Privacy Policy.
Effective May 23, 2026
Mindvolve is built on the assumption that meditation is private. This document explains, plainly, how we honour that.
1. Who we are
Mindvolve is published by Formless Inc. ("Mindvolve", "we", "us"). The app is available at mindvolve.app, on the App Store, and on Google Play.
2. The short version
- Sessions are stored on your device.
- Nothing leaves your device unless you sign in.
- We never sell, share, or trade your data.
- We do not track you for advertising.
- Email sign-in, Sign in with Apple, Apple Health, and marketing emails are all optional. You opt in.
3. What we collect, by feature
Local sessions (always)
Every meditation you record is stored on your device — date, mode (silent, frequencies, breathing, guided, manifestation), planned duration, and time actually practised. This stays on your device unless you sign in.
Sign in (optional)
You can sign in with email magic-link or Sign in with Apple. We store:
- The email address you use, so we can send the magic link or recognise your account on return.
- If you use Sign in with Apple, the relay address Apple gives us (and your name only if you choose to share it).
- The session rows above, attached to your account, so they sync across devices.
You can use Mindvolve forever without signing in. Sign-in exists only to back your history up and sync it across devices.
Apple Health (optional, iOS only)
If you turn on "Sync to Apple Health" in Settings, each completed meditation is written to Apple Health as a mindful session. We do not read anything from Health. iOS controls this permission — you can revoke it at any time in Settings → Health → Data Access & Devices → Mindvolve.
Help & Requests (optional)
Messages you submit through the in-app Help & Requests form are stored against your account (or anonymously if you are not signed in) so we can reply. You can also email us directly at hello@mindvolve.app instead.
Reminders (optional)
The daily reminder is a local notification scheduled on your device by iOS or Android. We do not see when it fires or whether you tap it.
Marketing emails (optional, off by default)
"Product updates and new content" is off by default. You can turn it on under Settings → Email preferences. If you turn it on, we may send the occasional note about new meditations or features — never more than that. Every email has a one-tap unsubscribe link. The toggle in Settings is the single source of truth.
Subscription (Mindvolve Pro, if you purchase)
If you subscribe to Mindvolve Pro, Apple's StoreKit (iOS) or Google Play Billing (Android) processes the payment. We never see your card details. We do see a subscriber identifier and whether your subscription is active, so we can unlock Pro features.
4. What we never collect
- Contacts, calendar, photos, motion, location.
- Microphone audio. The only audio Mindvolve handles is the meditation playback delivered to you, not the other way around.
- Browsing history outside Mindvolve.
- Voice samples. Mindvolve does not record your voice.
- Anything for advertising profiles.
5. Who can see your data
- You. Always.
- Mindvolve operators. Only when responding to a Help & Requests message you sent, or when investigating a bug at your request. Our database enforces row-level security so accounts cannot read each other's data, and operators do not browse user sessions.
- Apple / Google. Standard purchase receipts if you subscribe to Mindvolve Pro.
- Our sub-processors. Listed below.
6. Sub-processors
We use these companies to provide the service. Each receives only what it needs to do its job.
| Service | Purpose | Data shared |
|---|---|---|
| Supabase | Database, authentication, file storage | Email, session rows, requests |
| Cloudflare R2 | Audio hosting | Nothing user-specific (public read of meditation audio) |
| Apple | Sign in with Apple, App Store payments | Whatever Apple itself chooses to share |
| Play Store payments (Android) | Whatever Google itself chooses to share | |
| RevenueCat | Subscription state | Anonymous subscriber ID and entitlement |
| Vercel | Marketing site hosting + cookieless analytics | Aggregate, anonymised page views for mindvolve.app only |
All are bound by their own privacy commitments. None receive your meditation audio playback or your raw practice content.
7. How long we keep your data
- Local sessions: until you delete the app.
- Cloud sessions (when signed in): until you delete your account.
- Marketing email opt-in: until you turn it off or delete your account.
- Help & Requests messages: up to 12 months, then deleted.
8. Your rights
At any time you can:
- Export your data. Email hello@mindvolve.app and we will send you a JSON copy of everything we hold about you within 30 days.
- Delete your account. Email hello@mindvolve.app and we will permanently erase your account and all associated rows within 7 days.
- Withdraw consent. Toggle Marketing emails off in Settings, revoke Apple Health permission in iOS Settings, or sign out and stop using the app.
If you are in the EU or UK, you also have the rights to rectify, restrict, and object under GDPR Articles 16–21. If you are in California, equivalent rights to know, delete, correct, and limit apply under the CCPA/CPRA.
9. Children
Mindvolve is not for children under 13 (under 16 in the EU). We do not knowingly collect data from anyone under that age. If you believe a child has signed up, email hello@mindvolve.app and we will remove the account.
10. International transfers
Our database and audio hosting providers operate in the United States and the European Union. By using Mindvolve outside those regions, you understand your data may be transferred and stored there under standard contractual clauses.
11. Security
Data is encrypted in transit (HTTPS / TLS 1.2+). Database storage is encrypted at rest. Authentication tokens live in your device's secure storage (iOS Keychain / Android Keystore). No system is perfectly secure, but Mindvolve is built so a breach of our infrastructure cannot read another user's sessions.
12. Cookies and analytics
The marketing site (mindvolve.app) stores your colour scheme preference in your browser's local storage. We use Vercel Web Analytics, which is cookieless and records aggregate, anonymised page views — no advertising identifiers, no third-party tracking, no device fingerprints. We do not set any other cookies on the marketing site.
The app itself does not use cookies.
13. Changes
If we materially change this policy, the effective date above will change and we will surface the update the next time you open the app. Continued use after that means you accept the changes.
14. Contact
Questions, requests, deletions, anything legal:
Formless Inc.18117 Biscayne Blvd
Suite #2339
Miami, FL 33160
United States