Privacy Policy

Mind Flower is operated by [LEGAL ENTITY NAME], [REGISTERED ADDRESS]. For anything in this policy, write to info@mindflower.app.

For the purposes of the UK and EU GDPR we are the data controller for the information described here.

Mind Flower is a wellbeing product. It is not a medical device, not a diagnostic tool, and not a substitute for professional care.

Account: your email address and, if you sign in with Google, the name on that account.

Profile: whatever you choose to enter — a display name, age, gender, what you are struggling with, therapy history, physical conditions, sleep and eating patterns, habits, relationship and work situation, and your goals. Every one of these is optional and can be skipped or left blank.

Daily entries: mood scores and notes, sleep hours and quality, meals, water, caffeine, exercise, free-text notes.

Journal entries: titles and full text, and the mood you recorded before writing.

Conversations with Sage: everything you send and everything Sage replies.

Habits and goals: what you are tracking and when you completed it.

Technical: your timezone and language, an approximate country derived from your IP for choosing a language and currency, and the device description if you enable notifications.

Payment: handled entirely by Stripe. We store a Stripe customer reference and your subscription status. We never see or store your card number.

Much of what you enter — mood, sleep, mental health struggles, therapy history — is special-category health data under GDPR Article 9. We process it only with your explicit consent, given when you create an account and use these features, and only to provide the service to you.

You can withdraw that consent at any time by deleting your account, which erases the data. Withdrawing does not affect processing that already happened.

We never use health data for advertising, never sell it, and never share it with insurers, employers, or data brokers.

This is the part people most often assume works differently than it does, so we want to be direct about it.

To generate reflections, insights, weekly reviews and Sage's replies, the relevant content is sent to a large language model provider that processes it on our behalf. That includes your journal text, your check-in notes, your messages to Sage, and a summary of your recent mood, sleep and habit data.

The provider acts as our processor under contract. They do not use your content to train their models and are not permitted to use it for any purpose other than returning a response to us.

Nothing is sent until you use a feature that needs it. If you never open Sage and never write a journal entry, no journal or conversation content leaves our systems.

This is why we do not claim your data is "never shared". Processing it is how the product works, and we would rather say so plainly.

To provide the service you signed up for — performance of our contract with you.

To generate insights, reflections and reviews from your entries — your explicit consent, for the health-related elements.

To take payment and manage your subscription — performance of contract, and our legal obligations around financial records.

To send reminders and the emails you have switched on — your consent, withdrawable in Settings at any time.

To keep the service secure and working, and to understand which features are used — our legitimate interests, balanced against your privacy. Product analytics record which screens are visited and which actions are taken. They never include the content of anything you write.

To measure which adverts bring people to Mind Flower — only with your consent, which we ask for the first time you visit and which you can refuse. Nothing loads until you agree.

Base44 — hosting, database and application infrastructure.

A large language model provider — generates the AI responses described above, as our processor.

Stripe — payment processing. Stripe is an independent controller for payment data; see stripe.com/privacy.

An email delivery provider — sends reminders, weekly reviews and account emails.

IP geolocation services — used only to guess a language and currency on first visit. They receive your IP address and nothing else. You can avoid this entirely by choosing your language manually.

Google Ads — advertising measurement, and ONLY if you agree when asked. If you decline, the Google script is never loaded and no request is made to Google at all. It receives the fact that a signup or purchase happened, along with an internal reference and the amount. It never receives your email, your journal, your mood, or anything you have written.

We do not sell personal data. We do not share it for advertising. We have never received a government request for user data; if that changes we will say so here where the law permits.

Our infrastructure and our processors may store or process data outside the UK and EEA, including in the United States. Where that happens we rely on the European Commission's Standard Contractual Clauses, or an adequacy decision where one applies.

You can ask us for details of the safeguards in place for any specific transfer.

While your subscription or trial is active, we keep your data so the product works.

If your access lapses, everything is kept for 30 days so you can come back and pick up where you left off. We email you before that window closes, unless you have turned those reminders off.

After 30 days, all of your personal data is permanently deleted automatically.

If you delete your account yourself, deletion happens immediately and is not reversible.

Financial records that we are legally required to retain are kept by Stripe for the period the law requires.

Access — see what we hold. Settings → Subscription → Download my data gives you everything as a JSON file, immediately.

Portability — that same file is structured and machine-readable, which is what Article 20 requires.

Erasure — Settings → Subscription → Delete my account removes everything. No email, no waiting period.

Rectification — edit anything in your profile at any time.

Objection and restriction — write to us and we will act on it.

Withdraw consent — turn off any email in Settings, or delete your account to withdraw entirely.

To exercise anything not available in the app, email info@mindflower.app. We respond within 30 days.

If you are unhappy with how we have handled your data you can complain to your national data protection authority. In Poland that is the UODO; in Germany, your state authority; in Ireland, the DPC.

A sign-in token, so you stay logged in.

Your chosen language, whether you chose it deliberately, and a cached country code — so the app opens in the right language.

Whether you have already seen today's encouragement, so it appears once a day rather than on every screen.

If — and only if — you accept measurement cookies, Google Ads sets its own cookies to attribute a signup or purchase to an advert. Declining means the script never loads, so those cookies are never set.

We use no other third-party trackers, and no advertising network sees anything you write.

You can change your mind at any time by clearing this site's data in your browser, which resets the question.

Mind Flower is not intended for anyone under 16. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.

Data is encrypted in transit and at rest. Access to production systems is limited to those who need it. Entries are readable only by the account that created them, enforced at the database layer rather than only in the application.

No system is perfectly secure. If a breach affects your rights we will tell you and the relevant authority within 72 hours, as the law requires.

If we change this policy in a way that materially affects you, we will email you before it takes effect rather than quietly updating the page.