This product is an AI-powered lifestyle and self-development service designed to support emotional well-being, self-reflection, and personal growth. It does not provide mental health diagnosis, counseling, psychotherapy, medical advice, crisis intervention, or any healthcare services.

If you are experiencing significant emotional distress, a mental health emergency, or concerns that affect your safety or daily functioning, please contact a qualified healthcare professional, emergency services, or an appropriate crisis support resource immediately, call or text 988 (Suicide & Crisis Lifeline, available in the U.S. and Canada) or dial 911. Moodoor cannot contact emergency services on your behalf.

This Privacy Policy (“Policy”) explains how Moodoor (operated by PURPLE SOUL INTERNATIONAL BUSINESS LTD and its affiliates, “Moodoor,” “we,” “us,” or “our”) collects, uses, stores, shares, and protects your personal information when you use the Moodoor application and related services (the “Services”).

This North America Edition applies to individuals located in the United States and Canada.

We understand that information about your mental and emotional life is highly sensitive. We follow the principle of data minimization, collect only what is reasonably necessary, and apply appropriate safeguards to protect your information.

This Policy applies to all current and future features of the Services, including:

• AI-based conversation, interaction, guidance, and feedback features;
• psychological self-help, emotional support, and self-exploration tools;
• related account management, content records, subscriptions and payments, notifications, user feedback, technical support, and other supporting functions.

If you access the Services through a third-party platform, device, or embedded integration that does not have its own separate privacy notice, this Policy applies.

Please read this Policy carefully before using the Services. By creating an account, clicking to confirm, or continuing to use the Services, you acknowledge that you have read and understood this Policy.

Where applicable law requires opt-in consent (for example, before we process sensitive information or use your content to improve our models), we will obtain your express consent first. If you do not agree with this Policy, please stop using the Services.

You can reach our team at any time through the in-app feedback channel or by email at support@moodoor.ai. See Section 12 (Contact Us) for the contact point for each jurisdiction.

This summary highlights key points. Each item links to the full section below.

What information do we collect? We process personal information based on how you interact with us, the choices you make, and the features you use. See Information We Collect and How We Use It.

Do we process sensitive information? Yes. Your mental and emotional content is treated as sensitive personal information and given heightened protection. We process it only with the protections and, where required, the consent described in Sensitive Personal Information.

Do we sell or share your information? No. We do not sell or rent your personal information, and we do not “share” it for cross-context behavioral advertising. We never share your mental-health content with insurers, employers, data brokers, or advertising platforms. See How We Share Information; No Sale or Targeted Advertising.

Do we use your data to train AI? We do not train AI models on your identifiable conversations. Where we use data to improve our systems, we de-identify or aggregate it first, and you can opt out. See Model Training and Algorithm Improvement

What are your rights? Depending on where you live, you may have rights to access, correct, delete, port, opt out, and appeal. See U.S. State Privacy Disclosures and Canada (PIPEDA and Provincial Law) and Do United States Residents Have Specific Privacy Rights?

How do we protect your information? We use encryption, access controls, and other safeguards. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security. See Storage, International Transfers, and Security.

“Personal information” includes information you actively provide and information generated or lawfully obtained automatically to deliver features. We process personal information only to the extent necessary for clear, reasonable purposes. If you decline to provide certain information, you may be unable to use the corresponding feature, but you can still use other features that do not depend on it.

1.1 Registration and Login
To create, identify, and manage your account, we collect email and verification code you provide, or third-party account identifiers you choose to use (e.g., Apple ID, Google). This is used for authentication, account security, and credential recovery.

1.2 AI Conversation and Interaction
When you use AI conversation, psychological interaction, or tools features, we process the content you submit during the interaction (text, voice, images and etc.) and necessary session metadata (time, frequency, conversation records and etc.). This is used to generate responses and maintain your records.

Currently, your original input (such as conversation text and voice recordings) is processed exclusively using our company’s own computing infrastructure and is not shared with any external third‑party AI providers. All data generated by you in the app is stored on our own secure, private servers. Depending on system load and request routing, audio output may be generated using third‑party TTS services.

1.3 Self-Help and Self-Exploration Tools
When you use self-help, emotional-support, or self-exploration features, we process content you input, upload, or generate, such as:

• Images, drawings, or structured expressive content;
• Text entries, descriptions, or reflections;
• Usage duration, frequency, or preferences related to the feature.

