A quiet, clear promise.

• You can use Minding Me without entering a name or email. The app creates an anonymous account when you first open it.
• Cloud Sync is off by default. If you enable it, supported profile details, journal text and session records sync through your account. Voice recordings and saved reflection images remain on your device.
• Voice transcription runs on your device. If on-device transcription is unavailable, you can type instead; the app does not switch to server transcription.
• This version does not send journal entries to an AI service or offer AI-generated reflections.
• Optional PostHog usage analytics and error reporting are off by default. If enabled, they use pseudonymous identifiers and include approximate location derived from your IP address, but not journal text or voice recordings.
• You can export local data, change privacy choices and start account deletion inside the app.
• MindingMe Pro is an optional paid subscription. Apple handles payment and RevenueCat manages subscription access and reporting using account and purchase records, even when optional PostHog analytics are off. The app also links to our separate merchandise shop.

Minding Me is a product of IMind.Co LLC, a California limited liability company (entity number 202460810740), at 4522 Woodman Avenue, C329, Sherman Oaks, CA 91423, USA. We are the data controller for the information described on this page.

The same company runs our shop at theimindco.com, which is a separate website with its own policies.

For anything on this page, write to hello@mindingme.app.

When you first open Minding Me, the app creates an anonymous account so your information belongs to that account. You do not need to enter a name or email to begin.

You can optionally link Sign in with Apple from You → Account. Apple supplies an account identifier and, if provided, your name and email address. Your email may be an Apple private relay address.

Where Google sign-in is offered, you can also choose it in You → Account. Google provides identity credentials and basic profile information, such as your account identifier, name and email address. The app sends the Google identity token to Supabase to authenticate or link your account. It requests no additional Google access to your contacts, calendar, email messages or Drive files. Google handles sign-in under its own privacy policy.

Linking a sign-in provider to the current account preserves that account when linking succeeds. If the provider identity belongs to a different existing account, the app asks before switching; it does not merge the accounts or their local information. Export anything you need before switching away from an anonymous account.

Linking a sign-in provider and enabling Cloud Sync are separate choices. Link an account you can recover and allow supported information to finish syncing before relying on it on another device. Voice recordings and saved reflection images are not restored through Cloud Sync.

On this device. The app stores your journals, recordings, settings, practice history and other saved activity in its private device storage. Cloud Sync and optional analytics are separate settings. Keeping Cloud Sync off does not prevent the app from creating an account or communicating with services needed to open that account.

With Cloud Sync enabled. Supported information is sent to Supabase and associated with your account:

• Profile: display name, life-season preference, notification, reverb, haptic and contrast preferences, and daily goal. Life-season choices include personal subjects such as new motherhood and anxiety.
• Journal entries: transcript or typed text, notes, prompt, date and time, and any saved calm rating. An entry may also contain the local recording's file reference; the audio file itself is not uploaded.
• Sessions: date and time, duration, session type, pattern name and the practice used.

Device-only attachments. Voice recordings and saved reflection images remain on the device. They are not cloud backups and do not follow you when you recover an account on another device.

Turning Cloud Sync off stops new app synchronization; it does not delete information already stored on the server. Use account deletion if you want to remove your account and its synced information.

The current version of Minding Me does not offer AI-generated journal reflections and does not send your journal entries to Anthropic or another AI model. Guided prompts and reflection activities in this version do not require server AI processing.

Voice journaling uses your microphone to record what you say. Where supported and permitted, the app requests English on-device speech recognition to create a transcript. It does not fall back to sending the recording to a server for transcription if on-device recognition is unavailable. You can continue with typed input instead.

The recording stays in the app's private storage on this device. If you enable Cloud Sync, the resulting journal text can sync to your account, but the audio recording does not. User-directed exports or sharing can create copies outside the app; you choose the destination.

PostHog usage analytics and application error reporting are off by default. You can enable or disable Analytics Consent in You → Privacy, Data & Storage. When enabled, the app sends selected events to PostHog's EU-hosted service to understand feature use and investigate app failures.

Reports can include screen views, use of content and practices, completion events, the identifiers of the content used, counts or durations, app and device context, and pseudonymous identifiers generated by the analytics software. PostHog can derive an approximate location from your IP address. These reports are pseudonymous, not a promise of complete anonymity.

The app's analytics event properties exclude journal text, voice recordings, raw mood values, selected body zones, emotions and concern selections. Error reports use a limited error category, a fatal-or-nonfatal flag and sanitized code locations; they exclude raw error messages, URLs and local file paths.

When you enable Analytics Consent, the app supplies your PostHog analytics identifier to RevenueCat alongside your subscription account. This allows subscription activity to be connected with product analytics. The app requests removal of that analytics link when you withdraw consent and retries if the connection is unavailable. Previously received records remain subject to their retention arrangements. We do not use these events for cross-company advertising tracking.

