PRIVACY POLICY

Mood Pop, Inc.

Last Updated: August 21, 2026 | Effective Date: August 21, 2026

Opening and Scope

This Privacy Policy explains how Mood Pop, Inc. (“Mood Pop,” “we,” “us,” or “our”) collects, uses, discloses, retains, and protects personal information through Mood Pop’s websites and digital experiences that link to this Policy, including www.cynthiaoccelli.com, www.moodpop.com, www.theseedbycynthiaoccelli.com, www.theseedbycynthiaoccelli.app, www.resurrectingvenus.com, The Seed by Cynthia Occelli mobile application (the “App”), subscriptions, communications, support, events, and community features (collectively, the “Services”). It does not govern third-party app stores, payment processors, social networks, or external sites.

1. Information We Collect

We collect information you provide, information generated through your use of the Services, and information received from service providers or platforms. Depending on the features used, this may include: (a) identifiers and contact information; (b) credentials, profile settings, preferences, saved content, subscription status, and consent records; (c) purchase, renewal, refund, chargeback, and tax records, while full payment-card data is handled by processors; (d) support communications, survey and questionnaire responses; (e) reviews, testimonials, comments, community posts, journal or reflection text, mood entries, coaching communications, meditation or session history, and other User Content; (f) inferences or scores generated from interactions, where used; (g) IP address, browser and device information, identifiers, app version, language, timestamps, pages or features used, crash reports, diagnostic logs, and security events; (h) cookie, pixel, local-storage, API, and SDK data; and (i) general location derived from IP address and precise location only when a disclosed feature requires it and you grant device permission. We also receive subscription and transaction status from app stores and processors and campaign or audience information from analytics or advertising providers. Do not submit information about another person unless authorized.

2. Consumer Health Data

Mood entries, reflection or journal content, coaching intake and communications, meditation history, emotional-state community posts, and related inferences may constitute consumer health data under applicable law. Mood Pop collects or shares consumer health data only as necessary to provide a consumer-requested feature or with consent where required; obtains separate authorization before any sale where required; binds processors to appropriate restrictions; and provides access, withdrawal, and deletion mechanisms as required. Mood Pop does not use geofencing around health-care facilities to identify or track consumers or collect consumer health data.

3. How We Use Personal Information

We use personal information to: provide, authenticate, personalize, and support the Services; process purchases and subscriptions; save settings and progress; deliver reminders and requested communications; respond to support matters; moderate community areas; detect fraud and security incidents; debug and improve performance; conduct internal analytics and research; measure marketing; comply with law; and establish or defend claims. We use sensitive or consumer health data only for disclosed feature purposes, safety and security, legal compliance, or with consent where required. If AI tools process user inputs, we use them only for disclosed purposes under vendor terms that prohibit unauthorized retention and model training. We do not make decisions producing legal or similarly significant effects based solely on automated processing unless separately disclosed. For EEA or UK users, if offered, the legal basis will be identified by purpose rather than stated generically.

4. How We Disclose Personal Information

We disclose personal information to service providers and contractors supporting hosting, cloud storage, app infrastructure, customer support, communications, analytics, diagnostics, security, professional services, and payment processing; to Apple, Google, and other platform providers for app distribution and subscriptions; to advertising or social partners only as disclosed and subject to available choices; in a financing, merger, acquisition, reorganization, or asset transfer subject to appropriate safeguards; to legal authorities or others when reasonably necessary to comply with law or protect rights and safety; and at your direction. Certain advertising, analytics, cookie, pixel, or SDK disclosures constitute a “sale,” “sharing,” or targeted advertising under state law even though no money changes hands. Where those practices occur, we provide a “Do Not Sell or Share My Personal Information” mechanism, honor applicable universal opt-out signals such as Global Privacy Control, and do not use consumer health data for targeted advertising.

5. Cookies, Analytics, Advertising, and Similar Technologies

We use essential technologies for authentication, security, navigation, load balancing, and core functions; preference technologies to remember settings; analytics technologies to understand performance and usage; and advertising or social technologies only as disclosed and permitted. Where consent is required, nonessential technologies remain disabled until consent. You may use the preference center, browser settings, device permissions, app tracking controls, and applicable platform settings. We do not respond to legacy Do Not Track signals. We honor Global Privacy Control and other legally recognized universal opt-out mechanisms for the browser or device from which the signal is sent. The App requests Apple tracking permission before tracking across third-party apps or websites where Apple requires it.

