Privacy Policy

CuddleCloud: Mental Wellness ("the app") is provided by CuddleCloud ("CuddleCloud", "we", "us" or "our").

This policy covers the CuddleCloud app on Android and iPhone, and this website. We are responsible for your information as described here. Where data protection law uses the term, we are the "controller" of your personal information.

If you have a question about this policy or your information, email us at cuddlecloud61@gmail.com or use Help & Support in the app.

We only collect what we need to run the features you use. Many features are optional, and some information is only collected if you turn a feature on or give permission on your phone.

Most of this information comes directly from you, when you type it or log it in the app. Step counts and activity readings come from your phone's sensors, and your location comes from your phone, in both cases only with your permission. Server logs are created automatically when the app connects to our servers.

We do not collect:

• photos, videos or audio
• contacts, files or calendar data
• browsing history
• advertising identifiers
• crash reports or analytics reports

The app has no advertising and no in-app purchases.

Fingerprint and face data never leave your device. When you use fingerprint or face unlock, your phone checks it and only tells the app whether it matched.

We use your information only to:

• Provide the features you use, such as showing your mood history, journal, streaks, assessment results and readings back to you.
• Keep your account secure, including sending verification codes and password resets.
• Personalise suggestions, such as daily tasks based on the goals you choose.
• Send the notifications you have turned on. You can change or turn off each type in the app.
• Moderate chat. Members can report a message, and moderators review reports and may warn or deactivate accounts that break the rules.
• Respond to you when you contact us through Help & Support.

Where data protection laws such as the UK GDPR or the EU GDPR apply, we rely on these legal bases:

• Contract. To create your account and provide the features you ask for, including chat and the notifications you choose.
• Explicit consent. For health information such as moods, assessments, pulse readings, cycle data and activity, which you choose to enter or allow. You can withdraw consent at any time by deleting the information, turning the feature off or deleting your account.
• Consent. For precise location, notifications and access to your phone's sensors, which you allow through your phone's permissions and can turn off in your phone settings.
• Legitimate interests. To keep the app and our servers secure, prevent abuse and moderate chat so that the community stays safe.
• Legal obligation. Where the law requires us to keep or disclose information.

Your moods, assessment answers and scores, pulse readings, cycle data and activity are sensitive. We only process them because you choose to enter them. They are used only to show them back to you, and you can delete them at any time.

We never use health information for advertising or marketing, we never sell it, and we never share it with other members.

• Only you

  Your journal, moods, assessments, pulse readings, cycle data, activity and location are private to you.

• Other members

  Other members can see your name and the messages and reactions you send in chat.

• Moderators

  Moderators can see messages that have been reported.

We use a small number of service providers to run the app. They process information on our behalf, only to provide their service to us.

We require these providers to protect your information with at least the same level of care described in this policy, and to use it only to provide their service to us.

We do not share your information with anyone else, except where the law requires it or where it is needed to protect the safety of our members. Google Play and the Apple App Store handle app downloads and updates under their own privacy policies.

Your information is stored in the United States. If you live outside the United States, this means your information is transferred there. Where the law requires it, we use appropriate safeguards for these transfers. You can contact us to find out more about them.

• Everything travels over an encrypted connection (HTTPS).
• Passwords are stored only as salted hashes, never as plain text.
• You can protect your journal with a PIN, and lock the whole app with fingerprint or face unlock.
• Fingerprint and face data are checked on your device and never leave it.

No method of sending or storing information is completely secure, so we cannot promise absolute security, but these steps protect your information. Please keep your password private, and tell us straight away at cuddlecloud61@gmail.com if you think someone else has used your account.

We keep your information for as long as your account exists.

When you delete your account, everything private to you is deleted immediately and permanently. Messages you sent in chat are erased, and the people you spoke with see them as "Message not available" from "Deleted User".

Server logs that may contain your IP address are kept for a short period for security, then removed.

Depending on where you live, you can ask us to:

• give you access to your information
• correct information that is wrong
• export your information
• delete your information
• stop or limit how we use it (to object to or restrict processing)

Where we rely on your consent, you can withdraw it at any time. You also have the right to complain to your local data protection authority.

Choices in the app and on your phone

• Location, notifications and sensor access are optional, and you can change them in your phone settings at any time.
• Cycle tracking, chat, assessments and the activity screen are optional features.
• You can turn each notification type on or off, set quiet hours and hide message text in previews.
• You can update your name and change your password from Profile.
• You can delete your account, and all of its data, from Profile at any time.

Making a request

To request a copy of your data, or to use any of these rights, email cuddlecloud61@gmail.com. We may need to confirm your identity first.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising, as those terms are used in US state privacy laws.

CuddleCloud is intended for adults. You must be at least 13 to create an account, and if you are under 18, a parent or guardian must agree to the terms on your behalf.

We do not knowingly collect information from children under 13. If you believe a child under 13 has created an account, please contact us at cuddlecloud61@gmail.com and we will delete it.

• This website sets no cookies and uses no analytics or trackers.
• Your light or dark theme choice is saved only in your own browser, using local storage. It is never sent to us.
• The host keeps standard server logs for security.
• To show its typefaces, this website loads fonts from Google Fonts, so your browser requests them from Google's servers. Google's privacy policy applies to those requests.
• Links to Google Play take you to Google's website, where Google's own policies apply.

Because this website does not track you, there is nothing for a "Do Not Track" signal to switch off.

If we change this policy, we will update the date at the top of this page. For significant changes, we will also tell you in the app.

For any question about privacy or your information, you can reach us here: