“GDPR” means the General Data Protection Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
“EEA” includes all current member states to the European Union and the European Economic Area.
“Process”, in respect of personal data, includes to collect, store, and disclose to others.
TABLE OF CONTENTS
We collect data you give us voluntarily (for example, when you enter you age in the app or send us an email). We also may receive data about you from third parties (for example, when you sign in via Apple). Finally, we collect data automatically (for example, your IP address).
You provide us information about yourself when you register for and/or use the Service. For example: name, age, anxiety level, email address.
When you use sign in with Apple to register an account in the App, we get personal data from your Apple ID account. This data may include, in particular, your name and verified email address. You may choose to share your real email address or an anonymous one that uses the private email relay service. Apple will show you their detailed privacy information on the sign in with Apple screen. Find more about sign with Apple here.
We collect data about your referring app or URL (that is, the app or place on the Web where you were when you tapped on our ad).
We collect data from your mobile device. Examples of such data include: language settings, IP address, time zone, type and model of a device, device settings, operating system, Internet service provider, mobile carrier, hardware ID, and Facebook ID.
We record how you interact with our Service. For example, we log your taps on certain areas of the interface, the features, and content you interact with, programs you follow, how often you use the App, how long you are in the app, your program progress, and your subscription orders. We also record the ads in our App with which you interact (and the Internet links to which those adds lead).
We collect your Apple Identifier for Advertising (“IDFA”) or Google Advertising ID (“AAID”) (depending on the operating system of your device). You can typically reset these numbers through the settings of your device’s operating system (but we do not control this).
When you make payments through the Service, you need to provide financial account data, such as your credit card number, to our third-party service providers. We do not collect or store full credit card number data, though we may receive credit card-related data, data about the transaction, including: date, time and amount of the transaction, the type of payment method used.
A cookie is a small text file that is stored on a user’s computer for record-keeping purposes. Cookies can be either session cookies or persistent cookies. A session cookie expires when you close your browser and is used to make it easier for you to navigate our Service. A persistent cookie remains on your hard drive for an extended period of time. We also use tracking pixels that set cookies to assist with delivering online advertising.
Cookies are used, in particular, to automatically recognize you the next time you visit our website. As a result, the information, which you have earlier entered in certain fields on the website may automatically appear the next time when you use our Service. Cookie data will be stored on your device and most of the times only for a limited time period.
We process your personal data:
This includes enabling you to use the Service in a seamless manner and preventing or addressing Service errors or technical issues.
To host personal data and enable our App to operate and be distributed we use Amazon Web Services, which is a hosting and backend service provided by Amazon.
We process your personal data, in particular, such as your characteristics and preferences, to adjust the content of the Service and provide content tailored to your personal preferences. As a result of such processing, you get access, for example, to a plan tailored for achieving your goals.
We communicate with you, for example, by push notifications. These may include reminders and motivational messages encouraging you to follow your plan. As a result, you may, for example, receive a push notification every day at a particular time reminding you to make a note in your mind diary. To opt out of receiving push notifications, you need to change the settings on your device.
The services that we use for these purposes may collect data concerning the date and time when the message was viewed by our App’s users, as well as when they interacted with it, such as by clicking on links included in the message.
This helps us to better understand our business, analyze our operations, maintain, improve, innovate, plan, design, and develop the Service and our new products. We also use data for statistical analysis purposes, to test and improve our offers. This enables us to better understand what features and plans of the Services our users like more, what categories of users use our Services. As a consequence, we often decide how to improve the Service based on the results obtained from this processing. For example, if we discover that users like the mind diary section, we may develop and introduce a new features for this area into the App.
To perform research and analysis about how users interact with our App we use Branch. Branch enables us to understand, in particular, how users find us (for example, who was the advertiser that delivered an ad to users, which led you to an app store with our App). Branch also provides us with different analytics tools that enable us to research and analyze your use of the Service.. Appsflyer allows you to opt out of having data from my device sent to Branch’s servers for apps usage collection.
We process your personal data for our marketing campaigns. We may add your email address to our marketing list, provided we receive consent or otherwise establish legal basis for sending you marketing communications. As a result, you will receive information about our products, such as for example, special offers. If you do not want to receive marketing emails from us, you can unsubscribe following instructions in the footer of the marketing emails.
