Privacy Policy

1. Information we collect

We collect information that you provide directly, that is generated when you use MindfulFlow, and that comes from our service providers as described below.

• Account and contact data: such as name, email address, and credentials (passwords are hashed; we do not store passwords in plain text).
• Usage and device data: such as pages or screens viewed, features used, session duration, approximate region derived from IP address, browser or app version, operating system type and version, device language, and diagnostic information needed to operate and secure the service. On mobile, we may collect app-specific identifiers required for sign-in, notifications (if you opt in), fraud prevention, and crash reporting, consistent with your device settings and permissions.
• Payment information: subscriptions and billing are processed by our payment provider, Stripe. We do not store full payment card numbers on our servers; Stripe handles card data subject to its own privacy practices (stripe.com/privacy).
• Communications: messages you send to support (e.g., email or WhatsApp) and optional feedback you choose to provide.
• Guru (AI coaching): text you submit is sent to our systems to generate responses and to maintain safety (including crisis-language detection where implemented). We do not sell your chat content to third parties for their marketing.

You are not required to share medical diagnoses or clinical mental-health records to use MindfulFlow. Any wellness-related information you voluntarily provide is used to deliver the service and improve relevance of suggestions—not as a substitute for professional care.

2. Cookies, analytics, and similar technologies

On our website, we use cookies and similar technologies for essential operation, preferences (such as display settings where applicable), and analytics. We use Google Analytics (Google LLC) to understand aggregated traffic and usage (for example, measurement ID G-T0P857GKV2). Google may collect identifiers and usage data subject to Google’s Privacy Policy. You can manage certain cookie preferences in your browser and, where offered, via our Cookie Policy.

Our mobile apps do not use cookies in the same way as a browser; they may use platform-provided identifiers and SDK-level analytics consistent with this policy and Google Play’s requirements. If we add optional analytics or crash-reporting SDKs in the app, we will list them here and in Play Console data safety disclosures.

3. How we use information

We use the information above to:

• Provide, maintain, and improve MindfulFlow (website and apps), including courses, meditations, and Guru.
• Create and manage your account; authenticate you; respond to requests.
• Process payments and subscriptions; communicate billing and service-related notices.
• Protect security, prevent fraud and abuse, and comply with legal obligations.
• Understand aggregated usage to improve reliability and product quality (analytics data is used in aggregate where possible).

4. Legal bases (EEA/UK visitors)

Where applicable law requires a legal basis, we rely on performance of a contract (providing the service you request), legitimate interests (security, improvement, and communications that are not overridden by your rights), consent where required (e.g., certain cookies or marketing), and legal obligation where the law requires processing.

5. Sharing and subprocessors

We do not sell your personal information. We may share information with categories of recipients including:

• Payment processing: Stripe (and its subprocessors) for checkout, billing, and subscription lifecycle events tied to your account.
• Infrastructure and hosting: cloud hosting, databases, email delivery, and security vendors that process data on our behalf under appropriate agreements.
• Analytics: Google (Google Analytics on the web as described above).
• Professional advisers when required (e.g., lawyers, auditors).
• Authorities when required by law or to protect rights, safety, and security.

6. Security and transmission

We use technical and organizational measures designed to protect your information, including encryption in transit (such as HTTPS/TLS) between your browser or app and our servers where supported. No method of transmission or storage is 100% secure; we encourage strong passwords and caution when sharing sensitive information.

7. Retention

We retain information only as long as needed for the purposes above, unless a longer period is required by law. Account data is generally kept for the life of your account plus a reasonable period afterward for backups, disputes, and legal compliance.

8. Your choices, rights, and account deletion

Depending on where you live, you may have rights to access, correct, delete, or export personal information, or to object to or restrict certain processing. To exercise these rights or to request deletion of your account and associated data, contact us at info@mindfulflow.io. We will respond in line with applicable law. You may also lodge a complaint with your local data protection authority.

California residents may have additional rights under the CCPA/CPRA (e.g., to know categories of data collected, to opt out of sale—note we do not sell personal information as defined by those laws, and to non-discrimination for exercising rights).

9. Children

MindfulFlow is not directed at children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have, please contact us and we will delete it.

10. International users

If you access MindfulFlow from outside the United States, your information may be processed in the United States or other countries where we or our providers operate. Those jurisdictions may have different data protection laws than your country.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the “Last updated” date. Material changes may be communicated by email or an in-app or on-site notice where appropriate. For Google Play, the policy URL remains https://mindfulflow.io/privacy unless we publish a redirect or notice.

12. Contact

Data controller: Orbdeep LLC, operating MindfulFlow
30 N Gould St, Ste R, Sheridan, WY 82801, United States
Email: info@mindfulflow.io
Phone: +1 (216) 224-9073

For terms that govern use of the service, see our Terms of Service.