MOODOOR The following jurisdictions are listed in no particular order.
United States
This Appendix supplements the General Edition for users located in the United States. If mandatory local law provides stronger rights or imposes additional requirements, those requirements prevail. We extend the core rights below to all U.S. users regardless of state.
Right to know / access — You may request the categories and specific pieces of personal information we have collected, the sources, purposes, and the categories of recipients.
Right to correct — You may request correction of inaccurate personal information.
Right to delete — You may request deletion of your personal information, subject to legal exceptions.
Right to portability — You may request a copy of your information in a portable format.
Right to opt out — You may opt out of any sale, “sharing,” targeted advertising, or profiling with legal effects. (As noted in Section 3, we do not engage in these activities, but you may still exercise the right.)
Right to limit sensitive data — You may direct us to limit the use of your sensitive personal information / consumer health data to what is necessary to provide the Services.
Right to withdraw consent — You may withdraw consent for processing that is based on consent.
Right to appeal — If we deny your request, you may appeal. We will respond to appeals within the timeframe required by your state's law (typically 45–60 days).
Right to non-discrimination — We will not discriminate or retaliate against you for exercising any of these rights.
A. State rights
If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have the right to know/access, correct, delete, portability, opt out of sale, sharing, targeted advertising or certain profiling, limit sensitive data, withdraw consent, appeal and obtain non-discrimination.
If you wish to exercise these rights, please contact us at support@moodoor.ai, and we will verify your identity before providing the relevant services; extensions and identity verification may apply.
We respond to verifiable consumer requests within 45 days (extendable by an additional 45 days where permitted) and acknowledge receipt within 10 business days where required. We honor opt-out preference signals such as Global Privacy Control (GPC) where applicable. You may use an authorized agent to submit requests, subject to verification. We do not knowingly process the sensitive data of consumers under 16 for sale or sharing without opt-in consent.
B. Sensitive information and consumer health data
Mental and emotional content may be sensitive personal information or consumer health data under state law. We do not sell or share it for cross-context behavioral advertising, and we do not use it for targeted advertising. Where required, we provide consent, a right to limit sensitive-data processing, opt-out controls, Global Privacy Control recognition, and appeal procedures.
C. HIPAA and clinical boundaries
Moodoor is not automatically a HIPAA-covered entity merely because it is a mental-wellness app. HIPAA may apply if Moodoor acts as or for a covered entity or handles PHI in a regulated arrangement. If the Service changes to clinical care, insurance billing, provider workflows or regulated digital therapeutics, we will reassess HIPAA, BAA, state confidentiality and medical-device requirements.
D. Local official references
California Attorney General – CCPA: https://oag.ca.gov/privacy/ccpa
Washington My Health My Data Act: https://app.leg.wa.gov/RCW/default.aspx?cite=19.373&full=true
HHS Health Apps Developer Resources: https://www.hhs.gov/hipaa/for-professionals/special-topics/health-apps/index.html
FTC Health Breach Notification Rule: https://www.ftc.gov/legal-library/browse/rules/health-breach-notification-rule
E. Crisis Helplines
Suicide & Crisis Lifeline: 988
Crisis Text Line:Text HOME to 741741
Back to countries and regionsCanada
A. Meaningful consent and sensitive information
Mental and emotional content is treated as sensitive personal information. We seek meaningful, informed consent for collection, use and disclosure, limit collection to identified purposes, and request express consent before processing sensitive content where required. Consent can be withdrawn subject to legal, security or contractual limits.
B. Access, correction and deletion
Canadian users may request access to and correction of personal information, and may request deletion where applicable. We generally respond to PIPEDA access requests within 30 days, subject to lawful extensions and exceptions. Requests may be submitted to support@moodoor.ai; identity verification may be required.
C. Provincial laws
PIPEDA applies where applicable, together with provincial private-sector and health-privacy laws. Quebec users may have additional rights under Law 25, including portability and information about certain automated decisions. British Columbia and Alberta residents may be subject to provincial private-sector laws. Where a provincial law applies, Moodoor will follow the applicable higher or more specific requirement.
D. Cross-border processing
Information may be processed or stored outside Canada, including through cloud, payment, analytics, SMS and support providers. We remain accountable for information transferred to service providers, use contractual and technical safeguards, and provide meaningful notice of cross-border processing. Users may contact us for additional information about categories of recipients and transfer safeguards.
E. Breach safeguards
We maintain safeguards appropriate to the sensitivity of mental and emotional content. If a breach creates a real risk of significant harm, we will assess, record and report it to the Office of the Privacy Commissioner of Canada and notify affected individuals as required by PIPEDA or applicable provincial law. For urgent safety concerns, disclosures are limited to what lawfully permits and what is necessary.
F. Local official references
Regulatory Authority (Office of the Privacy Commissioner of Canada - OPC): priv.gc.ca
OPC Complaints Portal: priv.gc.ca/en/report-a-concern/file-a-formal-privacy-complaint/
Primary Federal Privacy Law (PIPEDA Legislation): laws-lois.justice.gc.ca/eng/acts/P-8.6/
Office of the Privacy Commissioner of Canada – PIPEDA: https://www.priv.gc.ca/en/privacy-topics/privacy-laws-in-canada/the-personal-information-protection-and-electronic-documents-act-pipeda/
Quebec Law 25 / CAI: https://www.cai.gouv.qc.ca/
British Columbia OIPC: https://www.oipc.bc.ca/
Alberta OIPC: https://oipc.ab.ca/
G. Crisis Helpline
Suicide & Crisis Lifeline: 988
Crisis Text Line:Text HOME to 741741 or 686868
Back to countries and regionsAustralia
A. Processing of Sensitive Information
Your inputs regarding emotional states and psychological experiences constitute "health information" and "sensitive information" as defined under the APPs. We collect and process this information solely with your explicit consent.
