Privacy Policy

Effective date: April 22, 2026
Last updated: April 22, 2026

1. Who We Are

Pendula (“we,” “our,” or “us”) is the developer and operator of the Pendula mood tracking application (“the App”), available on iOS and Android. If you have questions about this policy or your data, contact us at:

Email: privacy@focusdesignco.com

2. What Data We Collect

When you use the App, we may collect the following categories of information:

Account Information

Email address — collected when you create an account.
Password — your password is never stored in plaintext. A cryptographic key is derived from your password using PBKDF2-SHA256 (100,000 iterations) and used only to protect your encryption key. We do not have access to your password.

Mood Log Data

Each saved mood entry contains:

A mood value (a number from 0–100)
An optional text note you write
A timestamp (the date and time of the entry)
A source identifier (the string "mobile")
A schema version number

This data is considered sensitive personal information because it reflects your emotional state over time. This data is end-to-end encrypted, meaning we cannot read it on our servers.

Technical Data

Device identifiers used by Firebase for authentication session management.
App usage data collected anonymously by Firebase for crash reporting and stability monitoring.

We do not collect location data, contacts, camera or microphone access, or any other sensor data.

3. How We Use Your Data

We use the data described above solely to:

Provide, operate, and sync your mood log across your devices.
Allow you to review your historical mood data within the App.
Maintain the security and integrity of your account.
Diagnose crashes and bugs to improve app stability.

We do not use your mood data for advertising, profiling, or any purpose beyond delivering the App’s core functionality.

4. How Your Data Is Protected

End-to-End Encryption

Your mood log entries are encrypted on your device before being sent to our servers. We use AES-256-GCM authenticated encryption. Your encryption key (Data Encryption Key, or DEK) is derived from your account credentials and stored in your device’s secure enclave (iOS Secure Enclave / Android Keystore via expo-secure-store). We cannot read your mood data. Only you, when authenticated on your device, can decrypt it.

Key Derivation

Your password is used to derive a Key Encryption Key (KEK) via PBKDF2-SHA256 with 100,000 iterations and a random salt. This KEK wraps your DEK before it is stored in Firestore. We never store your password or KEK in plaintext.

Data in Transit

All communication between the App and our servers uses TLS (HTTPS). Firebase enforces encrypted transport for all connections.

Data at Rest

Encrypted mood data is stored in Google Firebase Firestore. Unencrypted data (your email address and wrapped encryption key) is stored under access controls that restrict reads and writes to your authenticated account only.

5. Third-Party Services

The App uses the following third-party services, each with their own privacy policies:

Service	Purpose	Privacy Policy
Google Firebase Authentication	Account sign-in and session management	firebase.google.com/support/privacy
Google Firebase Firestore	Cloud storage for encrypted mood data	firebase.google.com/support/privacy
Google Firebase Crashlytics	Crash reporting and app stability	firebase.google.com/support/privacy

We do not use any advertising SDKs, analytics platforms beyond those listed above, or data brokers.

6. Data Retention

Your mood log data is retained for as long as your account is active.
If you delete your account, all associated data (mood entries, your email address, and your encrypted key material) will be permanently deleted from our systems within 30 days.
Crash logs retained by Firebase Crashlytics are automatically deleted after 90 days per Google’s retention policy.

7. Your Rights

Depending on where you live, you may have the following rights:

Access — request a copy of the data we hold about you.
Correction — request that inaccurate data be corrected.
Deletion — request that your account and all associated data be deleted.
Portability — request your mood log data in a machine-readable format.
Withdrawal of consent — you may stop using the App and request deletion at any time.

To exercise any of these rights, contact us at privacy@focusdesignco.com. We will respond within 30 days.

Note: Because your mood data is end-to-end encrypted and we do not hold the decryption key, we cannot provide a readable copy of your mood entries — only you can decrypt them.

8. Children’s Privacy

The App is not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@focusdesignco.com and we will delete it promptly.

Users in the European Economic Area must be at least 16 years old (or the applicable minimum age in their member state) to create an account.

9. CCPA — California Residents

If you are a California resident, you have the right to:

Know what personal information we collect and how it is used.
Request deletion of your personal information.
Opt out of the sale of your personal information.

We do not sell your personal information to any third party, ever.

To submit a request, email privacy@focusdesignco.com.

If you are located in the European Economic Area (EEA), our legal basis for processing your personal data is:

Contract performance — processing your email and encrypted data to provide the App service you signed up for.
Legitimate interests — crash reporting to maintain app stability, provided it does not override your rights.

Google LLC (Firebase’s operator) acts as a data processor on our behalf and processes data in accordance with Google’s Data Processing Terms. Data may be transferred to and processed in the United States. Google complies with EU-US Data Privacy Framework safeguards.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. If the changes are material, we will notify you via a notice in the App. Continued use of the App after the effective date of a revised policy constitutes your acceptance of the changes.

12. Contact

For privacy questions, data deletion requests, or to exercise your rights: