or restore a purchase, we record that event with where it started, the plan chosen, your platform and your app version. We use these events to understand and improve those screens. They are linked to your account, kept by us and not shared with third parties.
Store country: the country of your App Store or Google Play account, so that notices and promotions are shown only where they apply.
App tips: which in-app tips you have seen or closed, so that they are not shown again on your other devices.
Guiding Hand use counts: how many times you, and your family together, have used Guiding Hand in the current week, so that its weekly fair-use allowance can be applied (Section 3.8). We also keep anonymous counts of how much AI processing Guiding Hand uses and how often its safety check flags a message, with no account identifier and no message content.
Notification tokens: a push notification token and a device identifier for each device you sign in on, so that notifications reach every device you use.

3.3 Information from third-party sign-in providers

If you sign in using Google or Apple, we receive the basic profile information those providers share with us (such as your name, email address, and a unique provider identifier) as permitted by your settings with that provider.

3.4 What we do not collect

We do not access HealthKit, Google Fit, or other health platform data.
We do not knowingly collect biometric identifiers.
We do not record or store audio. If you talk to Guiding Hand instead of typing, only the resulting text reaches MoodSpace (see Section 3.5).
We do not collect or store payment card details. Payments for MoodSpace Premium are processed by your app store (Google Play or the Apple App Store); we receive only the subscription status information described in Section 3.2.

If we add such features in the future, we will update this Policy and obtain any consents required by law.

3.5 Camera, photos, and notifications

With your permission, MoodSpace may access:

Your camera and photo library, to let you choose or take a profile photo, and to save photos you take in a game (such as a picture of your Moodling) to your photo library. On iPhone, saving asks only for permission to add photos. Photos saved from games stay on your device: they are not uploaded to MoodSpace or shared with other apps.
Push notifications, only to deliver reminders, family activity, and messages you have asked to receive.
Your microphone and speech recognition, only when you tap the microphone in Guiding Hand to talk instead of typing. Your speech is turned into text by your device's speech recognition service: on iPhone, on the device itself where your iPhone supports it, otherwise by Apple; on Android, by the device's speech recognition service (usually provided by Google), which may process the audio on its servers. MoodSpace receives only the text. Unless you turn it off in Guiding Hand's settings, the text is sent when you stop talking, after a moment in which you can tap Edit. We never receive or keep a recording.

You can change or withdraw these permissions at any time in your device settings.

3.6 Optional location sharing and maps

Location sharing is optional and off until you enable it. Eligible teen and adult Solo accounts can choose supported recipients and attach a location to a check-in. We request your device location permission before capturing a position. The snapshot may include precise latitude and longitude, accuracy and the capture time; it is associated with the check-in and your selected recipients.

You can leave location out of an individual check-in, change recipients, or turn sharing off in MoodSpace. You can also withdraw location permission in device settings. Turning device permission off prevents new captures but does not by itself delete locations already shared. A recipient may request a fresh location where the feature is available, but a request does not capture or send your location automatically: you choose whether to respond.

MoodSpace does not continuously track your movements or capture location in the background. A shared pin is a snapshot, not a live position. When you open the map, the app may also request your own position to display a reference marker; that action does not share it with your connections.

Location snapshots are encrypted on the device before being stored or delivered through MoodSpace. Recipients decrypt them on their devices. Our servers store encrypted payloads and operational metadata such as sender and recipient identifiers, check-in or request identifiers, and delivery timestamps. End-to-end encryption does not conceal that metadata.

Maps use Apple Maps on iOS, Google Maps on Android, and OpenStreetMap map tiles on the web. When maps load, the relevant provider may receive technical information such as your IP address and requests identifying the map area viewed. The Google Maps SDK also collects device and SDK metadata, an SDK-specific identifier, IP addresses and crash diagnostics, and may collect map interactions such as panning and zooming, to operate and improve its services. This map-service processing is separate from encrypted delivery of your shared location and is subject to the provider's privacy policy.

3.7 MoodBuddy games

MoodSpace includes games (Moodlings, Weatherlands and Rain or Shine) that children, Solo users and parents can play. The games' software is built into the app and runs on your device. The first time you open a game, its pictures, music and sounds are downloaded from our storage provider; after that it can be played offline.