Turning Analytics Consent off stops new PostHog usage and error reporting and clears locally queued reports. It does not automatically erase reports already received by PostHog. Questions or requests about previously collected information can be sent to hello@mindingme.app; what can be located depends on the available identifiers and the applicable retention arrangements.

RevenueCat's subscription processing is separate from this optional reporting. Account, purchase and entitlement records support subscription access, purchase validation and subscription reporting, including customer history and revenue charts. This processing continues when Analytics Consent is off; that switch does not disable RevenueCat's subscription service or remove its purchase records.

Apple Health is optional. If you enable it and grant permission, Minding Me writes completed mindful minutes to Apple Health. That is the only thing it writes. The app requests no read access to your Health data at all. It does not import your steps, heart rate, sleep or other Health history.

HealthKit data is never used for advertising or marketing. It is never sold. It is never shared with third parties. It is never used for data mining or any similar purpose. The app's own wellness records, such as calm ratings and session history, are separate from HealthKit records and can sync when you enable Cloud Sync.

You can disable future writes in You → Privacy, Data & Storage and manage permission in Apple Health. Records already written to Apple Health are separate from the app's own data and are not removed by clearing local app data or deleting your Minding Me account.

The app asks for these only when the relevant feature needs them, and you can withdraw any of them in iOS Settings.

• Microphone — to record voice journals.
• Photos (add-only) — to save reflection cards to your library. This is a write-only permission: the app cannot read your photo library.
• Face ID or Touch ID — to lock private areas of the app. Biometric matching is handled entirely by iOS. Your biometric data never reaches the app or our servers — iOS only tells the app whether the check passed.
• Notifications — to send the reminders you schedule. These are local notifications from your device.

MindingMe Pro is an optional auto-renewing subscription. We use RevenueCat to manage subscription access, purchases and restores. RevenueCat receives the app account identifier and purchase and entitlement records needed to determine what your account can access. These records also support purchase validation and RevenueCat's subscription reporting, including customer history and revenue charts. This processing does not depend on the Analytics Consent setting. When Analytics Consent is enabled, the app also shares the pseudonymous analytics identifier described above so subscription activity can be connected with product analytics.

Apple processes the payment, not us. Your card is charged through your Apple ID. We never receive or store your card details — they are never sent to us at any point.

The separate merchandise shop has its own checkout and policies. Deleting the app or your Minding Me account does not cancel a subscription; manage subscriptions in your Apple account settings.

This feature is opt-in and off by default. When you use it, the app generates a text summary file that you share yourself through the standard iOS share sheet — you choose where it goes.

Nothing is transmitted automatically, and we do not send anything to any therapist. Once you have shared a summary, what happens to it is between you and whoever you sent it to.

The app links out to our shop at theimindco.com, which is run by IMind.Co LLC on Shopify. Those links carry campaign parameters so we can tell which part of the app someone came from.

The app opens our shop in Safari's browsing view, with a fallback to your browser. The link includes generic campaign tags, not your app account ID or journal content. The app cannot inspect what you enter on the website. Browsing and buying there are covered by the shop's own privacy policy and terms.

Separately from the app, this marketing site collects almost nothing. It sets no cookies and runs no analytics or tracking scripts.

The waitlist form currently confirms your address on screen without sending or storing it anywhere. If that changes before launch, we will update this section to name the email provider we use and explain how to unsubscribe.

Like any website, this one is served by a hosting provider — Vercel — which processes the standard server request logs needed to deliver pages and protect the site from abuse.

If you are in the UK or the EU, the law asks us to name a lawful basis for each thing we do with your data. Ours are:

• Performance of a contract — creating your account and storing your entries so the app can do what you installed it to do.
• Explicit consent (Article 9) — cloud sync of journal content, writing to Apple Health, and therapist sharing. These involve information about your mental health, so consent is the basis, and you can withdraw it at any time.
• Consent — optional PostHog usage analytics, which stay off until you turn them on.
• Legitimate interests — keeping the service secure and working, and answering you when you email us.

Withdrawing consent does not undo processing that already happened while consent was in place, but it stops it going forward.

The services used by this version include:

• Supabase: account authentication and the supported profile, journal-text and session information you choose to sync. Voice recordings and saved reflection images are not uploaded by this version.
• PostHog: optional product analytics and sanitized application error reporting on its EU-hosted service, using pseudonymous identifiers and approximate IP-derived location.
• Apple: optional Sign in with Apple, the device's Health, speech-recognition, biometric and notification services, App Store distribution and payment processing. Voice transcription is requested on-device; the app does not request server transcription or read Health history.
• Google: optional account authentication where Google sign-in is offered. Basic sign-in profile information and an identity token are used to authenticate or link your account with Supabase; the app does not request additional access to Google services.
• RevenueCat: subscription, purchase and entitlement records associated with your app account for purchase validation, access and subscription reporting, whether or not optional PostHog analytics are enabled. The additional PostHog analytics link is shared only if you enable Analytics Consent.
• Shopify: the platform for our separate merchandise website when you choose to open it. That website has its own privacy policy and terms.

