MoodWatch + Privacy Policy

Last updated: August 14, 2026

Charles Miller IT Consulting, LLC ("CMIT," "we," "us," or "our") provides MoodWatch + for iPhone, iPad, Apple Watch, and Mac, including its widgets, complications, and Live Activity (collectively, the "App"), and the moodwatch.io website (the "Website").

The short version

MoodWatch is designed to keep your App data within your Apple ecosystem. We do not sell your data, use health data for advertising, or include third-party advertising or analytics SDKs in the App.

• Apple Health access is optional. If you choose Heart Connected and grant access, MoodWatch reads recent heart-rate samples and new heart-rate updates to create your HeartScape and descriptive visual states. The App requests access to resting heart rate, but the current visual-state calculation uses heart-rate samples. Those states do not determine your mood, emotions, mental health, stress level, intent, or a health condition.
• Heart-rate samples used for ongoing calculations are processed on your device. They are not sent to a CMIT-operated server.
• Your descriptive state history, self-report entries, and settings are stored on your devices and may sync through your private iCloud account.
• The latest live relay can include BPM, descriptive state, timestamp, source name, and session status so your Mac and widgets can show a recent state through Apple's app-group and iCloud key-value services.
• A Heart Recording that you explicitly save contains heart-rate samples, timestamps, source labels, and calculated visual states. It stays in the App's local storage on that device and is not placed in MoodWatch's CloudKit state-history store.
• The Website uses a self-hosted Plausible service except for visitors whose connection Cloudflare geolocates to the European Economic Area (EEA). EEA visitors are not sent the Plausible script, and requests to the analytics host from the EEA are blocked before they reach that service.

MoodWatch is an entertainment app for personal reflection. It is not a medical device, healthcare service, diagnostic tool, mental-health assessment, or health-monitoring service. It does not diagnose, treat, prevent, or monitor a condition; provide medical advice; or determine how you feel. Do not use MoodWatch for medical, safety-critical, employment, insurance, or emergency decisions.

1. Information the App processes

Apple Health data

If you choose Heart Connected and grant permission, MoodWatch requests access to:

• heart-rate samples, including beats per minute and sample timestamps;
• resting-heart-rate samples; and
• the source name associated with a sample, such as Apple Watch, AirPods, or another compatible source.

The current HeartScape calculation uses heart-rate samples, not resting-heart-rate samples. It can query heart-rate samples from up to the prior 48 hours and listen for new samples while Heart Connected is enabled. MoodWatch compares recent readings with a rolling, person-specific baseline to calculate one of nine descriptive visual states, such as Rising, Steady, Elevated, Lowering, or Below Baseline. This calculation occurs on your device. A visual state is not a medical result or a statement about your mood, emotions, mental health, stress level, or intent. The in-memory heart-rate sample set is not uploaded to a CMIT-operated server.

You control Apple Health permission. You can review or change access in the Health app or your device's Privacy & Security settings. Self Report does not require Apple Health permission.

AirPods and Heart Recordings

On compatible hardware and operating-system versions, MoodWatch can start a temporary HealthKit workout session to receive live heart-rate readings from AirPods Pro 3 or another compatible connected source. MoodWatch discards that workout session rather than saving it as a fitness workout.

If you choose to save the resulting Heart Recording, the App stores the recording name, start and end time, BPM samples, sample times, source labels, and calculated rhythm states as a file in local App storage. These saved recordings remain on that device unless removed with the App or a deletion control made available in the App. Apple device backups may include local App data depending on your Apple backup settings.

State history, self reports, and settings

MoodWatch stores descriptive rhythm states or self-report entries, timestamps, identifiers, display choices, color theme, setup status, and mode preferences using local app storage. When iCloud is available, these records may sync through Apple's private CloudKit service so your MoodWatch surfaces remain consistent across your devices.

State-history records do not contain the full Apple Health sample stream used to calculate them. A self-report entry may contain the emoji or state you selected.

Live relay, widgets, and complications

To show a recent HeartScape across App surfaces, MoodWatch stores a small live snapshot in an Apple app group and may sync the latest snapshot through Apple's iCloud key-value store. The snapshot can contain your current BPM, descriptive state, capture time, source name, and whether a recording session is active. New snapshots overwrite the prior latest snapshot; this relay is not a continuous workout archive.

Purchases

Apple processes the one-time, non-consumable History unlock. MoodWatch receives product, transaction, and entitlement status needed to unlock History and restore the purchase. MoodWatch does not currently sell an auto-renewing subscription. CMIT does not receive your full payment-card information from Apple.

Notifications and device information

The App can register with Apple Push Notification service to receive CloudKit change notifications. An Apple-issued device token may be stored securely on the device. We do not use it for advertising.

The App also uses ordinary on-device settings and identifiers needed for setup, synchronization, app-group sharing, purchase status, and technical operation.

2. Information CMIT receives

Support communications

If you email us, we receive the address you use and anything you include in the message. We use that information to answer your request, provide support, and maintain a reasonable record of the conversation.

Website request data and EEA-blocked analytics

Cloudflare routes and secures the Website. Like most hosted websites, Cloudflare and other Website infrastructure providers may process standard request data—such as IP address, date and time, requested URL, browser or device information, geolocation derived from an IP address, and security events—to deliver the Website, prevent abuse, and diagnose failures.

The Website uses a self-hosted Plausible analytics service except for visitors whose connection Cloudflare geolocates to the EEA. For EEA visitors, the Website Worker removes the Plausible script before the page is sent and Cloudflare blocks requests to analytics.moodwatch.io before they reach the analytics service. As a result, the Plausible service does not receive analytics events from EEA visitors. Plausible is not used to collect Apple Health data, Heart Recording data, or App state-history data.

Apple diagnostics

If you choose to share diagnostics with Apple, Apple may provide CMIT with aggregated or de-identified App Store Connect diagnostics, performance information, or crash reports under your Apple settings and Apple's terms.

3. How we use information

We use information only as needed to:

• provide the HeartScape, Self Report, history, recordings, widgets, complications, Live Activity, and device relay;
• sync App state through the Apple services you enable;
• verify the one-time History purchase and restore its entitlement;
• provide support and respond to messages;
• protect the App and Website from abuse; and
• diagnose failures and improve reliability.

We do not sell personal information. We do not use Apple Health information for advertising, marketing profiles, or data-broker activity.

4. When information is shared

We do not disclose Apple Health information to third parties for advertising or marketing. Information may be handled by:

• Apple, when you use Apple Health, iCloud, CloudKit, app groups, push notifications, App Store purchases, device backups, or Apple diagnostics. Apple's handling is governed by your Apple account settings and Apple's policies.
• Website hosting and network providers, to deliver and secure moodwatch.io.
• CMIT's self-hosted Plausible analytics service, for Website visitors outside the EEA as described above.
• Professional advisers or authorities, only when reasonably necessary to comply with law, protect rights or safety, or establish or defend legal claims.
• A successor organization, if CMIT is involved in a merger, acquisition, financing, reorganization, or sale of assets, subject to appropriate protections and notice when required.

5. Retention and deletion

• Transient Apple Health calculations remain in memory only as needed for the App's current operation and are not uploaded to a CMIT-operated server.
• State history, self reports, and settings remain on your devices and in your private iCloud account until you delete them through available Apple or App controls, disable the relevant service, or remove the App and associated iCloud data.
• The latest relay snapshot remains until overwritten or removed with the relevant App or iCloud data.
• Saved Heart Recordings remain in local App storage until removed with the App or an available deletion control. Device backups may retain copies according to your Apple backup settings.
• Support communications and security logs are retained only as long as reasonably needed for support, security, legal, or operational purposes.

6. Your choices

You can:

• use Self Report without granting Apple Health access;
• change Apple Health access in the Health app or device settings;
• manage iCloud and device-backup settings through Apple;
• manage the History purchase and request any available refund through Apple's controls;
• remove local App data by using available deletion controls or deleting the App; and
• contact us about a privacy question at privacy@moodwatch.io.

