Privacy Policy

Effective May 17, 2026

1. What we collect

When you sign up and use DailyMood, we collect:

  • Account info: your email, display name, password (stored so we can't read it — only you know it), and any OAuth profile data if you sign in with Google.
  • Mood entries: the mood you choose, notes you type, tags, photos (if you upload any), and the date/time.
  • AI usage: how many AI calls you make per day, used to enforce rate limits.
  • Payments: if you subscribe to Pro, we store a Stripe customer ID only — we never see your card number. Stripe handles that.

2. How we use AI

When you use AI-powered features (entry summary, photo analysis, Ask AI), we send your text or image to an external AI provider (currently Google) for stateless processing — your entries are not retained by the AI provider, and they are never used to train any AI model.

3. Images

If you upload a photo, we store it on Cloudflare R2 and serve it via signed URLs that expire within 1 hour. Your photos are never publicly accessible — only you can view them.

4. Analytics

We use Google Analytics 4 to understand how people use our site (which pages are visited most, which browsers people use, etc.). We don't identify individuals. We enable anonymize_ip so your IP isn't stored in full.

A banner notifies you on first visit that cookies are in use; continued use is treated as acknowledgement. For opt-out options, see the Cookie Policy.

5. Third-party services

We rely on the following providers to run DailyMood:

  • Google — OAuth for login, AI models for AI features, and Google Analytics for traffic stats.
  • Stripe — payment processing for Pro.
  • Resend — transactional email (verification, password reset).
  • Cloudflare R2 — image and avatar storage.
  • Cloud hosting provider — runs our app and database.

Each provider has its own privacy policy. Your data may be transferred outside Thailand depending on where these services operate.

6. Data retention

We keep your data as long as your account is active. If you delete your account, we remove all your entries and images within 30 days, except data we're required to retain by law (e.g., payment receipts).

7. Your rights under PDPA

Under Thailand's Personal Data Protection Act (PDPA) B.E. 2562, you have the right to:

  • Access and request a copy of your data
  • Correct inaccurate information
  • Request deletion
  • Restrict or object to processing
  • Export your data (data portability)
  • Withdraw consent

Send rights requests to [email protected]. We respond within 30 days.

8. Contact

Questions about privacy or your data? Reach us at [email protected].