A quiet, clear promise.

This is the short version. Every point below is explained in full further down the page.

• You can use Minding Me without giving us your name or email. The app creates an anonymous account for you on first launch.
• Cloud sync is a separate choice. With it turned off, your entries stay on your device.
• AI reflections are only ever generated when you ask for one. Doing so sends that journal entry to Anthropic for processing.
• Voice journaling uses Apple's speech recognition, which sends your audio to Apple's servers to transcribe it.
• Analytics are off unless you turn them on, and never include your journal text.
• We do not sell or share your personal information, and we never advertise to you.

Minding Me is a product of IMind.Co LLC, a California limited liability company (entity number 202460810740), at 4522 Woodman Avenue, C329, Sherman Oaks, CA 91423, USA. We are the data controller for the information described on this page.

The same company runs our shop at theimindco.com, which is a separate website with its own policies.

For anything on this page, write to hello@mindingme.app.

When you first open Minding Me, the app creates an anonymous account for you automatically. There is no signup screen and no email required. That account is what lets your entries belong to you rather than to anyone else.

You can optionally upgrade to a permanent account using Sign in with Apple. Apple then gives us a user identifier and, only if you allow it, your name and email address — which may be one of Apple's private relay addresses that forwards mail without revealing your real one. Your original anonymous identifier is preserved when you upgrade, so the entries you have already written carry over.

Minding Me has a local-only mode and a separate cloud sync setting. When cloud sync is off, the content below stays on your device and is not stored on our servers. When you turn cloud sync on, we store it in our database (Supabase) so it survives losing your phone and can follow you to a new one.

Your profile

Display name, seasonal preference, your notification, haptics and contrast preferences, and your daily goal in minutes.

Journal entries

The free-text transcript, any text notes you write, the prompt you were answering, and timestamps.

Voice recordings

If you record a voice journal, the audio file itself is stored in a private storage area that belongs only to you, protected by database rules that prevent any other account from reading it.

Sessions

Records of meditation and breathing sessions: duration, session type, pattern name, and which piece of content you used.

The function that does this is stateless — it passes your text through and does not store the journal content it processes.

Anthropic acts as our subprocessor for this feature. Anthropic does not use API inputs to train its models. You can read Anthropic's privacy policy for how they handle data they process on our behalf.

Journal entries about your mental health are special category data under Article 9 of the UK and EU GDPR. Our lawful basis for sending them to be processed is your explicit consent — not legitimate interest. If you would rather not have your writing processed this way, simply do not request a reflection; the rest of the app works exactly as before.

Voice journaling uses Apple's speech recognition to turn what you say into text. We want to be straightforward about what that means: your audio is sent to Apple's servers to be transcribed. It is not processed entirely on your device.

Apple handles that audio under its own privacy policy. If you would prefer your voice never to leave your phone, type your entries instead of recording them.

The resulting transcript, and the audio recording itself, are then treated like any other journal entry — kept on your device, or stored in your private area of our database if you have cloud sync turned on.

Product analytics are off by default. Nothing is collected unless you turn the setting on yourself. We use PostHog, on their EU-hosted service.

Even when it is on, we do not send a general stream of activity. Only an allowlist of event names is ever transmitted, along with an allowlist of property keys. Anything not on those lists is never sent.

The following are never transmitted, whether analytics are on or off:

• The text of your journal entries
• Your mood values
• Health data
• Body zones
• Emotions
• Concern selections

You can turn analytics off again at any time in the app, and it takes effect immediately.

If you enable it, Minding Me writes mindful minutes to Apple Health when you complete a session. That is the only thing it writes.

The app requests no read access to your Health data at all. We cannot see your steps, your heart rate, your sleep, or anything else in Health.

Health data is never used for advertising or marketing. It is never sold. It is never shared with third parties. It is never used for data mining or any similar purpose.

You can revoke the app's Health access at any time in the iOS Health app.

The app asks for these only when the relevant feature needs them, and you can withdraw any of them in iOS Settings.

• Microphone — to record voice journals.
• Photos (add-only) — to save reflection cards to your library. This is a write-only permission: the app cannot read your photo library.
• Face ID or Touch ID — to lock private areas of the app. Biometric matching is handled entirely by iOS. Your biometric data never reaches the app or our servers — iOS only tells the app whether the check passed.
• Notifications — to send the reminders you schedule. These are local notifications from your device.

There are no purchases available in the current version of the app. The subscription infrastructure is in place for a future release, and this is how it will work when it opens.

We use RevenueCat to manage subscriptions. When you subscribe, we store a record of the purchase and what it entitles you to, along with the account identifier that links that purchase to your account.

Apple processes the payment, not us. Your card is charged through your Apple ID. We never receive or store your card details — they are never sent to us at any point.

This feature is opt-in and off by default. When you use it, the app generates a text summary file that you share yourself through the standard iOS share sheet — you choose where it goes.

Nothing is transmitted automatically, and we do not send anything to any therapist. Once you have shared a summary, what happens to it is between you and whoever you sent it to.

The app links out to our shop at theimindco.com, which is run by IMind.Co LLC on Shopify. Those links carry campaign parameters so we can tell which part of the app someone came from.

Following one of those links takes you out of the app and onto a separate website. What you do there — browsing, buying, creating a shop account — is covered by the shop's own privacy policy and terms, and by Shopify as its platform, rather than by this page.

Separately from the app, this marketing site collects almost nothing. It sets no cookies and runs no analytics or tracking scripts.

The waitlist form currently confirms your address on screen without sending or storing it anywhere. If that changes before launch, we will update this section to name the email provider we use and explain how to unsubscribe.

Like any website, this one is served by a hosting provider — Vercel — which processes the standard server request logs needed to deliver pages and protect the site from abuse.

If you are in the UK or the EU, the law asks us to name a lawful basis for each thing we do with your data. Ours are:

• Performance of a contract — creating your account and storing your entries so the app can do what you installed it to do.
• Explicit consent (Article 9) — AI reflections, cloud sync of journal content, writing to Apple Health, and therapist sharing. These involve information about your mental health, so consent is the basis, and you can withdraw it at any time.
• Consent — product analytics, which stay off until you turn them on.
• Legitimate interests — keeping the service secure and working, and answering you when you email us.

Withdrawing consent does not undo processing that already happened while consent was in place, but it stops it going forward.

We keep this list short on purpose. These are the companies that process data on our behalf, and what each one does:

• Supabase — our database, authentication, and file storage. Holds your account, entries, and voice recordings when cloud sync is on.
• Anthropic — generates AI reflections from journal text you explicitly submit.
• PostHog — product analytics, EU-hosted, only if you opt in.
• Apple — Sign in with Apple, speech recognition for voice journaling, Apple Health, and payment processing.
• RevenueCat — subscription and entitlement records, once purchases are available.
• Shopify — hosts our shop, if you follow a link to it.

We will update this list before adding anyone new. We do not sell your data to anyone, and none of these companies are permitted to use it for their own purposes.

We do not put an expiry clock on your writing. Rather than quote fixed periods we have not committed to, here is the rule we actually apply to each kind of data:

• Journal entries and voice recordings — kept until you delete them, or until you ask us to delete your account. We do not expire them on our own; they are yours to keep for as long as you want them.
• Session records — the same rule as journal entries.
• Account and profile records — kept for as long as your account exists, and removed when you ask us to delete it.
• Analytics events — only if you turned analytics on, and only for as long as our PostHog project is configured to retain them.
• Support email — kept while we need it to answer you and to have context if you write again.
• Purchase records — once purchases exist, kept for as long as tax and accounting law requires us to keep them.

Erasing local data in the app clears what is on your device. If cloud sync was on, the synced copy stays on our servers until you ask us to delete it — see your controls below.

Our database is hosted in the United States, in the East US (Ohio) region. Analytics, if you enable them, are hosted in the EU. Anthropic and Apple process data in the United States.

If you are in the UK or the EU, that means your data is transferred outside your country. Where it is, we rely on the European Commission's Standard Contractual Clauses and, for UK users, the UK International Data Transfer Addendum, together with the security measures described below.

• All traffic between the app and our servers is encrypted in transit.
• Row-level security in the database means every record is tied to an account, and a query can only ever return that account's own rows.
• Voice recordings live in a private storage bucket that is not publicly readable and is subject to the same per-account rules.

Today, inside the app, you can:

• Turn cloud sync on or off
• Turn analytics on or off
• Turn therapist sharing on or off
• Export a summary file of your data
• Erase the app's data stored on your device

There is not yet a button in the app to delete your account and its server-side data. We are building one. Until it ships, email hello@mindingme.app and ask us to delete your account. We will do it within the time limits the law sets for us, and confirm when it is done. We will ask you to send that request from the email address on your account, or to confirm a detail only you would know, so that nobody can delete someone else's journal.

Wherever you live, you can email hello@mindingme.app to exercise any of the rights below. We do not charge for this and we will not treat you differently for asking.

If you are in the UK or the EU

You have the right to access your data, to have it corrected, to have it erased, to restrict how we use it, to receive a portable copy, to object to processing, and to withdraw consent at any time. You also have the right to complain to your data protection authority — in the UK, that is the Information Commissioner's Office.

If you are in California or another US state

You have the right to know what we have collected, to have it deleted, to have it corrected, and to opt out of any sale or sharing of it.

On that last point, to be unambiguous: we do not sell your personal information, and we do not share it for cross-context behavioural advertising. We have never done so. There is no advertising in Minding Me.

We respond as quickly as we can, and always within the deadline the law that applies to you sets — one month under UK and EU GDPR, and 45 days under California law.

Minding Me is for adults. You must be at least 18 to use it. We do not knowingly collect information from anyone under 18. If you believe a child has been using the app, email hello@mindingme.app and we will delete the account and its data.

When we change this policy we update the date at the top of the page. If a change meaningfully affects how we handle your information — a new subprocessor, a new category of data, a new purpose — we will tell you in the app before it takes effect, and where the law requires it, we will ask for your consent again rather than assume it.

Questions, requests, or concerns about anything on this page go to hello@mindingme.app, and a person will read them.

IMind.Co LLC
4522 Woodman Avenue, C329, Sherman Oaks, CA 91423, USA