This information is used only to provide the feature, generate feedback, compile usage statistics, and perform necessary personalization. It is not used for purposes unrelated to mental wellness.

1.4 Device and Log Information
To keep the product running, improve stability, and troubleshoot, we collect device models, operating system version, app version, network environment, crash logs, and error reports when the app launches or an error occurs. This is used for maintenance and performance optimization.

1.5 Payment and Transaction Information
When you purchase paid services, we collect transaction information such as order number, payment time, amount, payment method, and transaction status, used for order processing, settlement, invoicing, and support. Payment is processed independently by third-party payment institutions (e.g., Apple App Store, Google Play, Stripe). We do not store your full bank card number or payment password.

1.6 Cookies and Similar Technologies
We use cookies, SDKs, and similar technologies to maintain login state, protect account security, improve performance, and perform analytics, only to the extent necessary for the corresponding function. We do not use these technologies for cross-context behavioral advertising.

2.1 Heightened Protection
When you use AI conversation, psychological support, or self-help features, you may input, record, or generate content involving your emotions, mental state, personal experiences, and family or interpersonal relationships. Under various U.S. state laws this may be treated as “sensitive personal information” or “consumer health data” (including under the California Consumer Privacy Act as amended by the CPRA, the Washington My Health My Data Act, Nevada SB 370, and comparable laws), and under Canadian privacy law it is treated as sensitive information requiring express consent.

We treat this content as sensitive and protect it through the principle of data minimization, encrypted storage, access controls, and role-based permissions. We will not disclose or share this information with any third party, except in the limited circumstances described in Section 2.2, and we will not use it beyond what is necessary to provide the Services to you.

2.2 Limited Exceptions to Protection
Please understand that, due to legal requirements or significant safety concerns, the protection principle is not absolute. In the following situations, and consistent with applicable law and the principle of data minimization, we may process or disclose relevant information to the extent necessary:

• You clearly express a serious risk of self-harm or suicide;
• You clearly indicate you may cause serious harm to another person, or a serious public-safety risk exists;
• A minor is suffering or facing serious harm;
• Disclosure is lawfully required by law, a court, or an authorized government or regulatory body.

Moodoor is not a crisis service and is not a mandated reporter. When you indicate a risk of self-harm, Moodoor will encourage you to contact crisis resources (such as 988) and may surface those resources to you, but it does not automatically contact emergency services, your contacts, or authorities on your behalf, except where we are legally compelled or where disclosure is necessary to protect against an imminent threat to life as permitted by law.

2.3 Feature Boundaries and Risk Notice
The AI conversation, psychological support, and related tools are designed to help you build self-awareness, process emotions, and find support. They do not constitute medical care or diagnosis. You are interacting with AI software, not a licensed professional. AI output may be inaccurate or incomplete and should not be relied on as professional advice. In certain situations the system may suggest that you seek real-world support (such as contacting trusted people or support organizations), but the Services cannot replace professional or in-person care. If you are experiencing persistent, serious, or urgent distress, please promptly contact trusted in-person support resources or your local emergency line.

We do not sell or rent your personal information to unrelated third parties, and we do not “share” it for cross-context behavioral or targeted advertising as those terms are defined under U.S. state privacy laws. We never disclose your mental-health content to insurers, employers, data brokers, or advertising platforms. We disclose information only in the following circumstances and only to the extent necessary:

3.1 Service Providers
We share necessary information with partners only as needed to deliver features. For example:

• Order information with payment institutions to complete transactions;
• Device information and logs with cloud-service providers for storage and operation;
• Device identifiers with push-notification services to deliver notifications.

In each case, we enter into a data-protection agreement (or, under U.S. law, a service-provider/processor contract) requiring the partner to process information only on our instructions, in accordance with this Policy and applicable law.

3.2 Processing on Our Behalf
We may engage third parties to process information on our behalf — for example, customer-service support, technical support, and analytics. We supervise their processing and require appropriate safeguards.

3.3 Business Transfers
If we are involved in a merger, acquisition, financing, reorganization, or insolvency, personal information and data may be transferred as part of that transaction.

3.4 Legal Disclosure
We disclose personal information publicly only: (a) with your express consent; or (b) where required by law or by a lawful request from an administrative or judicial authority.

3.5 Third-Party SDKs and Technical Components
Currently, your original input (such as conversation text and voice recordings) is processed exclusively using our own computing infrastructure and is not shared with any external third‑party AI providers. All data generated by you in the app is stored on our own secure and private servers. However, depending on system load and request routing, audio output may be generated using third‑party text-to-speech (TTS) services.

To deliver product features, improve stability, and protect security, the current version of our product also integrates certain third‑party SDKs, APIs, and other technical components. These providers only process data that is directly necessary to perform their specific functions and only to the extent required. The main categories include:

• Payment components, used to process subscriptions, paid features, and other transactions.
• Third‑party login components, used to enable convenient registration and sign‑in.
• Push‑notification components, used to deliver product-related notifications and reminders.
• Cloud service and storage components (for example, AWS), used to store content you generate or upload (such as records, drawings, or reports).
• Analytics and stability components, used to collect essential operational logs and error information to help us improve performance and reliability.

We maintain an up-to-date, itemized list of the third‑party components we use, including the types of data they receive and the purposes for which they process that data. This list is available within the app and is updated when we add, remove, or change service providers.

To deliver and improve the Services, we may perform statistical analysis and technical optimization on data generated through your use, to improve system performance, stability, and overall experience. This processing always follows the principles of lawfulness, necessity, and data minimization.

4.1 Data Handling Principles
For algorithm improvement, model adjustment, or related research, we first de-identify, anonymize, or aggregate the data so that it cannot directly or indirectly identify a specific individual. Except as required by law or with your express authorization, we do not use your identifiable personal information for model training, and we do not train on raw data that has not been de-identified or anonymized. We do not use your identifiable mental-health conversations to train AI models.

4.2 Scope of Use
After processing, the data is used only, within necessary limits, to:

• Improve the stability, accuracy, and safety of our AI systems;
• Improve the overall experience of AI conversation, psychological support, and related features;
• Conduct statistical analysis and technical research on product features and service effectiveness.

We do not use this data for commercial purposes unrelated to mental wellness, nor for personalized advertising or profiling-based marketing.

4.3 Changes to Data Use
If there is a material change in the purpose, method, or scope of model training or data use that may substantially affect your rights, we will explain it through an updated Policy or in-app notice and, where required by law, obtain your express consent.

We respect and protect your rights over your personal information. Subject to applicable law, you have the following rights while using the Services:

• Access and correction — Access your information and request correction of errors. You can edit much of it directly in the “Profile” page.
• Account closure&Deletion — You may request deletion of your personal information or close your account. After you do so, all your data will be permanently deleted.

To exercise these rights, use the contact methods in Section 12. To protect your security, we may need to verify your identity before responding, and we will reply within a reasonable period and within statutory deadlines.

Residents of California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states with comprehensive consumer-privacy laws, as well as residents of Washington and Nevada under their consumer-health data laws, have specific rights.

If you wish to exercise these rights, please contact us at support@moodoor.ai, and we will verify your identity before providing the relevant services. We extend the core rights below to all U.S. users regardless of state.

• Right to know / access — You may request the categories and specific pieces of personal information we have collected, the sources, purposes, and the categories of recipients.
• Right to correct — You may request correction of inaccurate personal information.
• Right to delete — You may request deletion of your personal information, subject to legal exceptions.
• Right to portability — You may request a copy of your information in a portable format.
• Right to opt out — You may opt out of any sale, “sharing,” targeted advertising, or profiling with legal effects. (As noted in Section 3, we do not engage in these activities, but you may still exercisethe right.)
• Right to limit sensitive data — You may direct us to limit the use of your sensitive personal information / consumer health data to what is necessary to provide the Services.
• Right to withdraw consent — You may withdraw consent for processing that is based on consent.
• Right to appeal — If we deny your request, you may appeal. We will respond to appeals within the timeframe required by your state's law (typically 45–60 days).
• Right to non-discrimination — We will not discriminate or retaliate against you for exercising any of these rights.

We respond to verifiable consumer requests within 45 days (extendable by an additional 45 days where permitted) and acknowledge receipt within 10 business days where required. We honor opt-out preference signals such as Global Privacy Control (GPC) where applicable. You may use an authorized agent to submit requests, subject to verification. We do not knowingly process the sensitive data of consumers under 16 for sale or sharing without opt-in consent.

Do Not Sell or Share My Personal Information. Moodoor does not sell or share your personal information. If this practice ever changes, we will provide a clear opt-out mechanism in the app and onour website before doing so.

For users in Canada, we handle personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial laws (including Quebec's Law 25, British Columbia's PIPA, and Alberta's PIPA). We obtain meaningful consent for collection, use, and disclosure; limit collection to identified purposes; and obtain express consent before collecting or using sensitive information such as mental-health content.

