Privacy Policy

1. What we collect, and when

While you take the quiz, your answers are kept only in your own browser. Nothing you tap is saved on our servers until you enter your email on the last step.

When you submit your email, we save:

• your email address and whether you agreed to get reminder emails from us;
• your quiz answers, and the score and profile calculated from them;
• the ad or link that brought you to us (campaign tags such as utm_source), and the language of the page;
• unless you turned Meta's ad cookie off: the identifiers that cookie holds, the page you were on and your browser's name and version, so we can tell Meta about your sign-up and a later purchase (see section 4).

When you buy a plan, we also keep the plan you chose, what you paid, the status of your subscription and the references our payment provider gives us for it. Your card details go directly to the payment provider; we never receive or store your full card number.

As you move through the site we record which screens are shown and which steps are completed, linked to a random identifier rather than to your name or email. The answers themselves are not part of these usage records.

In the app we keep:

• your email address, or the private identifier Sign in with Apple gives us;
• what you send it — voice notes, typed messages, photos and links you share, and what you tell it about yourself — and what it builds from them: reminders, lists, notes, routines, tasks and a short history;
• voice notes only until they are turned into text: the audio is deleted straight after, the text stays;
• if you connect your calendar: the titles, times and places of the next two weeks' events in the calendars you choose. Notes, guests and attachments stay on your phone. If you also turn on "time to leave", your phone works out the travel time itself and sends us only the minutes — your location never leaves the phone;
• your device's details we need to deliver reminders: a random installation number, the push notification token, the app version, the phone's language and time zone;
• if you subscribe in the app: the status of your subscription, which we get from Apple through RevenueCat. Apple takes the payment; we never see your card or Apple Account details.

2. Your answers are about your health

Answers about attention, organisation and restlessness can say something about your health, so we treat them as sensitive. We save them only because you ask us to — by submitting your email to get your profile — and we rely on that consent to do it. You can withdraw it at any time by asking us to delete your data (see "Your choices and rights").

What you tell the app can say something about your health too — a medication reminder, a doctor's appointment. We treat it the same way, and the app asks for your consent before anything you say is sent to the AI services described in section 4.

3. Why we use it

• To build your profile and plan, show them to you and email you a copy, with a link that opens them again on any device.
• To take payment, run your subscription and let you into the app with the same email.
• To run the app's assistant for you: understand what you said, set the reminders, keep the lists, answer your questions, and carry out the tasks you hand it.
• To answer you when you write to us, and to handle refunds.
• To see how the quiz and the app are used, fix what's broken and decide what to improve.
• To learn which of our ads bring people to the quiz, and to let Meta measure our ads on Facebook and Instagram (you can turn this off, see section 4).
• To send up to three reminder emails about your plan in the days after the quiz — only if you agreed to them, not while you have an active plan, and with an unsubscribe link in every one.
• To meet legal duties, such as keeping records of payments.

Under EU and UK law we rely on your consent for the quiz answers, the reminder emails and sending what you tell the app to the AI services; on our contract with you for the subscription and the app itself; on our legitimate interest in running and improving the service for usage records; and on legal obligations for payment records.

4. Who else handles it

We do not sell your personal information, and we do not share your quiz answers with advertisers or ad networks.

We use Meta's ad cookie to measure our ads. Meta Platforms receives that you opened our pages, that you left your email and that you bought a plan (with its price), together with your email address in hashed (scrambled) form, the cookie's identifiers, your IP address and your browser's details. Meta uses this to measure our ads and to show them to people likely to find them useful, under its own privacy policy. It never receives your quiz answers, your score or your profile. You can turn this off at any time at the end of this page; if your browser sends a Global Privacy Control signal, we treat it as that request, and none of this is sent.

We use a small number of companies to run the service. They handle data only on our instructions:

• payment processing (Stripe);
• website hosting and our database;
• the app's server and database;
• understanding what you say in the app and doing what you ask (Anthropic, the maker of Claude);
• turning voice notes into text (Deepgram);
• in-app subscriptions (Apple, and RevenueCat, which tells us whether your App Store subscription is active);
• delivering notifications to your phone (Apple Push Notification service);
• sending email (Resend);
• product analytics.

Anthropic and Deepgram process what the app sends them only to give you an answer. Under our agreements with them they do not use it to train their models, and they keep it only as long as they need to process it and to prevent abuse.

We may also disclose information if the law requires it, or to the new owner if the service is ever sold — under the same commitments as in this policy.

5. Storage on your device

We use your browser's local storage to remember your progress, so a refresh or a later visit picks up where you left off. Our payment provider may set cookies that are needed to prevent fraud and keep payments secure. We also use Meta's advertising cookie (_fbp, and _fbc when you came from a Meta ad) to measure our ads. You can turn it off at any time at the end of this page.

6. How long we keep it

• Quiz answers, profile and email: until you ask us to delete them, or for 24 months after your last activity if you never bought a plan.
• Subscription and payment records: for as long as the law requires us to keep accounting records.
• Usage records: up to 24 months.
• What you put into the app: until you delete it, or delete your account (Me → Erase everything, or Delete my account on the sign-in screen), which removes it all.
• Voice recordings: deleted as soon as they are turned into text.
• Your calendar: replaced with each sync from your phone, and deleted when you stop mirroring it.
• If you unsubscribe: your email address stays on a do-not-email list, so we never write to you again. We keep it for that alone.

7. Where it is processed

The companies that help us run the service may process data in countries other than yours, including outside the European Economic Area. Where they do, the transfer is covered by safeguards recognised by law, such as the European Commission's standard contractual clauses.

8. Your choices and rights

You can ask us to:

• show you the information we hold about you, or send you a copy;
• correct it;
• delete it — including your quiz answers and profile; in the app you can do it yourself in Me → Erase everything;
• stop using it for a particular purpose, or withdraw a consent you gave;
• stop sending your visits to Meta (the switch at the end of this page does it straight away);
• stop the reminder emails (or just use the unsubscribe link in any of them).

Write to support@mentalbalance.app from the email address you used with us. We answer within 30 days. If you are in the EU or the UK and think we got something wrong, you can also complain to your data protection authority.

9. Children

The service is for adults. We do not knowingly collect information from anyone under 18; if you believe a child has used it, tell us and we will delete the data.

10. Security

Data is encrypted in transit, access to it is limited to the people and systems that need it, and card payments are handled entirely by a certified payment provider. The links in our emails open your saved profile without a password, so keep them to yourself: anyone you forward one to can open it. No system is perfectly secure; if something happens that affects you, we will tell you.

11. Changes to this policy

If we change how we handle your information, we will update this page and, for significant changes, email you first. The date at the top shows the current version.

Contact

Questions about this document? Write to support@mentalbalance.app and a person will answer.