6. Email, SMS, Push Notifications, and App Permissions

Email marketing may be unsubscribed through the message link, while transactional or legal notices may continue. Our SMS program identifies the program by name, discloses expected message frequency, states that message and data rates may apply, provides STOP and HELP instructions, maintains consent and suppression records, and does not share mobile numbers or consent records with third parties for their own marketing. Push notifications and optional device permissions are disabled unless enabled by the user and may be changed in device settings. Marketing consent is not a condition of purchase unless expressly and lawfully stated.

7. Public Areas and User Content

Content submitted to a clearly public community, review, or testimonial feature may be visible to others and may be copied outside Mood Pop’s control. Private journal entries, mood entries, coaching communications, and other content not designated for public display will not be used in advertising or testimonials without separate permission. Community areas are not confidential or continuously monitored. Do not post sensitive information you do not want others to see.

8. Data Retention

We retain information only as reasonably necessary for the disclosed purpose, taking into account legal obligations, contractual needs, security, disputes, and deletion requests. Our criteria are: account and profile data for the life of the account and a limited period afterward; transaction and tax records for legally required accounting and chargeback periods; consent and suppression records as needed to demonstrate compliance; support records for the period needed to resolve and document the matter; security logs for a limited period based on threat and audit needs; analytics data in identified or aggregated form only as long as needed; and backups until overwritten under routine schedules. Consumer health data is deleted from active systems, and deletion is directed to processors, upon a valid request, subject only to legally permitted exceptions and backup limitations.

9. Data Security and Breach Response

We maintain administrative, technical, and physical safeguards proportionate to the sensitivity of the information, including access controls, vendor diligence, secure transmission where appropriate, logging, incident response, and workforce confidentiality measures. No system is completely secure, and you are responsible for safeguarding your passwords, devices, and credentials. Where Mood Pop is subject to the FTC Health Breach Notification Rule or another breach-notification law, Mood Pop will provide required notices following an unauthorized acquisition or other covered breach of unsecured identifiable health information.

10. Children and Age Restrictions

The Services are intended for adults age 18 and older and are not offered for independent use by minors. Mood Pop does not knowingly permit a person under 18 to create an account or purchase a subscription and does not knowingly collect personal information from children under 13. If Mood Pop learns that it collected a child’s information contrary to this policy, it will investigate and delete the information as appropriate. A future decision to offer teen accounts would require a separate age-assurance, parental-permission, advertising, profiling, and privacy framework before launch.

11. International Transfers

Mood Pop is based in the United States and processes information in the United States and locations where its providers operate. The Services are presently directed to U.S. users. Mood Pop does not intentionally offer the Services to residents of the EEA or United Kingdom unless it first implements the required notices, legal bases, representative arrangements where applicable, transfer safeguards, and data-subject procedures. Incidental access from another country does not constitute an offer into that market.

12. Your Privacy Rights and Choices

Depending on applicable law, you may request access, correction, deletion, portability, a list of specific third parties where required, withdrawal of consent, limitation of certain sensitive-data uses, or an appeal; and may opt out of sale, sharing, targeted advertising, or qualifying profiling. You may exercise rights through the privacy-request webform or by emailing help (at) cynthiaoccelli (dot) com with “Privacy Request” in the subject line, or by writing to Mood Pop, Inc., c/o Cynthia Occelli, 2355 Westwood Blvd. #750, Los Angeles, CA 90064. Sale or sharing opt-outs are also available through the “Do Not Sell or Share My Personal Information” link and applicable universal opt-out signals. We may verify identity using information associated with your account, and authorized agents must provide authority. We respond and process appeals within applicable statutory periods and will not discriminate against you for exercising rights. If we offer a financial incentive for personal information, we will provide a separate notice before enrollment.

13. California and Other U.S. State Notices

The table in Appendix A states, for each category of personal information collected in the preceding 12 months, its sources, business or commercial purposes, categories of recipients, whether it is sold or shared, and the applicable retention criteria. Categories collected may include identifiers, customer records, commercial information, internet or network activity, approximate or precise geolocation, audio or visual information provided by the user, inferences, account credentials, and health-related or other sensitive personal information. Sensitive personal information is used only for the purposes permitted without a limitation right, or subject to the right to limit where it applies. California residents have the rights to know, correct, delete, opt out of sale or sharing, limit qualifying sensitive-information uses, use an authorized agent, and receive equal service. Mood Pop provides the required “Do Not Sell or Share My Personal Information” and, where applicable, “Limit the Use of My Sensitive Personal Information” links. Residents of other states receive the rights and disclosures required by their state, including appeal rights, profiling information, sensitive-data consent or notice, and specific-third-party disclosures where required.

