Privacy Policy

1. Introduction

Welcome to MindGlow. Your privacy and trust are paramount to us. This Privacy Policy explains how MindGlow ("we," "our," or "us") collects, uses, stores, and protects your personal information when you use our iOS mobile application.

MindGlow is a mental wellness application designed to support your mental health journey through AI-powered conversations, mood tracking, task management, and evidence-based resources. We are deeply committed to protecting your sensitive personal and health information.

2. Information We Collect

2.1 Information You Provide Directly

• Account Information: Email address, username, and authentication credentials when you create an account through Firebase Authentication
• Mood Data: Your mood ratings, emotional states, and related notes that you log in the app
• Task Information: Tasks you create, including titles, descriptions, priorities, deadlines, and completion status
• Assessment Responses: Your answers to mental health screening tools including PHQ-9 (depression), GAD-7 (anxiety), and PSS (stress) assessments
• AI Chat Conversations: Messages you send to Milo, our AI companion, including text content and conversation history
• Affirmation Preferences: Categories and types of affirmations you prefer or interact with
• Journal Entries: Any notes, reflections, or journal content you create within the app

2.2 Information Collected Automatically

• Device Information: iOS version, device model, app version, and unique device identifiers
• Usage Data: Features accessed, time spent in app, interaction patterns, and navigation paths
• Crash Reports: Technical diagnostics and error logs to improve app stability
• Subscription Data: Purchase history, subscription status, and payment information (processed through Apple's App Store and RevenueCat)

3. How We Use Your Information

We use the collected information for the following purposes:

• Provide Core Services: Enable mood tracking, task management, AI conversations, and mental health assessments
• Personalization: Customize affirmations, insights, and recommendations based on your usage patterns
• AI Functionality: Process your chat messages with Milo using OpenAI's GPT models to provide supportive, empathetic responses
• Analytics & Improvement: Analyze aggregated, anonymized usage data to improve app features and user experience
• Account Management: Authenticate users, manage subscriptions, and provide customer support
• Security: Detect and prevent fraud, abuse, and technical issues
• Legal Compliance: Comply with applicable laws, regulations, and legal processes

4. Data Storage & Security

Data Type	Storage Location	Encryption	Retention
App Data (tasks, mood, assessments)	On your iPhone (local storage)	iOS data protection (encrypted at rest)	Until you delete the app or manually clear data
User Authentication	Firebase (Google Cloud, USA)	TLS/SSL encrypted in transit	Until account deletion
Milo AI Chat Messages	OpenAI servers (USA)	In-transit encryption	Processed in real-time, not permanently stored by MindGlow
Subscription Data	RevenueCat (USA)	Industry-standard encryption	Per RevenueCat's retention policy

Security Measures

• All data transmitted between your device and our servers uses TLS/SSL encryption
• Passwords are never stored in plain text; we use Firebase's secure authentication
• Most sensitive data (mood logs, tasks, assessments) is stored locally on your device using iOS's encrypted storage
• We implement industry-standard security practices including regular security audits
• Access to backend systems is restricted to essential personnel only

5. Third-Party Services

MindGlow integrates with the following third-party services to provide functionality:

5.1 OpenAI (Milo AI Chat)

• Purpose: Powers the Milo AI companion feature using GPT models
• Data Shared: Chat messages you send to Milo are sent to OpenAI for processing
• Privacy: OpenAI's API does not use your data to train their models (as of our agreement)
• Policy: OpenAI Privacy Policy

5.2 Firebase (Google)

• Purpose: User authentication, cloud storage, and analytics
• Data Shared: Email, authentication tokens, usage analytics
• Policy: Firebase Privacy Policy

5.3 RevenueCat

• Purpose: Subscription and in-app purchase management
• Data Shared: Purchase receipts, subscription status, anonymous user identifiers
• Policy: RevenueCat Privacy Policy

5.4 Apple App Store

• Purpose: App distribution and payment processing
• Data Shared: Determined by Apple's App Store policies
• Policy: Apple Privacy Policy

6. Your Privacy Rights

Depending on your location, you may have the following rights:

For All Users:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and associated data
• Data Portability: Receive your data in a machine-readable format

For EU/EEA Users (GDPR):

• Right to object to processing
• Right to restrict processing
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

For California Users (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information (Note: We do NOT sell personal information)
• Right to non-discrimination for exercising privacy rights

To exercise any of these rights, please contact us at mindglow.app.supprt@gmail.com

7. Children's Privacy

MindGlow is rated 17+ and is not intended for children under 17 years of age. We do not knowingly collect personal information from individuals under 17. If we discover that we have inadvertently collected information from someone under 17, we will delete it immediately.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at mindglow.app.supprt@gmail.com

8. Health Information Disclaimer

9. Data Retention

• Local Data: Remains on your device until you delete the app or manually clear it
• Account Data: Retained until you request account deletion
• Chat Logs: AI conversations are processed in real-time and not permanently stored by us
• Analytics: Aggregated, anonymized usage data may be retained indefinitely for improvement purposes
• After Account Deletion: We will delete or anonymize your personal data within 30 days, except where retention is required by law

10. International Data Transfers

MindGlow is operated from the United States. If you are located outside the United States, please be aware that information we collect (including through our third-party services) may be transferred to, stored, and processed in the United States and other countries.

By using MindGlow, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection rules than your country.

For users in the EU/EEA, we ensure appropriate safeguards are in place for international transfers, including Standard Contractual Clauses approved by the European Commission.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you through the app or via email
• Request your consent if required by applicable law

We encourage you to review this Privacy Policy periodically. Your continued use of MindGlow after changes are posted constitutes your acceptance of the updated policy.

12. Contact Us

13. Your Consent

By using MindGlow, you acknowledge that you have read and understood this Privacy Policy and agree to its terms. If you do not agree with this policy, please do not use our app.