We save each player's game progress to their MoodSpace account so that it can be restored on another device, together with which games a child may play and any games unlocked as rewards. A parent chooses which games each child can play. Starting a game over clears that game's saved progress.

The games do not send your information to the games' developer or to any other third party. They contain no advertising, no links to other websites and no purchases, and your mood check-ins are never shared with them.

3.8 Guiding Hand (AI helper for parents)

Guiding Hand is an optional AI helper for parents in a family with MoodSpace Family+. It is not available to children or to Solo accounts. Before first use, a parent reads how it works and what it uses, and it does not work until they agree.

What it uses. To write each reply, Guiding Hand uses:

what you write or say to it, and the earlier messages in the same conversation (the most recent ones, plus a summary of older ones);
your display name, and your children's first names and ages (worked out from their birthdates);
the things it has remembered about your family from earlier conversations (see "Memories" below), and the titles of your recent conversations with it;
only if you choose "Yes" on its consent screen (it is off unless you tick it, and you can change it at any time in Guiding Hand's settings): the moods your children choose in their check-ins and how strong they are, and your own check-ins, from about the last four weeks, which are the same check-ins you can already see in the app;
only if you allow it (Guiding Hand asks the first time you ask it about one of these, it is off until you tap Allow, and you can turn it off at any time in Guiding Hand's settings): what is on your family planner from the last two days to the next two weeks (each item's title, type, day and time, who it is for, place, bring list and prep step, and whether a child has said they feel nervous or excited about it), but never the notes on planner items; and, from about the last two weeks, how each child is going with their daily routines (which steps were done or missed), the chores done or waiting for your approval and the points earned, and progress towards each reward. These are things you can already see in the app, for your current family only, and other adults in your family are not named;
when you open it from a guide in the app, the text of that guide.

When you ask it to add or set something up, it also uses what you asked for and, depending on the request, the title, place and bring list of a planner event, the free times in your family's planner over the coming week (times only, not what fills the other times), or the names of MoodBuddy items and games that can be given as rewards.

What it never uses. Your family's messages, daily reflections (journals), written check-in notes and shared locations, which are end-to-end encrypted; profile photos; and anything from another family.

Our AI provider. Guiding Hand's replies and suggestions are written by Claude, an AI service provided by Anthropic, PBC, in the United States. To write a reply, the information above is sent to Anthropic. Before it is sent, your children's names and your own are replaced with placeholders such as "[Child A]", both as they are saved in MoodSpace and as you would usually type them (for example a first name, without punctuation or emoji). Other names you type, such as a teacher's or a friend's, are not replaced, so leave out details you would rather not share. Under its commercial terms, Anthropic processes this information only to provide the service to us, does not use it to train its AI models, and deletes it within 30 days unless it is flagged for a safety or misuse review.

Safety check. Each message is checked automatically, first within MoodSpace and then by the AI service, for signs that someone may be in immediate danger. If so, the app shows emergency and crisis contacts and the reply focuses on getting help. The check runs on your message and the recent conversation. We keep only an anonymous count of its results (the level and category, with no account identifier and no message content) to see how well it works.

What MoodSpace stores. Your conversations, the things Guiding Hand remembers and the suggestion cards are stored on our servers, encrypted with a key unique to your account. This is not end-to-end encryption: our servers decrypt them in order to write replies. Only you can see your Guiding Hand conversations in the app; other members of your family cannot.

Memories. So that you don't have to repeat yourself, Guiding Hand may remember useful things about your family, such as a child's interests or what has helped before (it keeps up to about 120; after that, the oldest are removed automatically to make room). Messages the app writes for you, such as a suggested question you tap, are not remembered as facts about your family. You can see and delete memories one at a time, or clear them all, in Guiding Hand's settings.

Suggestions. When you ask it to add something to the planner, a routine, the chores or the rewards, it suggests items as cards. Nothing is saved until you tap Add, and saving uses the same features, and the same visibility and sharing rules, as adding the item yourself.

Reports. If you report a reply as wrong, unsafe or unkind, a copy of that reply, your message before it and any note you add are sent to the MoodSpace team for review, encrypted when stored.

Fair use. Guiding Hand includes a generous weekly allowance for each parent and for the family. To apply it, we count each message and each request for suggestions in the current week (Section 3.2). The current allowance is shown in the app and in our Terms.

