moood — about

// mission

moood strives to be the standard and foundation for honest feedback in human systems.

functional teams, organizations, and societies depend on the ability to share what's true, even when it's uncomfortable. when that ability fails, problems are swept under the rug and dysfunction compounds. leadership operates on bad information, oversight becomes performative, and small problems grow into systemic crises. eventually the system collapses.

moood removes the social cost of speaking up. anonymous, fast, built for people first.

// team

the people building moood.

Frank Smith

founder

engineer with over a decade in IT across engineering, sales, and management. currently consults at IBM, specialising in cloud architecture and delivery automation.

Claude

lead developer

AI pair programmer from Anthropic. writes 100% of the code across the web dashboard, mobile apps, cloud functions, and infrastructure. works under Frank's direction and review.

anthropic.com

// story

moood came from a pattern observed across teams, organizations, and societies. when people can't share honest feedback, problems don't disappear. they hide, and they compound.

two paths exist when uncomfortable truths surface. on the kind-lie path, people avoid the friction. they say what's expected. it feels comfortable in the moment, but the underlying issues are never addressed, and the system slowly compounds dysfunction into something much harder to recover from.

on the unkind-truth path, the feedback gets delivered honestly even when it hurts. there is an immediate dip into discomfort. but the system learns from each correction, course-corrects, and trends steadily upward.

moood was built to make the unkind-truth path easier to walk. anonymity removes the social cost of speaking up. a single swipe means the time cost is barely a second. organizations and leaders see honest, aggregated sentiment they can act on, without anyone having to put their name to a difficult message.

// privacy first

> your mood data is stored anonymously.
no user ID. no tracking. encrypted locally. export your data at anytime. account deletion removes your profile but your mood history will always remain anonymous.

blind relay architecture

moood uses a blind relay to sever the link between your identity and your mood data. authentication and mood submission happen in two separate requests — the relay verifies you're allowed to participate, then discards your identity before writing the mood.

blind-relay.sh

Client                  Relay (Cloud Function)       Firestore
 │                             │                          │
 ├─── POST /token (auth) ─────►│                          │
 │                             │ verify auth              │
 │                             │ log participation        │
 │◄── blind_token ─────────────┤                          │
 │                             │                          │
 ├─── POST /mood (no auth) ───►│                          │
 │    {blind_token, mood}      │ validate token           │
 │                             │ discard identity         │
 │                             ├── write mood ───────────►│
 │                             │  (service account)       │
 │◄── 200 OK ──────────────────┤                          │

result: organizations see aggregated sentiment. databases see anonymous mood entries. nobody — not even us — can connect the two.

strong anonymity, even against a determined admin
no cryptographic libraries required on the client
audit logs are neutralized — only the service account writes mood data
your identity is never stored alongside your mood

what is a blind token?

a blind token is a concept rooted in blind signatures, introduced by cryptographer David Chaum. the idea: a token is created so that the signing authority can validate it without ever seeing its content or knowing who requested it.

in moood, the relay issues a blind token when you authenticate. that token proves you're a valid participant — but carries no trace of your identity. when you submit your mood, the relay validates the token and discards it. the mood is written. who you are is not.

it's the same principle behind anonymous digital cash and private voting systems.