B. Supplementary Data Rights
Exceptions to Anonymity and Pseudonymity: To ensure secure AI conversational interactions, we require you to bind a valid email address or mobile phone number. However, you are free to choose any display nickname within the application.
Direct Marketing & Profiling Opt-Out: You have the express right to opt out of direct marketing and profiling activities.
C. Local official references
Regulatory Authority (Office of the Australian Information Commissioner - OAIC): oaic.gov.au
OAIC Privacy Complaints Portal: oaic.gov.au/privacy/privacy-complaints/
Primary Privacy Law (Privacy Act 1988 & APPs Legislation): legislation.gov.au/C2004A03712
D. Crisis Helplines
Lifeline Australia: 13 11 14
Kids Helpline (Children & Young People): 1800 55 1800
Back to countries and regionsNew Zealand
A. Collection Principles of Health and Emotional Data
Although Moodoor does not provide medical services, the emotional and psychological experience data you enter will be protected at the highest level in reference to the Health Information Privacy Code (HIPC) standards, and will be strictly used solely to deliver interactive services to you.
B. Overseas Data Transfer
For personal information transferred outside of New Zealand, we will ensure that the overseas recipient is bound by legal or contractual obligations offering a level of protection comparable to the Information Privacy Principles (IPPs) under the New Zealand Privacy Act.
C. Data Security Incident Notification
In the event of a privacy breach that is likely to cause serious harm, we will promptly notify the Office of the Privacy Commissioner (OPC) of New Zealand and affected users in accordance with applicable laws.
D. Local official references
Relevant Laws & Codes:
Privacy Act 2020: https://legislation.govt.nz/act/public/2020/0031/latest/LMS23223.html
Health Information Privacy Code 2020 (HIPC 2020): https://privacy.org.nz/privacy-act-2020/codes-of-practice/hipc2020/
Regulatory Authority & Complaints:
Office of the Privacy Commissioner (OPC) Official Website: https://privacy.org.nz
OPC Complaints Portal: https://privacy.org.nz/your-rights/making-a-complaint/
E. Crisis Helplines
Lifeline: 0800 543 354
Back to countries and regionsSingapore
A. Consent and Withdrawal of Consent
You have the right to withdraw your consent for the processing of your personal data at any time by sending an email to support@moodoor.ai.
B. Age Restrictions
In Singapore, children under 13 years of age are prohibited from using this Service. Minors aged 13 to 18 years must obtain consent from a parent or legal guardian prior to use.
C. Local official references
Regulatory Authority & Complaints:
Personal Data Protection Commission (PDPC) Official Website: pdpc.gov.sg
PDPC Complaints & Reporting Portal: pdpc.gov.sg/complaints-and-reviews
Primary Legislation:
Personal Data Protection Act 2012 (PDPA 2012): sso.agc.gov.sg/Act/PDPA2012
D. Crisis Helplines
Samaritans of Singapore (SOS): 1-767 (24/7)
Institute of Mental Health (IMH) Mental Health Helpline: 6389 2222
Back to countries and regionsHKSAR
A. Sensitive Personal Data and Direct Marketing
Prohibition of Direct Marketing Without Consent
Moodoor strictly complies with the provisions of Part VIA of the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486) ("PDPO"). We will never use your personal data (including your email address, mobile phone number, or device identifiers) to send you any direct marketing or promotional communications via email, Short Message Service (SMS), or push notifications without first obtaining your explicit, prior opt-in consent.
Right to Withdraw Consent At Any Time
You have the statutory right to withdraw your consent and opt out of receiving direct marketing communications at any time, completely free of charge. You may adjust your preferences at your convenience through Settings → General → Notification in the app or by email at support@moodoor.ai.
B. Cross-Border Data Transfer
Your personal data will be transferred to and stored on AWS international servers. We ensure that any overseas recipient provides a level of data protection comparable to the standards required under the PDPO.
C. Age Restrictions
If you are under 18 years of age, you must use this Service only after a parent or legal guardian has reviewed and agreed to this Policy.
D. Local official references
Regulatory Authority & Complaints
Privacy Commissioner for Personal Data (PCPD) - Official Website: pcpd.org.hk
PCPD Complaints Portal: pcpd.org.hk/english/complaints/how_to_complain/how_to_complain.html
Primary Legislation
Personal Data (Privacy) Ordinance (Cap. 486) (PDPO): elegislation.gov.hk/hk/cap486
Six Data Protection Principles (DPPs Overview): pcpd.org.hk/english/data_privacy_law/6_data_protection_principles/dpp.html
E. Crisis Helplines
The Samaritans (Suicide Prevention): 2389 2222
Hospital Authority Mental Health Direct: 2466 7350
Back to countries and regionsBahamas
A. Data Processing Principles
We strictly adhere to the Bahamas Data Protection Act, ensuring that your sensitive emotional data is collected lawfully and fairly, and is not used beyond the core functional purposes of this product.
B. Data Access and Correction Requests
Users in The Bahamas may submit a data access request by emailing support@moodoor.ai. We will respond within 40 days of receipt.
C. Local official references
Regulatory Authority & Complaints
Office of the Data Protection Commissioner - Official Portal: bahamas.gov.bs/dataprotection
Data Protection Complaints & Enquiries: dataprotection@bahamas.gov.bs
Primary Legislation
Data Protection (Privacy of Personal Information) Act, 2003: laws.bahamas.gov.bs/cms/images/LEGISLATION/PRINCIPAL/2003/2003-0003/DataProtectionPrivacyofPersonalInformationAct_1.pdf
D. Crisis Helplines
The Crisis Centre Line: (242) 328-8552
Back to countries and regions