No automated decisions. Guiding Hand does not make decisions about you or your children that have legal or similarly significant effects. It suggests; you decide.

4. How we use information

We use the information we collect to:

Provide, operate, and maintain the Service, including mood check-ins, journaling, messaging, family linking, routines, the family planner, games, points/streaks, and notifications.
Authenticate you, secure your account, and prevent abuse, fraud, and unauthorized access.
Personalize your experience (for example, themes, reminders, age-appropriate content).
Enable family features, including sharing mood check-ins, reflections, and messages with linked family members in accordance with permissions you (or, for younger teens, a parent) have configured.
Provide Guiding Hand to parents who choose to use it, including checking its messages for signs of immediate danger and applying its weekly fair-use allowance.
Send transactional messages, such as invitation emails, password resets, and important service notices.
Respond to your support requests and feedback.
Detect, investigate, and respond to safety, security, or policy issues, including reviewing reported content where permitted.
Send routine and planner reminders, and reminders about your trial or subscription.
Show notices and, where they apply, promotions in the app. These are never shown to child accounts.
Send marketing emails, only if you have opted in.
Understand how the subscription screens are used, so that we can improve them.
Comply with legal obligations and enforce our terms.

We do not sell your personal information, and we do not use your mood data, journal content, messages, shared locations or Guiding Hand conversations for advertising. Our AI provider does not use your information to train its models.

5. Legal bases for processing (EEA/UK users)

Where the GDPR or UK GDPR applies, we rely on the following legal bases:

Contract: to provide the Service you've signed up for, including Guiding Hand when you choose to use it.
Consent: for optional features such as location sharing, push notifications, camera and photo library access, microphone and speech recognition, Guiding Hand's use of check-in moods and of the family planner, routines, chores and rewards, marketing emails, and (for younger teens) parental consent for account use.
Legitimate interests: to keep the Service secure, prevent abuse, improve reliability, check Guiding Hand messages for signs of immediate danger, and understand and improve the subscription screens, balanced against your rights.
Legal obligation: where we must process information to comply with applicable law.

You can withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6. How information is shared

We share information only as described below:

Chosen recipients can receive the check-ins, messages and optional locations you share through family or friend connections. Being connected does not automatically grant location access: location sharing has separate recipient controls. We use location data to provide these requested sharing and map features, not for advertising.

Within your family on MoodSpace. Mood check-ins, reflections, and messages may be visible to linked parents or family members based on the permissions configured for the account (for example, parent_can_view_reflections). You and, where applicable, the responsible parent can review and adjust these settings. Routines, chores and rewards are visible within the family, and planner events to the family members each event's visibility setting allows (for example, parents only). Guiding Hand conversations are visible only to the parent who had them.
Service providers ("processors"). We rely on a small number of vendors to operate the Service. They process information only on our instructions and under appropriate contractual safeguards:
- Supabase — authentication, database, real-time, storage, and edge functions hosting.
- Apple and Google — optional sign-in providers, app distribution, (where enabled) push notification delivery, and, if you talk to Guiding Hand, the speech recognition built into your device (Section 3.5).
- Resend — sending transactional emails such as invitations.
- Expo (EAS) — building and delivering app updates.
- RevenueCat — subscription management and entitlement status for MoodSpace Premium and MoodSpace Family+.
- Sentry — crash and error reporting.
- Anthropic — the Claude AI service that writes Guiding Hand's replies and suggestions (Section 3.8).
- Mailchimp — sending marketing emails to people who have opted in (email address, first name and account type).
Legal and safety. We may disclose information if we believe in good faith that it is necessary to comply with law, legal process, or enforceable government request; to protect the rights, property, or safety of users (including minors), MoodSpace, or the public; or to investigate violations of our terms.
Business transfers. If MoodSpace is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to the protections of this Policy.

We do not share your information with advertisers or data brokers.

7. International data transfers

Your information may be processed in countries other than the one you live in, including in the United States and other regions where our service providers operate. Guiding Hand messages, and the family information described in Section 3.8, are processed by Anthropic in the United States. Where required, we use appropriate safeguards (such as the European Commission's Standard Contractual Clauses) to protect international transfers. For New Zealand users, we take reasonable steps to ensure that information disclosed overseas is subject to safeguards comparable to those in the Privacy Act 2020, consistent with Information Privacy Principle 12.

