Privacy Policy
Last updated: 25 August 2026
This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the OurMynd mobile application and related services (the "App"), and what rights you have over that information.
1. Who We Are
OurMynd is provided by The Social Globe Ltd ("we", "us", "our"), a company registered in England and Wales under company number 13923693, whose registered office is at 2nd Floor, 112 High Road, Ilford, England, IG1 1BY. OurMynd® is a registered trade mark of The Social Globe Ltd.
We are the data controller for the personal data described in this policy, under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and, where you are in the European Economic Area, the EU General Data Protection Regulation.
Contact: support@ourmynd.com
OurMynd is an AI-powered coaching and productivity application designed to support people with ADHD, executive dysfunction, and related challenges.
2. Information We Collect
Information you provide directly
- Account information: your name, email address, and password, or your Apple or Google sign-in identifier
- Age confirmation: confirmation that you are 16 or over, and your date of birth where you provide it
- Onboarding information: details you share during setup, including your goals, challenges, preferred routines, energy patterns, and how you like to be supported
- Conversations: the messages you send to and receive from the AI coach
- Tasks and goals: the tasks, goals, habits, streaks, and reflections you create in the App
- Shared sessions: which focus rooms and body doubling sessions you join, when, and the generated display name shown to the other participants. Audio in a body doubling session is transmitted live between participants and is not recorded or stored by us. We also keep any report you make about another user
- Payment information: processed by Stripe. We receive confirmation of payment, the plan purchased, and the last four digits and expiry of your card. We never receive or store your full card number
Information collected automatically
- Usage data: how you interact with the App, features used, and session information
- Device information: device type, operating system, and app version
- Notification preferences: your chosen reminder times and whether push notifications are enabled
Sensitive information
Because OurMynd supports people with ADHD and related conditions, some of what you share may reveal information about your mental health or wellbeing. This is special category data under data protection law and we apply additional safeguards to it.
We process it only where you have given us your explicit consent. That consent is asked for separately in the App, on its own screen, before you share anything of this kind. It is not bundled into your acceptance of our Terms & Conditions, it is not a condition of creating an account, and you can withdraw it at any time in Settings without losing access to the rest of the App. Withdrawing it stops future processing and lets you delete what has already been stored.
3. How We Use Your Information, and Our Legal Basis
Data protection law requires us to have a legal basis for every use of your data. Ours are set out below.
| What we do | Legal basis |
|---|---|
| Create and run your account, and provide the coaching, planning and reminder features you signed up for | Performance of our contract with you |
| Generate your daily plans, reminders, and reflections, and remember your goals and patterns over time so the coach becomes more helpful | Performance of our contract with you, and your explicit consent where the information concerns your health |
| Process anything you share that relates to your mental health or wellbeing | Your explicit consent, which you give separately in the App and can withdraw at any time |
| Send you notifications and reminders you have asked for | Performance of our contract with you |
| Take payment and manage your subscription | Performance of our contract with you |
| Provide customer support and handle complaints | Performance of our contract with you, and our legitimate interest in running our business well |
| Keep the App secure, prevent fraud and abuse, and act on reports about conduct in shared sessions | Our legitimate interest in protecting our users and our service, and our legal obligations |
| Understand which features are used, in order to fix and improve the App | Our legitimate interest in improving our service. We use aggregated and pseudonymised data for this wherever we can |
| Send you marketing about OurMynd | Your consent, which you can withdraw at any time. We never send marketing to users under 18 |
| Meet our legal, accounting, and regulatory obligations | Compliance with a legal obligation |
Where we rely on legitimate interests, we have assessed that our interest does not override your rights, and you can object at any time (see section 11). We will stop unless we have compelling grounds to continue.
We do not use your data for anything else. If we ever want to use it for a new purpose, we will tell you first and, where the law requires it, ask your permission.
4. AI Processing and Third-Party AI Providers
To generate your coaching responses, your messages and the relevant context from your account are sent to third-party AI providers, currently Anthropic and OpenAI, who process them and return a response.
- Your conversations are not used to train any AI model. We do not train models on your data, and our agreements with these providers prohibit them from using data submitted through their business interfaces to train or improve their models.
- These providers act as our processors. They may process your data only to return a response to us, and only on our instructions.
- Your data is encrypted in transit.
- Providers retain the content briefly for abuse monitoring as required by their own legal obligations, and then delete it.
If we change AI provider, we will update this policy before the change takes effect.
OurMynd is a coaching and productivity tool and is not a medical device, therapist, or crisis service. Please see our Terms & Conditions.
5. Personalisation and Profiling
The App builds a picture of you over time, drawn from your goals, tasks, routines, reported energy patterns, and conversations, so that the plans and prompts it produces fit you better. This is profiling as data protection law defines it.
- It is used only to personalise the coaching, planning, and reminders you receive
- It is not used to make any decision that produces legal effects concerning you or that similarly significantly affects you, so Article 22 does not apply
- It is not used to build advertising audiences, and we do not share it with advertisers
- Users under 18 are not profiled for marketing purposes at all
- You can see what the App has remembered about you, edit it, and delete it, from the Memory section of the App
6. How We Share Your Information
We do not sell your personal data, and we never have. We share it only with the following categories of recipient:
- AI providers (Anthropic, OpenAI) to generate coaching responses
- Payment processing (Stripe) to take payment and manage subscriptions
- Hosting, database and authentication (Supabase, Fly.io, Google, Apple) to run the App and sign you in
- Real-time audio and video (LiveKit) where you join a body doubling or focus room
- Other users, who see your generated display name and hear your live audio while you are in a focus room or a body doubling session with them. They are never shown your real name or email address
- Professional advisers such as accountants and lawyers, where necessary
- Legal authorities, where we are required to disclose by law, or where disclosure is necessary to protect someone from serious harm
- A buyer or successor, if our business is sold or reorganised. You will be told before your data is transferred, and this policy will continue to apply to it
Every processor is bound by a written contract that requires them to protect your data, to use it only as we instruct, and to delete or return it when the work ends.
7. International Data Transfers
Some of our providers are based outside the UK and the EEA, including in the United States. Where your data is transferred there, we rely on:
- The UK International Data Transfer Addendum to the European Commission Standard Contractual Clauses, for transfers from the UK
- The European Commission Standard Contractual Clauses, for transfers from the EEA
- Adequacy regulations where the destination country has been recognised as providing adequate protection, including the UK Extension to the EU-US Data Privacy Framework where the recipient is certified under it
We assess the risk of each transfer and apply additional safeguards, including encryption in transit and at rest, where they are needed. You can ask us for a copy of the safeguards that apply to a particular transfer by emailing support@ourmynd.com.
8. How Long We Keep Your Data
| What | How long |
|---|---|
| Account, conversations, tasks, goals and memory | For as long as your account is open |
| An account with no sign-in for 24 months | We email you first. If you do not sign in within 30 days of that email, the account and its data are deleted |
| Everything above, after you delete your account | Permanently deleted. Removal from our live systems completes within 30 days, and any copies held in encrypted backups are overwritten within 90 days, after which no copy remains |
| Payment and transaction records | 6 years from the end of the financial year, as UK tax law requires |
| Records of a report, a moderation decision, or a suspension | 2 years, so that repeat behaviour can be identified |
| Records of a data protection request you made | 2 years, as evidence that we handled it properly |
Where we are required to keep something for legal, accounting, or fraud-prevention reasons, we keep only the minimum needed and delete the rest.
9. How We Protect Your Data
- All data is encrypted in transit using TLS, and encrypted at rest by our hosting and database providers
- Access to production systems is restricted to the people who need it, protected by multi-factor authentication, and logged
- Credentials and API keys are held in a secrets store, never in our source code
- We apply security updates to our dependencies and infrastructure on an ongoing basis
- We keep the amount of personal data we hold to what we actually need
No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. If Something Goes Wrong
If a personal data breach occurs, we will report it to the Information Commissioner’s Office within 72 hours of becoming aware of it, unless it is unlikely to result in a risk to you. Where a breach is likely to result in a high risk to your rights and freedoms, we will tell you directly and without undue delay, and explain what has happened and what you can do.
11. Your Rights
You have the right to:
- Be informed about how we use your data, which is what this policy is for
- Access the personal data we hold about you, and receive a copy
- Rectify inaccurate or incomplete data
- Erase your data, often called the right to be forgotten
- Restrict our processing while a dispute about it is resolved
- Object to processing based on our legitimate interests, and to object to direct marketing at any time, which we will always honour
- Portability, meaning you can receive the data you gave us in a structured, commonly used, machine-readable format, and ask us to send it to another provider
- Withdraw consent at any time, including your consent to our processing of health-related information, without affecting anything done before you withdrew it
- Not be subject to a decision based solely on automated processing that produces legal or similarly significant effects. We do not make such decisions
To exercise any right, email support@ourmynd.com. We respond within one month, and will tell you if we need longer because a request is complex. Exercising your rights is free, and we will not treat you differently for doing so. You can also export or delete your account and data directly within the App.
Complaints. If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to a supervisory authority:
- In the UK, the Information Commissioner’s Office at ico.org.uk, or 0303 123 1113
- In the EEA, the data protection authority in the country where you live, work, or where the problem occurred
12. Users Aged 16 and 17, and Children
OurMynd is not for anyone under 16. We do not knowingly collect data from children under 16, and we ask you to confirm your age when you sign up. If we learn that an account belongs to someone under 16, we close it and delete the data. If you believe a child under 16 has given us personal data, contact us and we will remove it.
For users who are 16 or 17, we follow the Information Commissioner’s Age Appropriate Design Code. In practice that means:
- Privacy settings are set to the most protective option by default
- They are not matched with adults through automatic body doubling matchmaking
- Profiles are private by default
- We do not profile them for marketing, and we do not send them marketing
- We do not use design techniques intended to encourage them to give us more data or stay in the App longer than they intend
- We collect the minimum data needed for the features they actually use
13. This Website
The OurMynd website sets no advertising or tracking cookies, and no analytics cookies. Nothing you do here is used to build a profile of you. The only information processed is what your browser sends in the ordinary course of loading the pages, which our hosting provider records for security and reliability.
14. Changes to This Policy
We may update this Privacy Policy. Where a change materially affects how we use your data, we will tell you by email or in the App before it takes effect, and where the law requires it we will ask for your consent. The "Last updated" date at the top shows when it was last revised.
15. Contact Us
If you have any questions about this Privacy Policy or how we handle your data:
Email: support@ourmynd.com
Data Controller: The Social Globe Ltd
2nd Floor, 112 High Road, Ilford, England, IG1 1BY
Registered in England and Wales, company number 13923693
Trading as OurMynd®