Privacy Notice

1. Who we are

This app ("Mindless Journey") is operated by A Mindless Journey ("we", "us", "our"). We act as the data controller for personal information collected through the app and website (mindlessjourney.life). You can reach us at privacy@mindlessjourney.life.

2. Data we collect

• Account data: name, email address, password credentials, authentication tokens.
• Wellness content you create: mood check-ins, journal entries, tags, streak counts, audio favorites, community posts and comments.
• Usage data: pageviews, referrers, session identifiers, device/browser metadata, IP address.
• Support and feedback: messages you send us.
• Payment metadata: subscription status, plan, renewal date. Card and billing details are collected and stored by our payment provider (see §5), not by us.

3. Purposes & legal bases

• Providing the service and your account — performance of a contract.
• Security, fraud prevention, and abuse protection — legitimate interests.
• Product analytics and improvement — legitimate interests.
• Customer support — performance of a contract / legitimate interests.
• Marketing emails, where offered — consent (you can withdraw at any time).
• Complying with tax, accounting, and legal obligations — legal obligation.

4. How we share data

We share personal data only with:

• Hosting & backend infrastructure (managed cloud database, authentication, and edge functions used to run the app).
• Email delivery providers used to send transactional messages.
• Paddle.com Market Ltd. as Merchant of Record for sale of subscriptions, payment processing, subscription management, tax compliance, refunds, and invoicing.
• Professional advisers (legal, accounting) where reasonably needed.
• Authorities where required by law or to protect our rights.

We do not sell your personal data.

5. Payments & Merchant of Record

Purchases are processed by Paddle.com Market Ltd., our Merchant of Record. Paddle collects billing information, charges your payment method, calculates and remits applicable taxes, and handles refunds and chargebacks. Paddle's handling of your data is described in Paddle's Privacy Policy.

6. Data retention

We keep account data and content for as long as your account is active. When you delete your account (Settings → Delete account), we delete or anonymise your personal data within 30 days, except where we must retain limited records for legal, tax, accounting, or fraud-prevention purposes (typically up to 7 years for financial records).

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or object to processing of your personal data, to data portability, and to withdraw consent. EEA/UK residents may lodge a complaint with a supervisory authority. To exercise these rights, email privacy@mindlessjourney.life. We aim to respond within 30 days.

8. Security

We apply appropriate technical and organisational safeguards including encryption in transit (TLS), encryption at rest for our managed database, row-level security so only you can read your private entries, scoped access controls, and monitoring for suspicious activity. No system is perfectly secure; please use a strong, unique password.

9. International transfers

Our providers may process data in the United States and other countries. Where required, we rely on Standard Contractual Clauses or adequacy decisions to protect transfers from the UK/EEA.

10. Cookies & analytics

We use strictly necessary cookies and local storage to keep you signed in and to remember preferences. We also record basic first-party pageview data (path, referrer, anonymised session ID) to understand product usage. We do not use third-party advertising cookies.

11. Children

The app is not intended for anyone under 16. Do not use the app or provide personal data if you are under this age.

12. Changes to this notice

We may update this notice from time to time. Material changes will be announced in the app or by email.