Open dashboard

about

What's moood?

Anonymous micro pulse survey & team mood tracking; a lightweight alternative to TinyPulse, Officevibe or Culture Amp.

mission

A global standard for feedback in human-centric systems

Functional teams, organizations, and societies depend on the ability to share what's true, even when it's uncomfortable. when that ability fails, problems are swept under the rug and dysfunction compounds. leadership operates on bad information, oversight becomes performative, and small problems grow into systemic crises. eventually the system collapses.

moood removes the social cost of speaking up. anonymous, fast, built for people first.

team

The people building moood

Frank Smith

Frank Smith

Founder

Engineer with over a decade in IT across engineering, sales, and management. currently consults at IBM, specialising in cloud architecture and delivery automation.

linkedin
Claude

Claude

Lead developer

AI pair programmer from Anthropic. writes 100% of the code across the web dashboard, mobile apps, cloud functions, and infrastructure. works under Frank's direction and review.

anthropic.com

story

Why moood exists

moood came from a pattern observed across teams, organizations, and societies. when people can't share honest feedback, problems don't disappear. they hide, and they compound.

Two paths exist when uncomfortable truths surface. on the kind-lie path, people avoid the friction. they say what's expected. it feels comfortable in the moment, but the underlying issues are never addressed, and the system slowly compounds dysfunction into something much harder to recover from.

On the unkind-truth path, the feedback gets delivered honestly even when it hurts. there is an immediate dip into discomfort. but the system learns from each correction, course-corrects, and trends steadily upward.

moood was built to make the unkind-truth path easier to walk. anonymity removes the social cost of speaking up. a single swipe means the time cost is barely a second. organizations and leaders see honest, aggregated sentiment they can act on, without anyone having to sign their name on a difficult message.

privacy first

Enforced by architecture

> Your mood data is stored anonymously.
No user ID. no tracking. encrypted locally. export your data at anytime. account deletion removes your profile but your mood history will always remain anonymous.

Blind relay architecture

moood uses a blind relay to sever the link between your identity and your mood data (authentication and mood submission happen in two separate requests); the relay verifies you're allowed to participate and issues and you with a token, that token acts like a key allowing you to then submit your response without the need to use your identity as proof that you have permission to respond.

blind-relay.sh 
Client                  Relay (Cloud Function)       Firestore
 │                             │                          │
 ├─── POST /token (auth) ─────►│                          │
 │                             │ verify auth              │
 │                             │ log participation        │
 │◄── blind_token ─────────────┤                          │
 │                             │                          │
 ├─── POST /mood (no auth) ───►│                          │
 │    {blind_token, mood}      │                          │
 │                             │ validate token           │
 │                             ├── write mood ───────────►│
 │                             │  (service account)       │
 │◄── 200 OK ──────────────────┤                          │

Result: organizations see aggregated sentiment. databases see completely anonymous sentiment data.

  • Strong anonymity, even against a determined admin
  • No cryptographic libraries required on the client
  • Audit logs are neutralized, only the service account writes mood data
  • Your identity is never stored alongside your mood
What is a blind token?

A blind token is a concept rooted in blind signatures, introduced by cryptographer David Chaum. the idea: a token is created so that the signing authority can validate it without ever seeing its content or knowing who requested it.

In moood, the relay issues a blind token when you authenticate, that token proves you're a valid participant but carries no trace of your identity. when you submit your mood, the relay validates the token and discards it. the mood is written. who you are is not.

It's the same principle behind anonymous digital cash and private voting systems.