Privacy Policy
The short version: this app does not collect any personal information. Everything you write — moods, diary entries, photos — stays on your own device and is never uploaded, synced, or shared to any server.
1. What we collect: nothing
“Panda Mood Diary” has no account system, no sign-up, no analytics, no ads, and no in-app purchases. We do not collect, record, or transmit:
- Your name, email, phone number, or any contact details;
- Your mood records, diary text, and any photos you attach;
- Location, contacts, clipboard contents, or call logs;
- Device identifiers, advertising identifiers (IDFA), or usage analytics.
2. Permissions, and why we ask for them
The app requests the following system permissions only when you use the related feature. All of them are used entirely on your device, and you can revoke any of them in iOS Settings at any time.
Photo library
Used when you pick a photo to attach to a diary entry. The app reads only the images you select — it never scans the rest of your library — and it never writes photos back to your system library. The original file stays in your Photos app; whether to delete it is entirely your choice.
Camera
Used when you take a photo while writing a diary entry. Captured photos are saved only in the app's own local storage and do not appear in your system photo library.
Notifications
Used only if you turn on “Daily reminder,” to nudge you to log a moment at your chosen time. The notification contains a neutral prompt and never includes any of your diary content. Turning the reminder off — or uninstalling the app — stops it entirely.
3. How your data is stored and protected
- Your mood entries, diary text, reflection answers, and photos are stored in a local database and local files inside the iOS app sandbox. Nothing is transmitted over the network.
- You can enable the Privacy Lock: choose a 4–6 digit PIN, and the app asks for it every time it opens. Your PIN is stored as a salted, repeatedly iterated hash — the app never keeps it in plain text.
- The Privacy Lock has no recovery path whatsoever. There is no server, and therefore no “reset your password” channel. If you forget your PIN, reinstalling the app is the only option, and your data goes with it. That is the price of “your data really belongs to you” — and the proof of it.
- Insights such as “Your patterns” are computed entirely on your device. No data is uploaded.
- Uninstalling the app deletes all local data. No copy exists anywhere else.
4. Third parties
The app integrates no third-party analytics, advertising, crash-reporting, or push-notification SDKs. Its only system-level interactions are Apple's own notification system and the standard iOS photo/camera interfaces, all handled by iOS; your data never passes through any server of ours. If you have enabled sharing diagnostic data with Apple at the system level, see the Apple Privacy Policy.
5. Children
This is a diary app for everyone; it is not directed at children and collects no information from anyone of any age. If a minor uses it, please do so under a parent's or guardian's guidance.
6. Changes to this policy
If this policy changes materially, we will update this page and change the “Last updated” date. Because the app collects no contact details, we cannot notify anyone individually — please treat the latest version of this page as authoritative.
7. Contact us
For any question about this policy or the app's privacy practices, reach us through the channels on the support page.