We may also show you advertisements in our App, and send you push notifications for marketing purposes. To opt out of receiving push notifications, you need to change the settings on your device.
We and our partners, use your personal data to tailor ads and possibly even show them to you at the relevant time. For example, if you have installed our App, you might see ads of our products, for example, in your Facebook’s feed.
How to opt out or influence personalized advertising
iOS: On your iPhone or iPad, go to “Settings,” then “Privacy” and tap “Advertising” to select “Limit Ad Track”. In addition, you can reset your advertising identifier (this also may help you to see less of personalized ads) in the same section.
Android: To opt-out of ads on an Android device, simply open the Google Settings app on your mobile phone, tap “Ads” and enable “Opt out of interest-based ads”. In addition, you can reset your advertising identifier in the same section (this also may help you to see less of personalized ads).
To learn even more about how to affect advertising choices on various devices, please look at the information available here.
In addition, you may get useful information and opt out of some interest-based advertising, by visiting the following links:
• Network Advertising Initiative – http://optout.networkadvertising.org/
• Digital Advertising Alliance – http://optout.aboutads.info/
• Digital Advertising Alliance (Canada) – http://youradchoices.ca/choices
• Digital Advertising Alliance (EU) – http://www.youronlinechoices.com/
• DAA AppChoices page – http://www.aboutads.info/appchoices
We value your right to influence the ads that you see, thus we are letting you know what service providers we use for this purpose and how some of them allow you to control your ad preferences.
We use Facebook Ads Manager together with Facebook Custom Audience, which allows us to choose audiences that will see our ads on Facebook or other Facebook’s products (for example, Instagram). Through Facebook Custom Audience we may create a list of users with certain sets of data, such as an IDFA, choose users that have completed certain actions in the App (for example, installed it). As a result, we may ask Facebook to show some ads to a particular list of users. As a result, more of our ads may show up while you are using Facebook or other Facebook’s products (for example, Instagram). You may learn how to opt out of advertising provided to you through Facebook Custom Audience here.
Google Ads is an ad delivery service provided by Google that can deliver ads to users. In particular, Google allows us to tailor the ads in a way that they will appear, for example, only to users that have conducted certain actions with our App (for example, show our ads to users who have purchased a subscription). Some other examples of events that may be used for tailoring ads include, in particular, installing our App, finishing a self-care program. Google allows its users to opt out of Google’s personalized ads and to prevent their data from being used by Google Analytics.
We provide paid products and/or services within the Service. For this purpose, we use third-party services for payment processing (for example, payment processors). As a result of this processing, you will be able to make a payment for our Service and we will be notified that the payment has been made and will provide you with. We will not store or collect your payment card details ourselves. This information will be provided directly to our third-party payment processors.
We use personal data to enforce our agreements and contractual commitments, to detect, prevent, and combat fraud. As a result of such processing, we may share your information with others, including law enforcement agencies (in particular, if a dispute arises in connection with our Terms and Conditions of Use).
We may process, use, or share your data when the law requires it, in particular, if a law enforcement agency requests your data by available legal means.
In this section, we are letting you know what legal basis we use for each particular purpose of processing. For more information on a particular purpose, please refer to Section 2.
We process your personal data, in particular, under the following legal bases:
– To send you marketing communications
Under this legal basis we:
– Provide our Service (in accordance with our Terms and Conditions of Use)
– Customize your experience
– Manage your account and provide you with customer support
– Communicate with you regarding your use of our Service
– Process your payments
We rely on legitimate interests:
• to communicate with you regarding your use of our Service
This includes, for example, sending you push notifications reminding you to make a note in your mind diary. The legitimate interest we rely on for this purpose is our interest to encourage you to use our Service more often. We also take into account the potential benefits to you of following plan, which may lead you to a better lifestyle.
• to research and analyze your use of the Service
Our legitimate interest for this purpose is our interest in improving our Service so that we understand users’ preferences and are able to provide you with a better experience (for example, to make the use of the App easier and more enjoyable, or to introduce and test new features).
• to send you marketing communications
The legitimate interest we rely on for this processing is our interest to promote our Service in a measured and appropriate way.
• to personalize our ads
The legitimate interest we rely on for this processing is our interest to promote our Service in a reasonably targeted way.