Canadian users may request access to and correction of their personal information, withdraw consent (subject to legal or contractual limits), and request deletion.

If you wish to exercise these rights, please contact us at support@moodoor.ai, and we will verify your identity before providing the relevant services. We respond to access requests within 30 days as required by PIPEDA. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada or your provincial regulator (for Quebec residents, the Commission d'accès à l'information). Quebec residents also have rights regarding automated decision-making and data portability under Law 25.

If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have the right to request access to and receive details about the personal information we maintain about you and how we have processed it, correct inaccuracies, get a copy of, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law. More information is provided below.

9.1 Regional Storage and Cross-Border Transfers
To support compliance for global users, we apply a regional data-storage strategy:

North American users (primarily United States and Canada): Your data is stored on highly secure overseas servers (AWS).

Where data is transferred internationally, we rely on appropriate safeguards and contractual protections, and we remain responsible for protecting your information consistent with this Policy and applicable law.

9.2 Retention Period
We retain personal information only for the shortest time necessary to achieve the purposes in this Policy. Where no specific period is required, we retain conversation and self-help content for as long as your account remains active, and we delete or anonymize it after account closure. When you close your account or request deletion, we delete or anonymize your information promptly after verifying your identity, except where retention is required by law.

9.3 Security Measures
We use industry-standard safeguards to protect against unauthorized access, disclosure, use, alteration, damage, or loss, including data encryption, role-based access controls, logging and audit, security testing, and incident-response mechanisms. No method of internet transmission or electronic storage is 100% secure, so we cannot guarantee absolute security.

9.4 Breach Notification
If a security incident such as a leak, damage, or loss of personal information occurs, we will activate our incident-response plan, take remedial measures, and notify you and the relevant regulators as required by applicable law (including U.S. state breach-notification laws and, for Canada, PIPEDA's breach-of-safeguards reporting obligations), describing the situation, likely impact, and the measures taken or to be taken.

The Services are intended for adults. The Services are not directed to children, and you must be at least 18 years old to create an account in the United States and Canada. We do not knowingly collect personal information from children under 13 (in compliance with the U.S. Children's Online Privacy Protection Act, COPPA) or from minors under the applicable age of majority.

We take user privacy very seriously. We do not require you to provide your age, and any age you choose to provide may not reflect your actual age. Because of this, we may not be able to reliably verify your true age.

To help protect minors and comply with applicable laws, we may use automated systems to review your interactions with the APP and make an assessment of whether you meet our minimum age requirements. If we reasonably determine that you do not meet these requirements, we may limit or terminate your access to the APP. If you believe we have made a mistake in our assessment, please contact us at support@moodoor.ai and we will review the matter and restore your access where appropriate.

If you believe a minor has provided us personal information, please contact us using Section 12 so we can investigate and take appropriate action.

To enable certain features, we request necessary device permissions only when you actively use the related feature. We do not enable any permission by default without your consent, and you can manage or revoke permissions in your device settings at any time. Turning off a permission may disable the related feature but does not affect processing already lawfully carried out. Permissions we may request:

• Microphone — for voice conversation, voice input, or related voice features.
• Camera — for taking or uploading photos, or features that use image input.
• Photos / Storage — to select, upload, save, or export content you generate or use (drawings,reports).
• Notifications — to send reminders or notifications related to the product (meditation practice, journaling reminders, content-generation status).

12.1 Updates
We may revise this Policy from time to time to reflect changes in our Services, law, or regulatory policy. If we make updates, we will notify you through in-app pop-ups, push notifications, or a prominent notice on our website or in the app. For material changes (such as changes to processing purposes, methods, the categories of personal information, or how rights are protected), we will give you prominent advance notice before the change takes effect and, where necessary, obtain your express consent. If you continue to use the Services, you accept the revised Policy; if you disagree, you may stop using the Services and close your account.

12.2 Contact Us
If you have questions or suggestions about this Policy or the Services, or wish to exercise your rights, you can contact us through the in-app feedback channel or at:

• Email: support@moodoor.ai
• Operator: PURPLE SOUL INTERNATIONAL BUSINESS LTD

We will verify your request and respond within a reasonable period and within applicable statutory deadlines. If you are not satisfied with our response, you may complain to the relevant regulator — in the United States, your state Attorney General or the Federal Trade Commission; in Canada, the Office of the Privacy Commissioner of Canada or your provincial regulator.