Because CMIT does not operate an account system that identifies your private CloudKit records, we may not be able to access or delete data stored only in your Apple account. Apple's controls are the authoritative way to manage that data.

7. Security

MoodWatch uses Apple's application sandbox, app groups, HealthKit permissions, Keychain, iCloud services, and device data-protection mechanisms. No method of storage or transmission is completely secure, but we limit the data paths used by the App and do not operate a separate server that receives your HeartScape history or Heart Recordings.

8. Children

MoodWatch is a general-audience entertainment app. A parent or guardian should supervise a minor's use of Apple Health and subscription features and manage the minor's Apple account permissions. We do not knowingly operate a separate service that collects personal information from children for advertising or profiling.

9. European Economic Area, United Kingdom, and Switzerland

This section applies to personal data CMIT receives directly from individuals in the European Economic Area (EEA), United Kingdom, or Switzerland, such as support communications and Website request data. CMIT is the controller for that directly received data. You can contact us at privacy@moodwatch.io.

App data controlled by you

CMIT does not receive or have access to the Apple Health readings, Heart Recordings, private CloudKit records, or private iCloud relay data that the App processes through your devices and Apple account. You initiate and control those App features for your personal use. Apple may technically process that information through the Apple services you enable, subject to your Apple settings and Apple's terms, but CMIT does not operate an account system or App-data server that lets us identify or retrieve your private App records.

Limited data CMIT receives directly

CMIT directly receives personal data only through limited paths described in this policy: information you choose to send in a support or privacy message and technical request or security data needed to deliver and protect the Website. CMIT does not run EEA Website analytics, create advertising profiles, or receive private App content through those paths.

Purposes and legal bases

Depending on the context, CMIT processes directly received personal data to provide requested support or App-related services, protect the Website and App from abuse, comply with legal obligations, and establish, exercise, or defend legal claims. Our legal bases are performance of a contract or steps requested before entering one, our legitimate interests in operating and securing MoodWatch, compliance with legal obligations, and consent where applicable law requires it.

Rights and requests

Subject to applicable law, you may request access to, correction of, deletion of, restriction of, or portability of personal data CMIT directly holds about you. You may also object to processing based on legitimate interests and withdraw consent where processing is based on consent. You may lodge a complaint with the data-protection authority in your habitual residence, place of work, or the place of the alleged infringement.

These rights do not give CMIT access to Health data or private CloudKit records that remain only in your Apple account. Use Apple's and your device's controls to manage that data.

EEA representative determination

CMIT has not appointed an EEA representative under Article 27 of the GDPR. Based on MoodWatch's current architecture and limited data flows, CMIT has determined that Article 27 does not require an appointment: CMIT does not receive or have access to private App data, EEA Website analytics are disabled, and the personal data CMIT directly receives is limited to information a person chooses to send and technical data necessary to deliver and secure the Website.

This determination does not reduce your privacy rights or CMIT's responsibility for personal data it directly receives. CMIT will reassess the determination before introducing an App account system, CMIT-operated synchronization, EEA analytics or advertising, or another remote service that gives CMIT access to App data, and when relevant law or regulatory guidance changes.

International processing

CMIT is based in the United States. Apple, Cloudflare, CMIT, and their service providers may process information in countries other than the country where you live. Where applicable privacy law requires safeguards for a transfer, CMIT will use an applicable transfer mechanism or safeguard.

CMIT does not currently designate a data protection officer. Individuals in the EEA, United Kingdom, or Switzerland may contact CMIT directly using the information below.

10. International use

Apple and Website infrastructure may process information in countries other than the one where you live. Those providers apply their own legal terms and safeguards. Local privacy rights may apply to information CMIT directly holds, such as a support email; contact us to make a request.

11. Changes to this policy

We may update this policy when MoodWatch, its data practices, or applicable requirements change. We will post the revised policy here and change the "Last updated" date. Material changes may also be communicated in the App when appropriate.

12. Contact

Charles Miller IT Consulting, LLC
Louisiana, United States
privacy@moodwatch.io
support@moodwatch.io