Privacy Policy

Effective date: August 3, 2026

Last updated: September 28, 2026

This Privacy Policy explains how MedMoods (“we,” “us,” or “our”) collects, uses, shares, and protects information when you use the MedMoods app and website (the “Service”). MedMoods is a place to track how your medications make you feel, so much of what you enter is health information. We treat all of it as sensitive, whether or not a law requires us to.

The short version

We collect only what the Service needs, and you can use the core features without giving us your name or email.
We never sell your data and we never use your health information for advertising.
Your private entries (medications, doses, side effects, moods, journal, supplements) are visible only to you and to Care Partners you choose.
Community posts are shown without your name or any identifier.
When you scan a medication label or barcode, the photo is read on your own device. It is never uploaded to us and never saved.
You can download all of your data or permanently delete your account from the Profile page at any time.

HIPAA

MedMoods is a consumer app that you choose to use for yourself. We are not a healthcare provider, health plan, or healthcare clearinghouse, and we do not collect or handle your information on behalf of one, so HIPAA does not generally apply to MedMoods and we do not claim HIPAA compliance. The medications, symptoms, and moods you record are still sensitive health information, and we protect them as such. Other health-privacy laws, such as the FTC Health Breach Notification Rule and state consumer-health-data laws, may apply, and we follow this policy regardless. Section 10 explains how we handle consumer health data.

1. Information We Collect

Information you give us.

Account details: your email address and password (stored only as a secure hash), or the email address Google shares with us if you sign in with Google. Guest accounts have no email at all.
Health information you record: medications, doses and dose changes, start and stop dates, side effects and their severity, mood check-ins (mood, anxiety, energy, sleep and optional symptom tags), dose and refill reminders, journal entries, supplement logs, and notes.
Community content: posts, comments, reactions, saved posts, and reports you submit.
Care Partner information: the email address of anyone you invite and the notes a Care Partner writes.
Settings: reminder times, time zone, and notification preferences.
Messages to us: anything you send to care@medmoods.com.

Medication label and barcode scans.

On the Add medication page you can choose Take a photo or Choose a photo of a pharmacy label or medicine box instead of typing. Typing is always available.
The photo is read on your device by text-recognition and barcode-reading software that runs in your browser. The photo is not uploaded to MedMoods or anyone else, and it is not stored. It is discarded as soon as reading finishes.
What the scan finds (medication name, strength, how often, label directions, and an estimated refill date) is placed into the form for you to check. Nothing is saved until you tap Save medication, and it is then stored like anything else you type.
If a barcode or a printed National Drug Code (NDC) is found, only that product number is sent to the FDA’s public drug database to look up the medication name and strength (Section 4). The number identifies a product, not you.
MedMoods only uses your camera when you tap Take a photo, and only through your phone’s own camera screen. We never access your camera or photo library in the background.

Information collected automatically.

Session cookies that keep you signed in (see Section 7).
Basic technical data that our hosting providers log to run and secure the Service, such as IP address, browser type, and error logs.
Push notification tokens, only if you turn on app notifications. These are used to deliver your reminders.
Bot-protection signals collected by Cloudflare Turnstile on the sign-in, sign-up, guest and password-reset pages, used only to confirm you’re a person and not an automated attack.
Aggregate page-traffic statistics from Vercel Analytics, which does not use cookies or build individual profiles.

Payment information. Stripe collects card details directly. We receive only your subscription status and a Stripe customer reference, never your card number.

2. How We Use Information

To provide the Service: store your entries, show your history, charts and summaries, and generate your doctor-visit summary.
To send reminders you turned on (mood check-ins, doses, refills) by email or push notification.
To show anonymous community statistics, such as how other people felt at the same stage of a medication. These use grouped data and never identify you.
To moderate community content and keep people safe (Section 5).
To process MedMoods+ subscriptions.
To secure the Service, prevent abuse, and fix problems.
To reply to you when you contact us.

We do not use your health information for advertising, marketing profiles, or selling to anyone, and we do not use it to train AI models.

3. Who Can See Your Information

Only you: your medications, doses, side effects, mood check-ins, journal, supplements, reminders, and saved posts.
Care Partners you invite: only the specific medication cards you share with them, until you revoke access.
The community: posts and comments you choose to publish, after they pass moderation. They appear without your name, email, or account ID.
Our service providers (Section 4), only as needed to run the Service.
Authorities, only when the law requires it, or when needed to protect someone’s safety.

4. Service Providers

We use a small number of providers who process data on our behalf and may use it only to provide their service to us:

Supabase: database, authentication, and scheduled tasks (such as reminders). This is where your data is stored.
Vercel: hosts the web app and provides cookie-free traffic statistics.
Stripe: payment processing for MedMoods+ (stripe.com/privacy).
Brevo: sends account emails (sign-up confirmation, password reset) and the reminder emails you turn on.
Google: optional “Continue with Google” sign-in. We receive only your email address.
OpenAI and Anthropic: automated moderation of text you post publicly (Section 5).
RxNorm (U.S. National Library of Medicine): medication name search when you type. Only the search term is sent.
openFDA (U.S. Food and Drug Administration): looks up a medication from the barcode or NDC number found in a scan. Only that product number is sent, never your photo.
jsDelivr: a public content delivery network that supplies the label-reading software to your browser the first time you scan. Like any website, it receives basic technical data such as your IP address, but never your photo or what was read from it.
Cloudflare Turnstile: a privacy-focused “verify you’re human” check on sign-in and sign-up pages that protects accounts from automated attacks (cloudflare.com/privacypolicy).
Your browser’s push service (for example Apple, Google or Mozilla): delivers push notifications if you turn them on. The notification contains only a short reminder message.

5. Content Moderation

Before a post or comment is published, its text is checked by automated tools built on AI models from OpenAI and Anthropic, to catch content that breaks our Terms or suggests someone may be at risk of harm. Only the text you chose to share publicly is sent, never your name, email, or private entries. Content that is flagged may be held for human review.

6. We Do Not Sell or Share Your Data for Advertising

We do not sell your personal information or health data, we do not “share” it for cross-context behavioral advertising, and we do not allow advertisers or data brokers to collect it through the Service. There are no advertising cookies or trackers in MedMoods.

7. Cookies

MedMoods uses cookies only to keep you signed in. We do not use advertising or cross-site tracking cookies. Signing out removes the session cookie from your browser and signs you out on your other devices.

8. How We Protect Your Data

All traffic is encrypted in transit (HTTPS), and data is encrypted at rest by our database provider.
Database access rules make sure each account can read only its own private records.
Community posts do not expose any account identifier.
Access to production systems is limited and protected with strong authentication.

No system is perfectly secure. If we learn of a breach that affects your information, we will notify you and any required authorities as the law requires, and without unreasonable delay.

9. Your Choices and Rights

Access and download: any signed-in user can download a complete copy of their data (JSON file) or a readable copy they can print or save as PDF, from Profile.
Correct: edit your entries, posts, and comments at any time.
Delete: delete individual entries, posts, or comments, or permanently delete your account from Profile. Deleting your account cancels any subscription and removes your data from our active systems right away.
Reminders: turn email or push reminders on or off at any time.
Care Partners: revoke a Care Partner’s access at any time.
Withdraw consent: you can stop using the Service and delete your data at any time.

Depending on where you live (for example California, Washington, Colorado, Connecticut, Virginia or Nevada), you may have additional rights: to know what we collect, to access, correct or delete it, to receive a copy, to opt out of sale or targeted advertising (we don’t do either), to appeal a decision about your request, and to not be discriminated against for using these rights. To make a request, use the tools in the app or email care@medmoods.com. We will respond within the time the law requires (usually 45 days). We may need to confirm the request comes from the account owner.

10. Consumer Health Data

Some state laws, including Washington’s My Health My Data Act and Nevada’s consumer health data law, give extra protection to “consumer health data.” In MedMoods, this includes the medications, doses, side effects, moods, symptoms, reminders and notes you record.

What we collect and where it comes from: the health information listed in Section 1. It comes directly from you, or from a Care Partner’s notes on a card you shared.
Why: only to provide the features you use (Section 2).
Who we share it with: the service providers in Section 4, to operate the Service, and Care Partners you choose. We do not sell consumer health data.
Consent: we collect it because you choose to enter it. You can withdraw consent by deleting the data or your account.
Your rights: see Section 9. Email care@medmoods.com with the subject line “Health data request.”

11. How Long We Keep Data

We keep your data for as long as your account exists. When you delete an entry or your account, it is removed from our active systems immediately. Copies in our providers’ backups are overwritten on their normal schedule (typically within 30 days). Payment records kept by Stripe follow Stripe’s own legal retention requirements. Guest accounts that are never used again may be deleted after 12 months of inactivity.

12. Children

MedMoods is intended for adults 18 and older. We do not knowingly collect information from anyone under 18. If you believe a minor has created an account, contact care@medmoods.com and we will delete it.

13. Where Data Is Processed

MedMoods is operated from the United States, and your information is stored and processed in the United States.

14. Changes to This Policy

If we make material changes, we will update the date above and notify signed-in users in the app or by email before the changes take effect. We will never use health data you already gave us in a new way without asking you first.

15. Contact Us

Questions or requests about privacy: care@medmoods.com.