Privacy Policy

Last updated: 16 August 2026

This Privacy Policy describes how Sound Mind ("we", "us", or "our") collects, uses, and protects information when you use the Sound Mind mobile application (the "App"). Sound Mind is operated from South Africa. The data controller is reachable at: hello@soundmindapp.co.

By using the App, you agree to the practices described in this Policy. If you do not agree, please do not use the App.

1. Information We Collect

We collect only the information necessary to operate the App and provide its core features.

1.1 Information you provide directly

• Account information — your email address and password (stored as a salted hash), set when you sign up.
• Thought entries — short text entries you write during the 6-step Capture process.
• Gratitude entries — short single-word entries you submit to the Gratitude Wall.
• Favourite declarations — references to scripture and declaration content you mark as favourites.
• Custom declarations — text declarations you choose to save.

1.2 Information collected automatically

• Usage statistics — counts and timestamps of completed sessions, current streak, total thoughts captured. Used to render your personal progress in the App.
• Device information — device type, operating system version, and App version. Used for compatibility and crash diagnosis.
• Subscription status — whether you have an active trial or paid subscription, supplied by Apple App Store, Google Play Store, and our subscription management provider.

1.3 Information we do NOT collect

• No advertising identifiers. The App does not run ads and does not track you across other apps.
• No voice recordings. The App does not currently capture or transmit audio from your device.
• No location data.
• No contact list, photos, or other on-device data outside what you explicitly enter into the App.

2. How We Use Your Information

We use the information described above only for the following purposes:

• To operate the App's core features (capture flow, declarations, gratitude wall, progress tracking).
• To authenticate your account and keep your data synced across your devices.
• To process subscriptions and validate active entitlements.
• To diagnose crashes and improve App stability.
• To respond to your support requests.
• To comply with legal obligations.

We do not sell, rent, or trade your personal information to any third party. We do not use your thought entries, gratitude entries, or any other personal content to train any artificial intelligence or machine learning model.

3. Where Your Data Is Stored — Sub-processors

We use the following third-party service providers ("sub-processors") to operate the App. Each is contractually bound to protect your data:

If you are in the European Economic Area (EEA), the United Kingdom, or South Africa, your personal data may be transferred to and stored in the United States. Transfers are protected by Standard Contractual Clauses or equivalent safeguards under applicable law.

4. How Long We Keep Your Data

• Account data, thought entries, gratitude entries, favourites, and progress data — retained for as long as your account is active.
• If you delete your account, all personal data associated with it is permanently deleted from our systems within 30 days, except where retention is required by law (e.g. financial records related to your subscription).
• Subscription transaction records are retained for the period required by South African and applicable foreign tax law (typically 5 years).

5. Your Rights

Depending on where you live, you have certain rights regarding your personal information. We honour the following rights for all users, regardless of jurisdiction, to keep things simple:

• Right of access — request a copy of the personal data we hold about you.
• Right of rectification — correct inaccurate or incomplete data.
• Right of erasure ("right to be forgotten") — request deletion of your account and associated personal data.
• Right of portability — receive your data in a structured, machine-readable format.
• Right to restrict or object to processing — limit how we use your data.
• Right to withdraw consent — at any time, without affecting prior lawful processing.
• Right to lodge a complaint with a supervisory authority (see Section 11).

To exercise any right, email hello@soundmindapp.co from the address associated with your account. We will respond within 30 days.

You can also delete your account directly from inside the App: Profile → Data & Privacy → Delete All Data.

5.1 Specific to South African users (POPIA)

We process personal information in accordance with the Protection of Personal Information Act, 2013 ("POPIA"). You have all the rights set out above plus the right to object to processing under POPIA §11(3) and the right to lodge a complaint with the Information Regulator (South Africa) — see Section 11.

5.2 Specific to EEA / UK users (GDPR)

We process personal data in accordance with the EU General Data Protection Regulation 2016/679 ("GDPR") and the UK GDPR. Our lawful bases for processing are:

• Contract performance (Art. 6(1)(b)) — to deliver the App's features you signed up for.
• Legitimate interests (Art. 6(1)(f)) — for crash diagnostics and security.
• Consent (Art. 6(1)(a)) — for any optional features that explicitly request it.

5.3 Specific to California residents (CCPA / CPRA)

Under the California Consumer Privacy Act, you have the right to know what personal information we collect, the right to delete it, the right to correct inaccurate information, and the right to opt out of "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined under the CCPA.

6. Children's Privacy

The App is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact hello@soundmindapp.co and we will delete the information promptly.

If you are between 13 and 18, you should use the App only with the involvement of a parent or guardian.

7. Security

We use industry-standard safeguards to protect your information, including encryption in transit (TLS), encryption at rest, and access controls on our database. No system is 100% secure, but we follow reasonable practices to reduce risk and will notify you and the relevant regulator of any data breach affecting you within the timeframes required by applicable law.

8. Important Notice — Not Medical Advice

Sound Mind is a faith-based wellness application. It is not a medical device, mental health treatment, or substitute for professional care. The App does not diagnose, treat, cure, or prevent any disease or psychological condition.

If you are experiencing a mental health crisis, please contact a qualified professional or a crisis line in your country. Find A Helpline lists free, confidential support services in over 130 countries. If you are in immediate danger, please contact your local emergency services.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the App or by email at least 14 days before they take effect. The "Last updated" date at the top of this Policy will always reflect the current version.

10. Contact Us

For any privacy question, request, or complaint:

Email: hello@soundmindapp.co

11. Supervisory Authorities

You have the right to lodge a complaint with a data protection authority. Depending on your location:

• South Africa — Information Regulator (South Africa). Website: inforegulator.org.za. Email: complaints.IR@justice.gov.za
• European Economic Area — your national Data Protection Authority. A list is available at edpb.europa.eu
• United Kingdom — Information Commissioner's Office (ICO). Website: ico.org.uk
• California, USA — California Privacy Protection Agency. Website: cppa.ca.gov