Privacy Policy

01Who we are and what this covers

Moodzy ("we", "us", "our") is a free, location-based social and events app. People set a mood or activity and discover other people and short-lived local events nearby. Events end at the time their host set, or about 4 hours after they start. You can join or create events, chat in event group chats and 1:1 direct messages, and share photos and location pins inside chat.

Moodzy is for platonic social connection. It is explicitly not a dating app: there's no swiping and no romantic matching.

We operate from Dehradun, Uttarakhand, India. Our registered entity is Moodzy Private Limited. This Privacy Policy covers the Moodzy app on Android (launching first) and iOS (later), and our website. It works alongside our Terms of Service, Community Guidelines and Child Safety Standards.

02The data we collect

We collect only what we need to run the app, keep it safe, and meet our legal duties. Here's the full list:

1. Your phone number. You sign in with a phone-number one-time passcode (OTP) only - no passwords, and no Google, Apple or Facebook login. Your number is encrypted at rest, used for login, to keep things to one account per phone, and for account security. It is never shown to other users.
2. Approximate location. Your device location is used to find nearby people and events. The location shown to other people is shifted by a fixed offset of up to roughly 400 metres, so your exact coordinates are never shared. More on this below.
3. Your profile. Display name, username, optional bio, optional avatar photo, optional gender, optional date of birth (used for age), your current mood, and your interests.
4. Content you create. Events you make, messages you send (group and direct), photos you share in chat, and location pins you drop.
5. A push notification token from Google Firebase Cloud Messaging, so we can deliver notifications to your device.
6. Basic device and usage diagnostics for reliability, security and abuse-prevention.
7. Crash reports, when the app breaks. If Moodzy crashes or hits an error, the app sends us a report so we can fix it. That report contains the error and its stack trace, the app version and build, your phone's OS version and model, and - if you were signed in - your account ID. Phone numbers, email addresses and login tokens are stripped out on our servers before a crash report is ever stored, so no contact detail reaches it. Nothing you type is included: we never attach message contents, form fields or search terms. Crash reporting is on in the app we publish and off in development builds.

That's it. We don't run behavioural or ad tracking, and we don't build advertising profiles.

03How we use your data (and our legal bases)

We use the data above to:

• Run the core service - show you nearby people and events, power group and direct chat, and deliver notifications.
• Keep people safe - moderation, profanity and image filtering, and acting on reports.
• Protect the platform - security, and fraud and abuse prevention.
• Meet legal obligations - respond to lawful requests and comply with applicable law.

Under India's Digital Personal Data Protection (DPDP) Act 2023, our legal bases are your consent and the necessity of providing a service you asked for. For users covered by GDPR or similar laws, we rely on consent, performance of our contract with you, and our legitimate interests in safety and security - balanced against your rights.

04How location works - and why your exact spot stays private

To show you who and what's nearby, we need a rough sense of where you are. But we designed this so other people never see your real position.

You also have Ghost Mode, which lets you browse invisibly without appearing to others. You can turn location sharing off at the device level at any time - though some features that depend on "nearby" won't work without it.

05Who we share data with

We share data only with a small set of service providers who help us run Moodzy, and only under contract. We list them here so there are no surprises:

• Mapbox - maps and geocoding.
• Google Firebase Cloud Messaging (FCM) - push notifications.
• Google Firebase Crashlytics - crash reporting. It catches the kind of crash that takes the whole app down before our own code can record anything. It receives crash and device information only; it is never used for advertising or profiling.
• Our cloud and server hosting provider - to store data and run the service.
• A CAPTCHA / anti-abuse provider - to block bots and abuse.

We may also disclose data where the law requires it, or where it's necessary to protect someone's safety.

06How long we keep your data

We keep your data while your account is active. Some things are designed to be short-lived:

• Events end at the time their host set, or about 4 hours after they start, and drop off the map.
• Crash reports are kept for 90 days, then deleted automatically. We hold a summary of each distinct bug for longer, but that summary carries no personal data.
• When you delete your account, we delete your personal data - including your events and chats - subject to limited retention required by law or needed for abuse and safety records.

We don't hold onto data longer than we need it for the purposes described in this policy.

07How we protect your data

Security is built in, not bolted on. We use:

• TLS/HTTPS encryption for data in transit.
• Encryption at rest for your phone number.
• Server-side location obfuscation, so exact coordinates never leave our servers.
• Access controls limiting who can reach your data.
• Moderation logging and account suspension/ban tooling to handle abuse.

No system is perfectly secure, but we work hard to protect your information and to respond quickly if something goes wrong.

08Your rights and choices

You have real control over your data. Under the DPDP Act 2023, you can:

• Access the personal data we hold about you.
• Correct data that's wrong or incomplete.
• Erase your data (see how to delete your data).
• Withdraw consent at any time - as easily as you gave it.
• Nominate someone to exercise your rights if you die or become incapacitated.
• Raise a grievance with our Grievance Officer (details below and on our grievance page).

If you're outside India, you're afforded equivalent rights. Under the GDPR (EU/UK and similar), that includes access, rectification, erasure, restriction, objection, portability, and the right to lodge a complaint with your data protection authority. Under the CCPA/CPRA (California), that includes the right to know, delete, correct, and to opt out of the "sale" or "sharing" of personal information - and since we never sell or share your data for advertising, there's nothing to opt out of. We won't discriminate against you for exercising any of these rights.

To exercise a right, email privacy@moodzy.club or use the in-app controls. We may need to verify your identity first.

09Children and minors

You must be at least 18 to use Moodzy - we do not knowingly permit anyone under 18 to hold an account, and we do not offer a parental-consent pathway to keep an under-18 account active. Under India's DPDP Act 2023, processing a child's personal data requires the verifiable consent of a parent or lawful guardian; because we don't knowingly process an under-18 user's data in the first place, this obligation doesn't arise in the ordinary course of using Moodzy.

We have zero tolerance for child sexual abuse and exploitation (CSAE). Such content or behaviour is prohibited, removed, the account is banned, and we report to the appropriate authorities (such as NCMEC and/or Indian law-enforcement) as applicable. You can read more in our Child Safety Standards.

Think a minor is using Moodzy? Contact us at privacy@moodzy.club or grievance@moodzy.club and we'll investigate and remove the account. You can also request deletion via our deletion page.

10How to delete your data

You can delete your account and its data at any time, in two ways:

1. In the app - go to Settings > Account > “Delete account”. This is permanent and removes your account, your data, your events and your chats.
2. On the web - if you can't get into the app, email support@moodzy.club or use the page at moodzy.club/delete.html.

After deletion, we remove your personal data, subject only to limited retention required by law or needed for abuse and safety records.

11International users and cross-border transfers

Moodzy is operated from India, and our service providers may process data in other countries. If you use Moodzy from outside India, your data may be transferred to and processed in India or in the countries where our providers operate.

Wherever your data goes, we apply the protections described in this policy and afford global users rights equivalent to GDPR and CCPA-style protections. We only work with providers who are contractually bound to protect your data.

12Changes to this policy

We may update this policy as Moodzy evolves or as the law changes. When we make a meaningful change, we'll update the “last updated” date and notify you in the app before the change takes effect. If you keep using Moodzy after an update, that means you accept the revised policy. If you don't agree, you can delete your account at any time.