14. Changes and Contact

We may update this Policy prospectively. We will change the “Last Updated” date and provide additional notice, and obtain renewed consent where legally required, before materially expanding use of previously collected sensitive or consumer health data. Privacy questions, complaints, and requests may be sent to help (at) cynthiaoccelli (dot) com or Mood Pop, Inc., c/o Cynthia Occelli, 2355 Westwood Blvd. #750, Los Angeles, CA 90064.

Appendix A: California Category Table

Categories of personal information collected in the preceding 12 months, as required by California law. Referenced in Section 13.

Category	Sources	Business or commercial purposes	Categories of recipients	Sold or shared	Retention criteria
Identifiers: name, email address, mailing address, telephone number, account and device identifiers	You; your device; app stores; payment processors	Create and authenticate accounts; deliver purchased services; provide support; send transactional and, where opted in, marketing communications; prevent fraud; comply with law	Service providers; payment processors; app stores; analytics, advertising, and social platforms; professional advisors; legal authorities	Shared for cross-context behavioral advertising where the advertising technologies described in Section 5 are active	Life of the account and a limited period afterward for legal, tax, fraud-prevention, and recordkeeping purposes
Customer records information: contact and billing details, account credentials, payment records held by processors	You; payment processors	Process purchases, renewals, refunds, and chargebacks; tax and accounting; support; enforce the Terms	Payment processors; service providers; professional advisors; legal authorities	No	The periods required for tax, payment, chargeback, audit, and accounting purposes
Commercial information: products and subscriptions purchased, renewal and cancellation history, support history	You; payment processors; app stores	Deliver purchased services; manage subscriptions; provide support; internal analytics and product decisions	Service providers; payment processors; app stores; analytics platforms	Shared for cross-context behavioral advertising where the advertising technologies described in Section 5 are active	Retained with the associated transaction records
Internet or other electronic network activity: IP address, browser and device data, pages and features used, timestamps, crash and diagnostic logs, cookie, pixel, and SDK data	Automatic collection; cookies, pixels, and SDKs; analytics and advertising providers	Operate and secure the Services; measure performance; debug; detect fraud and security incidents; measure marketing	Service providers; analytics, advertising, and social platforms	Shared for cross-context behavioral advertising where the advertising technologies described in Section 5 are active	Security logs for a limited period based on threat and audit needs; analytics data in identified or aggregated form only as long as needed
Geolocation data: general location derived from IP address; precise device location only where a disclosed feature requires it and permission is granted	Automatic collection; your device, with permission	Localization; security and fraud prevention; operate features that require location	Service providers; analytics providers	Precise geolocation is not sold or shared	Retained only for the period consistent with the purpose of collection
Audio, electronic, or visual information: reviews, testimonials, comments, community posts, journal or reflection text, mood entries, coaching communications, meditation or session history	You	Deliver the requested feature; moderate community areas; provide support; maintain safety and security; publish testimonials only with separate permission	Service providers supporting hosting, storage, support, and, where used, AI processing under contractual restrictions	No. Not used for targeted advertising	Life of the account or until deleted on request, subject to legally permitted exceptions and backup limitations
Inferences: preferences, scores, or characteristics derived from interactions with the Services	Derived from your use of the Services	Personalize features and content; internal analytics and product decisions	Service providers	Not sold. Not shared where derived from consumer health data	Life of the account or until deleted on request
Sensitive personal information: account log-in credentials, precise geolocation where permitted, and consumer health data as described in Section 2	You; your device, with permission	Used only to provide the feature you requested, to maintain security and prevent fraud, to comply with law, or with your consent. Not used to infer characteristics	Service providers bound by contractual restrictions	No	As stated above for the underlying category. Consumer health data is deleted from active systems, and deletion directed to processors, on a valid request

Mood Pop does not sell personal information for monetary consideration. Where the advertising and analytics technologies described in Section 5 are active, certain cookie, pixel, and SDK disclosures constitute a “sale” or “sharing” for cross-context behavioral advertising under California law and comparable targeted-advertising provisions in other states. You may exercise the applicable opt-out through the “Do Not Sell or Share My Personal Information” link or a recognized universal opt-out signal. Consumer health data is not used for targeted advertising and is not sold.