Privacy Policy

HotMood is the data controller for the personal information described here (the "we", "us", or "our" in this Policy). This Policy covers information processed through the HotMood app and our backend services. Some features rely on trusted third parties (for example, app stores, push notifications, AI providers, and cloud hosting); those providers handle data only to perform their function for us, as described in the "Service Providers and Third Parties" section. If you contact us, we also process the information you choose to share in that message.

We collect the following, depending on how you use HotMood:

• Account information: your email address and a password. Your password is never stored in plain text — we store it only as a secure cryptographic hash. You may optionally provide a name, your sex/gender identity, and your preferred language.
• Onboarding preferences: the choices you make during onboarding (such as intensity, format, voice, and preferred moment) so we can personalize stories, games, rituals, and recommendations for you.
• Usage and analytics events: aggregated information about how the app is used — for example, which screens you open, which content you start, and which actions you take. We use this to understand engagement and improve the app, not to build an advertising profile about you.
• Optional social login: if you sign in with Apple or Google, we receive a unique identifier and, only if you allow it, your name and email address. With "Sign in with Apple" you can choose to hide your real email.
• Subscription status: whether your account has premium access. This status is managed through the Apple App Store or Google Play (see "Subscriptions and Billing" below).
• Push notification identifier: if you enable notifications, a device identifier is associated with your account (see "Push Notifications" below).
• Content you create or send: text you write to Luma, prompts for generated content, daily check-ins, streak activity, and similar in-app activity, which we process to provide the feature you are using.
• Support communications: if you email us, we keep your message and contact details to respond.

We use your information to:

• Create and maintain your account and keep you signed in.
• Provide and operate HotMood's features — guided sensual audio stories; intimate games (truth or dare, dice, cards, role-play) solo or for two; the Luma AI confidante; daily check-ins and streaks; and mini-courses.
• Personalize content and recommendations based on your onboarding preferences, language, and activity.
• Understand, in an aggregated way, how the app is used so we can fix problems and improve it.
• Send push notifications you have agreed to receive.
• Keep the service secure, prevent abuse, and confirm that users are 18 or older.
• Comply with legal obligations and respond to your requests.

We do not sell your personal information, we do not show third-party ads, and we do not use your intimate activity for advertising.

Where the EU General Data Protection Regulation (GDPR) or Brazil's General Data Protection Law (LGPD) applies, we rely on the following legal bases:

• Performance of a contract: to create your account and provide the features you ask for.
• Consent: for push notifications and for processing data you voluntarily provide that may reveal information about your sex life or sexual orientation (a special/sensitive category under GDPR Art. 9 and LGPD). You can withdraw consent at any time, for example by disabling notifications or deleting your account.
• Legitimate interests: to operate, secure, and improve HotMood and to keep aggregated analytics, balanced against your rights.
• Legal obligation: when we must process data to comply with the law.

Because HotMood is an intimacy app, some of the choices you make may be considered sensitive data. We process this data only to provide the service to you and never to discriminate against you.

We use OneSignal to deliver push notifications, such as reminders for your daily ritual, streaks, and new content. Notifications are off until you opt in. When you enable them, a device identifier (push token) is generated and associated with your account so we can send you relevant messages. You can turn notifications off at any time in your device settings or inside the app, which stops future push messages. If you turn them off, we no longer use the push identifier to message you.

Some HotMood features use artificial intelligence — most notably Luma, your AI confidante, and certain generated content. When you use these features, we send only the text needed to generate a response to our model providers: Anthropic (Claude) for conversational and text generation, OpenAI for image generation, and ElevenLabs for voice/audio generation.

• We do not send your name, email, or other directly identifying personal data along with these requests.
• We do not use your conversations with Luma or your prompts to train AI models, and we instruct our providers not to use this content to train their models.
• AI output can be imperfect or inaccurate. It is provided for entertainment and wellness and is not professional medical, psychological, or legal advice.

These providers process the content only to return a result to you.

Premium features are offered through subscriptions that are sold, billed, and managed by the Apple App Store or Google Play, depending on your device. We receive only your subscription status (for example, whether premium is active). We do not collect or store your credit card number or other payment card details — that information is handled directly by Apple or Google under their own privacy policies. To manage, cancel, or request a refund for a subscription, use the store you purchased it from.

We share information only with providers that help us run HotMood, and only as needed for them to perform their function. We do not sell your data. Our main providers are:

• Apple App Store / Google Play — subscription billing and management.
• OneSignal — push notification delivery (device push identifier).
• Anthropic — AI text and conversation generation for Luma and content.
• OpenAI — AI image generation.
• ElevenLabs — AI voice and audio generation.
• Vercel and Vercel Blob — application hosting and media/file storage.
• Neon (PostgreSQL) — our database.

Each provider acts as a processor (or independent controller, in the case of the app stores) and is bound to handle data only for the agreed purpose. We may also disclose information if required by law, to enforce our Terms, or to protect the rights and safety of our users or others.

HotMood stores a small amount of data locally on your device, such as your session token and your preferences, so the app works smoothly and keeps you signed in. We do not use third-party tracking cookies, we do not run advertising networks or ad SDKs, and we do not sell your personal information. The app is designed to be quiet about what it is — see "Security and Discreet Mode" below.

We keep your personal information only for as long as we need it to provide the service and for the purposes described in this Policy. While your account is active, we retain your account data, preferences, and activity so the app works and stays personalized. When you delete your account, we delete the personal data associated with it (see "Your Rights and Account Deletion"). We may retain a limited amount of information for longer where the law requires it, or in aggregated/anonymized form that no longer identifies you, for analytics.

HotMood and several of our providers operate globally, so your information may be processed in countries other than the one where you live, including the United States. Where we transfer personal data from the European Economic Area, the United Kingdom, or Brazil to other countries, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses or other lawful transfer mechanisms, to protect your information consistent with this Policy and applicable law.

We use technical and organizational measures to protect your information. Data travels over encrypted HTTPS connections, and passwords are stored only as cryptographic hashes. We also offer an optional discreet mode so the app is less conspicuous on your device. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work continuously to protect your data. Please keep your password confidential and contact us if you believe your account has been compromised.

You can access and update much of your information directly in the app. Depending on where you live, you may have rights under the GDPR, the LGPD, and similar laws, including the right to access, correct, delete, restrict or object to certain processing, withdraw consent, and request a portable copy of your data.

Most importantly, you can delete your account at any time from inside the app: go to Profile → Delete account. This permanently removes the personal data associated with your account, subject to any limited retention the law requires. You can also email us to exercise your rights or ask questions. We will not discriminate against you for exercising your privacy rights. If you are in the EEA/UK, you may lodge a complaint with your local data protection authority; if you are in Brazil, you may contact the ANPD.

HotMood is intended exclusively for adults aged 18 and older, and we ask you to confirm your age. The app is not directed to anyone under 18, and we do not knowingly collect personal information from minors. If we learn that we have collected data from someone under 18, we will delete it. If you believe a minor has used HotMood, please contact us so we can take action.

We may update this Privacy Policy from time to time as the app and our practices evolve. When we make material changes, we will update the "last updated" date and, where appropriate, notify you within the app. Your continued use of HotMood after an update means you accept the revised Policy.

If you have questions about this Privacy Policy or how we handle your information, contact us at contato@brasa.app.