Privacy Notice

1. Who we are

This app ("Mindless Journey") is operated by A Mindless Journey ("we", "us", "our"). We act as the data controller for personal information collected through the app and website (mindlessjourney.life). You can reach us at privacy@mindlessjourney.life.

2. Data we collect

• Account data: name, email address, password credentials, authentication tokens.
• Wellness content you create: mood check-ins, journal entries, tags, streak counts, audio favorites, community posts and comments.
• Usage data: pageviews, referrers, session identifiers, device/browser metadata, IP address.
• Support and feedback: messages you send us.
• Payment metadata: subscription status, plan, renewal date. Card and billing details are collected and stored by our payment provider (see §5), not by us.

3. Purposes & legal bases

• Providing the service and your account — performance of a contract.
• Security, fraud prevention, and abuse protection — legitimate interests.
• Product analytics and improvement — legitimate interests.
• Customer support — performance of a contract / legitimate interests.
• Marketing emails, where offered — consent (you can withdraw at any time).
• Complying with tax, accounting, and legal obligations — legal obligation.

4. How we share data

We share personal data only with:

• Hosting & backend infrastructure (managed cloud database, authentication, and edge functions used to run the app).
• Email delivery providers used to send transactional messages.
• Paddle.com Market Ltd. as Merchant of Record for sale of subscriptions, payment processing, subscription management, tax compliance, refunds, and invoicing.
• Professional advisers (legal, accounting) where reasonably needed.
• Authorities where required by law or to protect our rights.

We do not sell your personal data.

5. Payments & Merchant of Record

Purchases are processed by Paddle.com Market Ltd., our Merchant of Record. Paddle collects billing information, charges your payment method, calculates and remits applicable taxes, and handles refunds and chargebacks. Paddle's handling of your data is described in Paddle's Privacy Policy.

6. Data retention

We keep account data and content for as long as your account is active. When you delete your account (Settings → Delete account), we delete or anonymise your personal data within 30 days, except where we must retain limited records for legal, tax, accounting, or fraud-prevention purposes (typically up to 7 years for financial records).

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or object to processing of your personal data, to data portability, and to withdraw consent. EEA/UK residents may lodge a complaint with a supervisory authority. To exercise these rights, email privacy@mindlessjourney.life. We aim to respond within 30 days.

8. Security

We apply appropriate technical and organisational safeguards including encryption in transit (TLS), encryption at rest for our managed database, row-level security so only you can read your private entries, scoped access controls, and monitoring for suspicious activity. No system is perfectly secure; please use a strong, unique password.

9. International transfers

Our providers may process data in the United States and other countries. Where required, we rely on Standard Contractual Clauses or adequacy decisions to protect transfers from the UK/EEA.

10. Cookies & analytics

We use strictly necessary cookies and local storage to keep you signed in and to remember preferences. We also record basic first-party pageview data (path, referrer, anonymised session ID) to understand product usage. We do not use third-party advertising cookies.

11. Community Safety and Content Review

Content you choose to share in public or shared Community areas — including posts and comments — may be automatically screened for language or patterns that could indicate serious safety concerns, including potential self-harm, suicide, threats of violence, or similar urgent risks.

Automated detection is a safety signal only. It does not constitute a medical diagnosis, a mental-health assessment, or a determination that you are actually in crisis.

When Community content is flagged, authorized Mindless Journey personnel may review the specific Community content and relevant context (such as the date and time, a general flag category, and the review status) to determine whether a safety response may be appropriate. Safety flags and internal safety-review information are not displayed publicly to other Community members, and other members are not told that content has been flagged.

When appropriate, we may provide crisis resources, safety information, or supportive outreach to you through in-app or account communication methods. In circumstances where we reasonably believe there is an imminent threat to someone’s life or physical safety, we may disclose limited relevant information to emergency services, law enforcement, or other appropriate parties where permitted or required by applicable law. We do not contact emergency services, authorities, or family members automatically based on an automated detection alone.

Important limitations. Mindless Journey does not guarantee that harmful or concerning content will be detected, reviewed, or acted upon. The Community is not monitored continuously or in real time. Mindless Journey is not an emergency service, healthcare provider, therapist, or crisis-response organization, and is not a substitute for professional care. If you need immediate assistance, contact your local emergency services (911 in the US) or call or text 988 — the Suicide & Crisis Lifeline (US).

Important Journal Privacy Distinction. Private Journal entries are not part of Community moderation or the Community human-review process. They are not publicly visible, are not used for Community moderation or Community safety monitoring, and are not made available to administrators through the Community safety review system. If the app performs concerning-language detection while you write a private Journal entry, that processing occurs on your device solely for the purpose of displaying appropriate safety resources on your own screen. It does not create an admin-visible copy of your private Journal entry for Community safety review, is not stored as moderation data, and does not mean anyone is reading your private journal.

Access, security, and retention. Safety review records are limited to authorized administrators through role-based access controls, access to them is logged, and they are automatically deleted after a limited retention period rather than kept indefinitely.

12. Children

The app is not intended for anyone under 16. Do not use the app or provide personal data if you are under this age.

13. Changes to this notice

We may update this notice from time to time. Material changes will be announced in the app or by email.