This version does not send your journal entries to Anthropic or another AI model. We will update this list before adding anyone new. We do not sell your data to anyone.

We do not put an expiry clock on your writing. Rather than quote fixed periods we have not committed to, here is the rule we actually apply to each kind of data:

• Journal entries and voice recordings — kept until you delete them, or until you ask us to delete your account. We do not expire them on our own; they are yours to keep for as long as you want them.
• Session records — the same rule as journal entries.
• Account and profile records — kept for as long as your account exists, and removed when you ask us to delete it.
• PostHog usage analytics and error reports — only if you turned Analytics Consent on, and only for as long as our PostHog project is configured to retain them.
• Support email — kept while we need it to answer you and to have context if you write again.
• Purchase records — kept for as long as tax and accounting law requires us to keep them.

Turning Cloud Sync off or removing local app data does not delete server copies already synced. Use You → Account → Delete account to start account and synced-data deletion. The app identifies incomplete processing or cleanup so it can be retried. Historical service-provider records, backups and external copies are separate from immediate local cleanup. See your controls below.

Our database is hosted in the United States, in the East US (Ohio) region. Optional PostHog usage analytics and error reports are hosted in the EU. Apple processes data in the United States.

If you are in the UK or the EU, that means your data is transferred outside your country. Where it is, we rely on the European Commission's Standard Contractual Clauses and, for UK users, the UK International Data Transfer Addendum, together with the security measures described below.

• All traffic between the app and our servers is encrypted in transit.
• Row-level security in the database means every record is tied to an account, and a query can only ever return that account's own rows.
• Voice recordings and saved reflection images are stored in the app's private device storage. Authentication credentials use the device's secure storage. Local journals, settings and history are stored in the operating system's app sandbox; the optional biometric lock controls access to the interface and does not itself encrypt those records.

Open You → Privacy, Data & Storage to manage Cloud Sync, Analytics Consent, Therapist Sharing Consent, the optional biometric lock and available Apple Health integration.

Export My Local Data creates a ZIP containing this account's available local journals, session history, settings, drafts and recording or image attachments. It excludes cloud-only records that have not reached this device, processor-held data and Apple Health records. Read the export's manifest.json and check the files before deleting originals. This export is a readable copy; the app does not provide an import-and-restore feature for it.

Erase Local Data, under Delete Data From This Device, removes this account's local app information. It does not delete synced server copies or another account's information.

You → Account → Delete account starts deletion of your Minding Me account, its synced journal text and session records, and that account's local data. Export anything you need first. The app reports incomplete deletion or cleanup and provides a way to retry. Follow any additional Apple authorization-removal instructions shown by the app.

Account deletion does not remove copies you have already shared, saved to Photos or written to Apple Health. Service-provider records and backups are handled under their applicable retention and deletion arrangements. Deleting the app or account does not cancel any App Store subscription you may hold.

If you cannot use the in-app deletion control or need help with a privacy request, contact hello@mindingme.app. We will respond within the time limits the law sets for us and verify that the request concerns your account. Do not email passwords, sign-in codes, private journal entries, recordings or authentication tokens.

Wherever you live, you can email hello@mindingme.app to exercise any of the rights below. We do not charge for this and we will not treat you differently for asking.

If you are in the UK or the EU

You have the right to access your data, to have it corrected, to have it erased, to restrict how we use it, to receive a portable copy, to object to processing, and to withdraw consent at any time. You also have the right to complain to your data protection authority — in the UK, that is the Information Commissioner's Office.

If you are in California or another US state

You have the right to know what we have collected, to have it deleted, to have it corrected, and to opt out of any sale or sharing of it.

On that last point, to be unambiguous: we do not sell your personal information, and we do not share it for cross-context behavioural advertising. We have never done so. Minding Me includes a link promoting our separate merchandise shop.

We respond as quickly as we can, and always within the deadline the law that applies to you sets — one month under UK and EU GDPR, and 45 days under California law.

Minding Me is for adults. You must be at least 18 to use it. We do not knowingly collect information from anyone under 18. If you believe a child has been using the app, email hello@mindingme.app and we will delete the account and its data.

When we change this policy we update the date at the top of the page. If a change meaningfully affects how we handle your information — a new subprocessor, a new category of data, a new purpose — we will tell you in the app before it takes effect, and where the law requires it, we will ask for your consent again rather than assume it.

Questions, requests, or concerns about anything on this page go to hello@mindingme.app, and a person will read them.

IMind.Co LLC
4522 Woodman Avenue, C329, Sherman Oaks, CA 91423, USA