Aussi disponible en français — choisissez la langue en haut à droite.

Privacy Policy

Effective date: June 22, 2026. This policy is governed by the laws applicable in Québec, Canada, including the Act respecting the protection of personal information in the private sector (Law 25) and Canada's PIPEDA.

1. Who we are

TapMood ("we", "us") provides a workplace check-in product that lets employees log how they feel and gives employers anonymized, aggregated wellbeing trends. We act as the service provider; your employer is responsible for the personal information of its workforce within their workspace.

2. Person in charge of protection of personal information

In accordance with Law 25, we have designated a person responsible for the protection of personal information. You can reach them at charleselliottroger@gmail.com for any access, rectification, withdrawal-of-consent or complaint request.

3. What we collect

• Account information: name, work email, employee code, company and role assigned by your employer.
• Check-in data: the mood you log (sad / neutral / happy), the moment of day, and skips. This is treated as sensitive personal information.
• Technical data: device type, app version and session information needed to operate and secure the service.

4. Why we use it & your consent

We use this information solely to operate the check-in service, to produce aggregated wellbeing insights for your employer, and to keep the service secure. We rely on your consent and on the legitimate operation of the employment relationship. You may withdraw consent at any time (see Section 8); your individual check-ins are never required to be shared with your employer.

5. What your employer can see

Your employer never sees an individual person's mood. Insights are aggregated, and any group too small to protect anonymity is automatically suppressed before it is shown. Administrators can be scoped so they only see specific projects or job categories.

6. Where your data is processed (outside Québec)

Our infrastructure (Supabase / database, in the United States, region us-east-1) processes and stores data outside Québec. Before relying on this provider we assessed that the information receives protection adequate to Law 25 through contractual and technical safeguards, including encryption in transit and at rest, row-level access controls and least-privilege access.

7. Retention

We keep personal information only as long as necessary for the purposes above or as required by law, and we delete or anonymize it when your employer's account is closed or on a documented retention schedule.

8. Your rights

• Access and obtain a copy of your personal information.
• Request correction of inaccurate information.
• Withdraw your consent and request deletion, subject to legal limits.
• Data portability for the information you provided to us.
• Lodge a complaint with the Commission d'accès à l'information du Québec (CAI).

To exercise any right, email charleselliottroger@gmail.com. We respond within the delays required by law.

9. Security

We protect personal information with encryption, strict row-level security, authenticated and least-privilege access, audit logging of privileged actions, and ongoing security review. No method is perfectly secure, but we work continuously to safeguard your data and will notify affected parties and the CAI of any confidentiality incident presenting a risk of serious injury, as required by law.

10. Cookies

We use only the cookies strictly necessary to keep you signed in and to remember your language and theme. We do not use advertising or cross-site tracking cookies.

11. Children

The service is intended for the workplace and is not directed to minors under 14.

12. Changes

We may update this policy. Material changes will be posted here with a new effective date.

13. Contact

Questions or requests: charleselliottroger@gmail.com.