8. Data security and encryption

We take the security of your information seriously, particularly given the sensitive nature of mood, journal, and family communications.

All connections between the MoodSpace app and our servers are protected with TLS (HTTPS) encryption in transit.
Authentication tokens are stored using your device's secure storage (such as iOS Keychain / Android Keystore) where available.
Access to data is restricted using row-level security policies, JWT-based authentication, and least-privilege controls on the backend.
End-to-end encryption and its limits. MoodSpace supports end-to-end encryption for chat text, daily reflection text and written check-in notes. Encrypted content is encrypted and decrypted on user devices; our servers cannot read that encrypted content. This is not a guarantee that every stored record is end-to-end encrypted: older plaintext records may remain, legacy conversations without the required keys can use plaintext, and reflections or notes may be stored without end-to-end encryption when their required keys are unavailable. Such records remain subject to our access controls and infrastructure encryption. Shared location snapshots require encryption and are not sent through a plaintext fallback. Account information, mood categories, intensity, reflection counts and operational metadata are not covered by content encryption.
Recovery and reports. If you lose access to your keys, recovery depends on the recovery options available and previously set up for your account, such as a recovery code or an eligible linked person. We cannot guarantee recovery without the necessary keys or recovery material. If a user reports content to us, a readable copy of the reported content may be included with the report so that we can review it.
Guiding Hand. Conversations, memories and suggestion cards are encrypted at rest with a key unique to each account, and family names are replaced with placeholders before anything is sent to our AI provider. Guiding Hand is not end-to-end encrypted, because our servers must read a message in order to reply to it. It never receives your end-to-end encrypted content.
Other personal data is encrypted at rest on our infrastructure in accordance with industry-standard cryptographic practices.

No security measure is perfect. If we become aware of a security incident affecting your information, we will notify you and the appropriate authorities as required by law.

9. Data retention

We keep your personal information only for as long as is necessary to provide the Service and for the purposes described in this Policy.

Shared check-in locations can remain available as part of check-in history; they do not all expire after 24 hours. Fresh locations shared in response to a request are shown on the map for up to 24 hours after the response. Expiry from the map is not a promise of immediate deletion from storage or backups. Turning sharing off or removing a recipient withdraws their access through the location feature. This cannot erase a screenshot or other copy a recipient has already kept. The account and content retention rules below also apply to encrypted location records and associated metadata.

Active accounts: information is retained while your account is active.
Deleted or inactive accounts: when an account is deleted (by you, a parent, or due to prolonged inactivity), associated personal data is removed or anonymized within a reasonable period, subject to backups and to limited records we are required to keep for legal, security, or audit purposes (for example, abuse investigation logs).
Soft-deleted records: some content is initially marked as deleted before permanent removal, so that accidental deletions can be recovered for a limited time.
Games, routines and planner: game progress, routines and planner events are kept while the account is active and deleted with it. A parent can also delete routines and planner events at any time.
Guiding Hand: conversations and memories are kept until you delete them (one conversation, one memory, or everything at once, in Guiding Hand's settings) or delete your account. Memories are also removed automatically, oldest first, once there are more than about 120. If your family stops having Family+, they are kept so that they are there if you come back, and you can still export or delete them. Our AI provider deletes what it receives within 30 days unless it is flagged for review. Reports are kept for as long as needed to review and act on them, and are deleted with your account. Weekly use counts hold only a number and the week they belong to, and are deleted with your account.
Marketing emails: when you opt out, you are left out of later campaigns, and every marketing email includes an unsubscribe link. Your opt-in history is kept with your account as a record of consent and deleted with it.

10. Your rights and choices

Depending on where you live (including under the New Zealand Privacy Act 2020, the GDPR/UK GDPR, and similar laws), you may have the following rights regarding your personal information:

Access the personal information we hold about you.
Correct information that is inaccurate or incomplete.
Delete your account and associated personal information (see Deleting your account below).
Export a copy of your data in a portable format.
Restrict or object to certain processing.
Withdraw consent where processing is based on consent.
Lodge a complaint with your local data protection authority — in New Zealand, the Office of the Privacy Commissioner (privacy.org.nz).

For teen accounts, a parent or legal guardian may exercise these rights on the teen's behalf where appropriate.

To exercise any of these rights, contact us at the address in Section 14. We will respond within the timeframes required by applicable law. You can also manage many settings directly in the app (profile information, family links, notification preferences, and visibility settings). In Guiding Hand's settings you can export your conversations and memories, delete individual conversations or memories, delete everything, and turn off its use of check-in moods, and of the planner, routines, chores and rewards, at any time.

Deleting your account

In the app. Sign in, open your Profile (the Profile tab, or your photo at the top of the screen) and tap Delete My Account. Before you confirm, the screen shows what will be deleted and what happens to your family. To confirm, enter your password (if you sign in with one) and type DELETE.

7 days to change your mind. You are signed out everywhere straight away. If you sign back in within 7 days, everything comes back. After that the deletion is permanent and cannot be undone.
What is deleted: your profile and sign-in, your name and photo, your mood check-ins and journal entries, your encryption keys, your streaks, points and achievements, your chores, rewards, goals and family settings, your routines and planner events, and your Guiding Hand conversations and memories.
What is kept: messages you have already sent stay in the conversations they were part of, because they are also the other people's record, and show as "Deleted member" instead of your name. We also keep the limited records described in Section 9 (for example, records we must keep for legal, security or audit purposes) and copies in backups until they are replaced. Our AI provider deletes what it received within 30 days, unless it was flagged for review.
Your family: if another adult remains in your family, the family and its children's accounts stay as they are and you are removed from it. If you are the only adult, the family is deleted and so are its child accounts; the screen lists them before you confirm. To let a child keep their account, add another parent or guardian to the family first.
Children and teens can delete their own account in the same way. Their parent is told that they asked, and only the child can undo it, by signing back in within 7 days. A parent who wants a child's account deleted can contact us as described below.
Subscriptions: deleting your account does not cancel a subscription. Cancel it first, or you will keep being charged: on iPhone in Settings, then your name, then Subscriptions; on Android in the Play Store, under your profile picture, then Payments and subscriptions, then Subscriptions.

If you can't sign in. If you have only forgotten your password, reset it from the sign-in screen and then delete your account in the app. Otherwise, email privacy@getmoodspace.app from the email address on the account, with the subject "Delete my account". We will check that the request comes from the account holder (or, for a child's account, from their parent or guardian), delete the account in the same way, and reply to confirm.

11. Push notifications and communications

If you enable push notifications, MoodSpace may send you check-in reminders, routine and planner reminders, family activity alerts, and other in-app updates. You can disable notifications at any time from your device settings or from the in-app notification preferences.

We may send you transactional emails (such as account verification, password reset, and invitations) that are necessary to operate your account. We send marketing emails only if you opt in, with the unticked box at sign-up or in your profile settings, and never to child accounts. You can opt out at any time in the app or with the unsubscribe link in any marketing email.

12. Children's privacy

MoodSpace is designed with minors in mind and includes parent-managed features. We:

Require parental involvement for younger teen accounts in line with applicable law.
Do not knowingly collect more personal information from children than is necessary to provide the Service.
Do not use children's data for behavioral advertising or sell it to third parties.
Provide controls so that parents and teens can manage what is shared and with whom within their family.
Never send marketing emails, promotions or payment prompts to child accounts.
Do not offer Guiding Hand, our AI helper, to child accounts. When a parent uses it, it may use their children's first names (replaced with placeholders before leaving MoodSpace), ages and, only if the parent chooses, their check-in moods and how they are going with their routines, chores and rewards and the planner items they are part of. It never uses a child's messages, reflections, check-in notes or locations.
Let parents choose which games each child can play. The games show no advertising, have no links out of the app and no purchases, and do not share children's information with the games' developer.

If you are a parent or guardian and believe your child has provided personal information to MoodSpace without your consent, please contact us so we can review and, where appropriate, delete that information.

13. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you through the app, by email, or by other appropriate means, and update the "Last updated" date at the top of this Policy. Your continued use of the Service after the changes take effect means you accept the updated Policy.

14. Contact us

If you have questions, concerns, or requests about this Policy or your personal information, contact:

Muddy Toes ELC Limited (trading as MoodSpace) — Privacy Team
New Zealand
Email: privacy@getmoodspace.app

We will do our best to respond promptly and resolve any concerns you have.