PRIVACY POLICY

1. Who we are

THE MIND is operated by Dorbol Business ("we"). If you have questions about this policy or your data, contact us at dorbolbusiness@gmail.com.

2. Who this Service is for

THE MIND is intended for adults seeking self-discovery tools, mental health self-assessments, and personal growth tracking. It is not directed at children, and we do not knowingly collect information from anyone under 16. If you believe a child has created an account, contact us and we will delete it.

If you are in a mental health crisis, THE MIND is not a substitute for professional care or emergency services. Please contact a licensed provider or your local emergency number.

3. Information we collect

3.1 Account information

• Email address and password (if you sign up directly), or
• Name, email address, and profile photo (if you sign in with Google — see §7).

3.2 Content you create

This is the sensitive part, and we want to be direct about it. As part of using THE MIND, you may choose to record:

• Assessment results — responses to self-assessments covering topics including depression/anxiety symptoms, childhood experiences, self-image, moral values, relationships, nervous-system triggers, and related psychological/personal-history topics.
• Journal entries and notes — free-text reflections you write, optionally tagged, which may reference personal experiences, trauma, or mental health history.
• Habit and progress data — which lessons/pillars you've completed, streaks, and habits you track (including a personal finance/budget tracker if you use the Tools section).
• Community posts — anything you choose to post in the Community area, which may be visible to other users.

We treat the content above as sensitive personal information. We do not sell it, and we do not use it to train third-party AI models or share it with advertisers.

3.3 Technical/usage information

• Log and error data (via Bugsnag, our error-monitoring provider) to help us find and fix bugs.
• Basic performance/traffic metrics (via Cloudflare) to keep the site fast and secure.
• Local device storage (not third-party tracking cookies) to remember preferences like light/dark mode, your last-visited page, and sound settings.

3.4 Payment information

Paid plans are processed through Stripe. We do not receive or store your full card number — Stripe handles that directly and shares with us only what's needed to confirm your payment and manage your subscription (e.g. plan status, last 4 digits of card, billing email).

4. How we use your information

We use your information to:

• Provide the Service (save your assessment results, journal entries, and progress across devices/sessions);
• Authenticate you and keep your account secure;
• Process payments for paid plans;
• Fix bugs and improve reliability;
• Communicate with you about your account (not marketing, unless you opt in separately);
• Comply with legal obligations.

We do not use your journal entries, assessment answers, or other sensitive content for advertising, and we do not sell your personal information.

5. Who we share it with

We share data only with the service providers that help us run THE MIND, each bound to use it only to provide their service to us:

We do not share your data with data brokers or advertisers, and we do not sell personal information as defined under CCPA/CPRA.

We may disclose information if required by law, or to protect the safety of you or others (for example, if content indicates an imminent risk of harm).

6. Where your data is stored

Your data is stored on servers operated by our infrastructure providers (Supabase, hosted on AWS infrastructure in the United States). If you are located outside the United States, including in the EU/EEA/UK, your information will be transferred to and processed in the United States. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for these transfers.

7. Sign in with Google

If you use "Sign in with Google," THE MIND's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only request your basic profile information (name, email) to create and secure your account — we do not request access to your Gmail, Drive, or other Google data.

8. Your rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you;
• Correct inaccurate information;
• Delete your account and all associated data — instantly, from Account → Delete Account, or by emailing us;
• Export your data in a portable format;
• Withdraw consent at any time (this may limit what the Service can do for you);
• (EU/UK) Lodge a complaint with your local data protection authority;
• (California) Know, delete, and opt out of the "sale" or "sharing" of personal information — we do not sell or share your information as those terms are defined under CCPA/CPRA.

To exercise any of these rights, email dorbolbusiness@gmail.com.

9. Data retention

We retain your account and content for as long as your account is active. If you delete your account (Account → Delete Account), all of your content — assessments, journal entries, habits, finance data, and your account itself — is permanently deleted immediately, except where we're required to retain limited billing records by law.

10. Security

We use industry-standard measures to protect your data, including encrypted connections (HTTPS) and database-level access controls that scope your data (assessments, journal entries, notes) so that only you can read it. No system is 100% secure, and we can't guarantee absolute security.

11. Changes to this policy

We may update this policy as the Service changes (for example, once Stripe payments go live). We'll update the "Last updated" date above, and for material changes affecting how sensitive data is used, we will make reasonable efforts to notify you directly.

12. Contact us

Questions, requests, or concerns about this policy or your data: dorbolbusiness@gmail.com