• to enforce our Terms and Conditions of Use and to prevent and combat fraud
Our legitimate interests for this purpose are enforcing our legal rights, preventing and addressing fraud and unauthorised use of the Service, non-compliance with our Terms and Conditions of Use.
We share personal data with third parties that we hire to provide services or perform business functions on our behalf, based on our instructions. We share your personal information with the following types of service providers:
– cloud storage providers (Amazon)
– data analytics providers (Facebook, Google, Branch, Firebase, Amplitude, Segment)
– measurement partners
– marketing partners (in particular, social media networks, marketing agencies, email delivery services, Facebook, Google, Snapchat)
– payment processing providers
– communication services providers
We may use and disclose personal data to enforce our Terms and Conditions of Use, to protect our rights, privacy, safety, or property, and/or that of our affiliates, you or others, and to respond to requests from courts, law enforcement agencies, regulatory agencies, and other public and government authorities, or in other cases provided for by law.
As we develop our business, we may buy or sell assets or business offerings. Customers’ information is generally one of the transferred business assets in these types of transactions. We may also share such information with any affiliated entity (e.g. parent company or subsidiary) and may transfer such information in the course of a corporate transaction, such as the sale of our business, a divestiture, merger, consolidation, or asset sale, or in the unlikely event of bankruptcy.
To be in control of your personal data, you have the following rights:
Accessing / reviewing / updating / correcting your personal data. You have the right to review, edit, or change the personal data that you had previously provided to us in the profile section of the App. If you would like to receive a copy of data we process, please send us a data access request.
Deleting your personal data. You can request erasure of your personal data, as permitted by law. When you request deletion of your personal data, we will use reasonable efforts to honor your request. In some cases we may be legally required to keep some of the data for a certain time; in such event, we will fulfill your request after we have complied with our obligations.
Objecting to or restricting the use of your personal data. You can ask us to stop using all or some of your personal data or limit our use thereof.
The right to lodge a complaint with supervisory authority. We would love you to contact us directly, so we could address your concerns. Nevertheless, you have the right to lodge a complaint with a competent data protection supervisory authority, in particular in the EU Member State where you reside, work or where the alleged infringement has taken place.
The right to data portability. If you wish to receive your personal data in a machine-readable format, you can do so by requesting a copy of your personal data as described above. The data will be made available to you in the .json file or other file format.
To exercise any of the available to you privacy rights, please send a request to firstname.lastname@example.org.
We do not knowingly process personal data from persons under 16 years of age. If you learn that anyone younger than 16 has provided us with personal data, please contact us at email@example.com.
In particular, if we transfer personal data originating from the EEA to countries with not adequate level of data protection, we use one of the following legal bases: (i) Standard Contractual Clauses approved by the European Commission (details available here), or (ii) the European Commission adequacy decisions about certain countries (details available here).
This section provides additional details about how we process personal data of California consumers and the rights available to them under the California Consumer Privacy Act (“CCPA”) and California’s Shine the Light law. Therefore, this section applies only to residents of California, United States.
Subject to certain limitations, the CCPA provides California consumers the right to request to know more details about the categories or specific pieces of personal information we collect (including how we use and disclose this information), to delete their personal information, to opt-out of any “sales” that may be occurring, and to not be discriminated against for exercising these rights.
California consumers may make a request pursuant to their rights under the CCPA by contacting us at firstname.lastname@example.org. We will verify your request and inform you accordingly. You may also designate an authorized agent to exercise these rights on your behalf.
Access rights under California’s Shine the Light
California also provides its residents with additional access rights. Under Shine the Light law, the residents may ask companies once a year what personal information they share with third parties for those third parties’ direct marketing purposes. Learn more about what is considered to be personal information under the statute.
To obtain this information from us, please send an email message to email@example.com, which includes “Request for California Shine the Light Privacy Information” on the subject line and your state of residence and email address in the body of your message. Please be aware that not all information sharing is covered by the “Shine the Light” requirements and only information on covered sharing will be included in our response.
Yevhenii Orenchuk, a private entrepreneur registered in the Ukraine (with registered office at Ukraine, Lviv, Kozelnytska 2, 79000) will be the controller of your personal data.
Effective as of: 30 July 2021