Privacy Policy
This Privacy Policy explains how Mind Matter LLC ("Mind Matter," "we," "us") collects, uses, protects, and shares information when you use the Mind Matter app and website (the "Service"). We wrote it to be readable, because this app holds some of the most personal information there is. The short version: your content belongs to you, we don't sell it, we don't run ads, and you can export or permanently delete everything at any time.
1. Information we collect
- Account information — your name and email address, used to create and secure your account.
- Sign-in with Google or Apple (optional) — if you choose to sign in with Google or Apple instead of a password, that provider confirms your identity to us and shares your name, email address, and a unique account identifier. We use these solely to create and authenticate your Mind Matter account. We do not request, access, store, or share any other data from your Google or Apple account — no contacts, no calendar, no files, no mail — and we never use sign-in data for advertising or share it with third parties for their own purposes.
- Content you create — journal entries, mood logs, sleep and habit logs, assessment answers and scores, goals, crisis plan entries, and your conversations with the AI. This is the heart of the app and it is treated as sensitive.
- Optional profile details — age range, gender, and focus areas you choose to share, used only to personalize the experience.
- Apple Health data (optional) — if you explicitly connect Apple Health, we read the sleep and step data you authorize, solely to fill in your logs and power your insights. See Section 6.
- Billing information — subscriptions are purchased and processed by Apple. Your payment details go to Apple, never to us: we never see or store your card number.
- Technical data — basic logs needed to run and secure the Service (such as error reports if something crashes). We do not use advertising or tracking SDKs.
2. How we use information
We use your information to operate the Service: authenticate you, store and display your content, generate your insights and AI responses, process payments, send notifications you have enabled, fix errors, and improve the product. That's it.
3. What we never do
- We never sell your personal information, to anyone, for any reason.
- We never use your journal, conversations, or health information for advertising or marketing.
- We never share your data with data brokers, advertisers, or analytics companies.
4. How AI processing works
To generate insights and AI conversations, the relevant text is transmitted securely to our AI provider (Anthropic) to produce a response. It is processed to serve your request and is not used to train public AI models. If you use voice features, text may also be sent to our speech provider (ElevenLabs) to generate audio. In each case we send only what is needed for the feature you are actively using.
5. Service providers
We use a small number of companies to run the Service, each processing data only on our instructions: Supabase (database and authentication), Vercel (hosting), Apple (payments and subscriptions), Anthropic (AI processing), and ElevenLabs (voice synthesis, only when voice features are used). We may also use an error-monitoring service to detect crashes.
6. Apple Health
If you connect Apple Health, we access only the categories you authorize (sleep and steps), read-only, to display them in the app and connect them to how you feel. Health data obtained through Apple HealthKit is never used for advertising or marketing, never sold, and never shared with third parties for their own purposes, consistent with Apple's requirements. You can revoke access at any time in iOS Settings → Health.
7. Security
All data is transmitted over encrypted connections (HTTPS/TLS). Access controls are enforced at the database level — every record is bound to its owner's account, so in normal operation you can only ever read and write your own data. No security is perfect, and no service can promise absolute security, but we design so that the failure of any one layer does not expose your content.
8. Legal requests
Like any US company, we can be legally compelled to disclose information by a valid subpoena, court order, or similar legal process. If that ever happens, our policy is to disclose the minimum required, and — unless a court forbids it — to notify the affected user. We minimize what we collect and retain precisely so there is less to compel.
9. Retention and deletion
We keep your data for as long as your account exists. You can permanently delete individual content in the app, or delete your entire account — including every journal entry, log, conversation, and the account itself — from Account settings at any time. Deletion is permanent and cannot be undone. You can also export a complete copy of your data first.
10. Your rights
Regardless of where you live, we extend the same rights to everyone: the right to access your data (in-app export), correct it (edit in-app), delete it (in-app deletion), and take it elsewhere (the export file is standard JSON). If a right in your jurisdiction (such as under the CCPA or GDPR) isn't covered by an in-app tool, email us and we will honor it.
11. Children
Mind Matter is not directed to children under 13, and you may not create an account if you are under 13. If we learn that an account belongs to a child under 13, we will delete it and its data. If you are between 13 and 17, you may only use Mind Matter with the involvement and consent of a parent or legal guardian, and we encourage you to review these documents with them.
12. Changes to this policy
If we make material changes, we will update the date at the top of this page and provide notice in the app before the changes take effect. Continued use after the effective date means you accept the updated policy.
13. Contact
Questions, requests, or concerns about privacy: mindmatter411@gmail.com. We read everything.