Privacy Policy

Effective date: September 19, 2026
Last updated: September 19, 2026

1. Who We Are

Pendula (“we,” “our,” or “us”) is the developer and operator of the Pendula mood tracking application (“the App”), available on iOS and Android. If you have questions about this policy or your data, contact us at:

Email: privacy@focusdesignco.com

2. Our Offline-First Commitment

Pendula is built on a local-first foundation. Your mood entries, reflections, and notes are stored on your device and are never transmitted. We do not operate servers that receive, store, or process your mood entries or personal notes.

The only information that ever leaves your device is the anonymous, coarse-grained product analytics described in Section 4 — and never your mood scores or note text.

We believe your emotional data is deeply personal and should remain under your control — always. To that end, we make this commitment:

There will always be a fully functional offline mode in Pendula. If we introduce optional account-based features in the future (such as cloud backup or multi-device sync), the offline, no-account-required experience will remain. Creating an account will always be your choice, never a requirement.

3. Data Storage — Everything Stays on Your Device

All mood entries, notes, achievements, settings, and any other content you create within the App are stored locally on your device using the standard device storage mechanisms provided by iOS and Android (AsyncStorage, SecureStore for sensitive preferences, and the app’s local file storage).

What’s stored on your device

Mood values, timestamps, and notes you enter
App preferences and settings
Achievement and streak progress
Tutorial and onboarding state

All of this data is accessible and manageable by you through the App. Using the built-in “Delete All Data” option in Settings or deleting the App from your device permanently removes all of this data.

CSV export

The App includes an optional CSV export feature that lets you save your mood data to a file on your device. This file is created and stored entirely on-device — we never receive a copy.

4. What Data We Collect & Product Analytics

Your mood entries and notes never leave your device. Specifically:

We do not transmit your mood scores, notes, or journal entries.
We do not collect your name, email address, or contact details.
We do not require you to create an account.
We do not collect location data, contacts, photos, or biometric data.
We do not track you across third-party apps or websites (no IDFA, no advertising identifiers).

Anonymous Product Analytics & Diagnostics

To keep the App stable and improve the experience, Pendula sends anonymous product analytics and diagnostic information to PostHog. This data is limited to:

App interactions: App launches, screen views, and feature interactions — for example, that a mood entry was saved, whether it included a note (true/false), and how many tags it had (a count only, never the tag names).
A coarse mood indicator: Three wide buckets — low, mid, or high — instead of your actual mood score. Your precise mood value (0–100) is never transmitted.
Trend metadata: Structural details about generated insights, such as trend type, sample size, and direction. Mood averages and deltas are never transmitted.
Device & app metadata: Device type, operating system and version, app version and build, and screen dimensions.
A randomly generated app identifier: A pseudonymous ID created on your device so events from the same installation group together. It is not derived from your name, email, or any hardware or advertising identifier.
Optional feedback: If you choose to submit feedback via “Send Feedback” in Settings, your selected category and any text you type are transmitted so we can act on it.

This data is used exclusively to maintain and improve the App. It is not linked to your personal identity, not combined with external datasets, and never used for advertising or tracking.

5. Third-Party Services

We do not integrate third-party advertising networks or data brokers.

The only third-party service integrated into the App is:

PostHog: Privacy-first product analytics used solely to understand app usage trends and technical stability. PostHog does not track users across third-party apps or sell user data. See PostHog’s privacy policy.

6. Future Features & Account Creation

We may introduce optional features in the future that involve account creation — for example, cloud backup, multi-device sync, or shared journals. If and when we do:

These features will be strictly opt-in. You will never be required to create an account to use Pendula’s core mood tracking functionality.
A fully offline, no-account mode will always be available.
We will update this Privacy Policy before any such features launch, clearly describing what data would be transmitted, how it would be protected, and which third-party services (if any) would be involved.
You will be notified of any material changes to this policy via a prominent notice in the App.

7. Data Export & Deletion

Because your mood data lives entirely on your device, you have full control over it:

Export — use the built-in CSV export feature to save a copy of your mood data to your device’s file system.
Deletion — use the built-in “Delete All Data” option in Settings to remove every mood entry stored by the App, or delete the App from your device to permanently remove all data.
No residual copies of your mood data — we never receive your mood entries or notes, so there are no copies of them on our servers to delete. The anonymous analytics events described in Section 4 never contain your mood scores or note text and are retained by PostHog in aggregate; see PostHog’s privacy policy for their retention practices.

8. Children’s Privacy

The App is not directed at children under the age of 13. We do not knowingly collect personal information from children. The App never asks for a name, email address, or age, and the anonymous analytics described in Section 4 are not used to identify any individual — they contain no personal information and no mood scores or note text.

If you are a parent or guardian with questions, contact us at privacy@focusdesignco.com.

9. CCPA — California Residents

Pendula does not collect, receive, or share personal information as that term is defined by the California Consumer Privacy Act (CCPA). We do not collect your name, email address, or contact details, and we never receive your mood entries or notes. The anonymous analytics described in Section 4 are not linked to an identifiable consumer and are not used to build a profile of you.

To be clear: we do not sell personal information to any third party, ever, and we do not share it for cross-context behavioral advertising. Because we hold no personal information, there is nothing for us to sell.

We do not process personal data in order to identify you. We do not operate servers that receive your mood entries or notes, and we do not collect your name, email address, or contact details. You can use every core feature of Pendula without creating an account.

Where the GDPR applies, the anonymous analytics described in Section 4 are processed on the basis of our legitimate interest in operating, securing, and improving the App. They rely on a pseudonymous identifier generated on your device rather than on any data that identifies you. You may contact us at privacy@focusdesignco.com to exercise your rights under the GDPR, and we aim to respond within 30 days.

If we introduce optional account-based features in the future, we will update this policy to describe our processing activities, legal basis, and your rights under GDPR before any such features launch.

11. Changes to This Policy

We may update this Privacy Policy from time to time — particularly if we introduce optional account-based features. When we do, we will update the “Last updated” date at the top of this page. If the changes are material, we will notify you via a prominent notice in the App.

12. Contact

For privacy questions or to share feedback: