Last updated: May 31, 2026
The controller responsible for data processing is:
Mindflex UG (haftungsbeschränkt)
Mariendorfer Damm 85
12109 Berlin, Germany
Commercial Register: Amtsgericht Berlin-Charlottenburg, HRB 276989 B
VAT ID: DE456508601
Email: hello@mindflex.world
Website: https://mindflex.world
Managing Directors: Felix Mai, Moritz Tiedemann, Julian Hecht
We have appointed an external Data Protection Officer:
heyData GmbH
Schützenstraße 5
10117 Berlin, Germany
Email: datenschutz@heydata.eu
We process personal data when you:
Personal data means any information that can identify you directly or indirectly.
| Data | Purpose | Stored where |
|---|---|---|
| Email address | Authentication & account management | Supabase (US-East-1) |
| Display name | Personalization within the app | Supabase |
| Chat messages | Conversation continuity | Supabase (AES-256 encrypted at rest) |
| Device token | Push notifications (if enabled) | Supabase |
| Timezone / City | Reminder scheduling | Supabase |
| App events + device advertising identifier (only if you consent) | Measuring which ads bring people to Mindflex | Shared with TikTok, see Section 9a |
When you sign in with Google, we receive:
Google user data is used exclusively to provide and improve your Mindflex experience:
We do not:
Google user data is only shared with the following service providers, strictly to operate the app:
Your Google user data is retained for as long as your account is active. You can delete your account at any time via Settings → Delete Account in the app. Upon deletion:
If you enable “Apple Watch check-ins” in Settings and grant permission, Mindflex reads the following data from Apple Health (typically measured by your Apple Watch): heart rate, heart-rate variability, resting heart rate, and step count.
Purpose: this data is used ONLY to recognise, on your device, possible signs of stress (and to tell stress apart from exercise), so that your chosen companion can send you a gentle check-in notification. We do not perform any medical, diagnostic, or in-depth health analysis, and we do not build a health profile of you.
On-device only: this processing happens entirely on your device. Your Apple Health data is never transmitted to our servers, never stored by us, and never shared with any third party. We do not use it for advertising, marketing, or profiling.
Your control: the feature is off by default. You can switch it off at any time in Settings, and you can revoke Mindflex’s access in iOS Settings → Privacy & Security → Health → Mindflex.
Legal basis: Art. 9(2)(a) GDPR — your explicit consent for the processing of health data. You may withdraw this consent at any time, with effect for the future.
We process personal data based on the following legal grounds:
You have the right to:
To exercise your rights, contact: hello@mindflex.world
| Service | Purpose | Data shared |
|---|---|---|
| Supabase | Authentication, database, storage | Email, name, chat data (encrypted) |
| Anthropic (Claude API) | AI conversation processing | Chat messages only (no email/account data); not used for AI training |
| RevenueCat | Subscription management | Anonymous user ID, purchase status |
| Sentry | Error tracking | Anonymous crash reports (no personal data) |
| Brevo | Transactional email | Email address (for auth emails only) |
| TikTok (TikTok Business SDK) | Advertising measurement / attribution — only with your consent | App events (install, trial start, purchase) and your device advertising identifier. Never your conversations, your answers, or any health-related data. |
Mindflex is funded in part through advertising on TikTok. To understand which ads actually help people find Mindflex, we can share a small set of non-sensitive app events with TikTok through the TikTok Business SDK.
What is shared (only if you consent): basic app events such as install, trial start, and purchase, together with your device’s advertising identifier (IDFA on iOS).
What is never shared: your conversations, your questionnaire answers, anything about how you are feeling, and any health-related data. This advertising measurement never touches the content you share with your companion.
It is your choice: before onboarding we ask for your consent on a dedicated screen with equally weighted “Accept” and “Decline” options. Mindflex works exactly the same whether you accept or decline. If you decline, the advertising SDK is not activated and your advertising identifier is never accessed. On iOS you will also see Apple’s App Tracking Transparency prompt only if you accept.
Withdraw anytime: you can turn ad measurement off (or back on) at any time under Settings → Ad measurement in the app, and on iOS under Settings → Privacy & Security → Tracking.
Legal basis: Art. 6(1)(a) GDPR and § 25 TDDDG — your consent. You may withdraw it at any time with effect for the future.
We store your personal data for as long as your account is active. Specifically:
When you delete your account, personal data is permanently removed within 30 days. Anonymized data (with no way to trace back to you) may be retained for service improvement.
Mindflex is intended for users aged 18 and older. We do not knowingly collect personal data from children under 18. If we learn we have collected data from a child under 18, we will delete it promptly.
We may update this Privacy Policy from time to time. We will notify users of material changes through the app or by email. The "Last updated" date at the top indicates when this policy was last modified.
If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local data protection supervisory authority. In Germany, this is the Berliner Beauftragte für Datenschutz und Informationsfreiheit (BlnBDI).
We encourage you to contact us first at hello@mindflex.world so we can address your concern directly.
Mindflex UG (haftungsbeschränkt)
Mariendorfer Damm 85
12109 Berlin, Germany
Email: hello@mindflex.world
Website: https://mindflex.world