Privacy Policy

Privacy at a glance

• Mind the Gut can be used without creating an account.
• Your Check-ins, Support needs, Program and practice history, Likes, Flare Support activity, routines, preferences, and downloaded recordings stay on your device. Common Signal Labs does not receive or have access to that information.
• We do not use advertising, tracking, analytics, third-party crash-reporting SDKs, artificial intelligence processing, or remote health monitoring.
• We do not sell personal information or share it for cross-context behavioral advertising or targeted advertising.
• Limited technical information may be processed when you visit our informational website or request a recording from our content-hosting provider. We also receive information that you choose to send when contacting support, and your email address if you join the launch waitlist.

1. Scope

This Privacy Policy applies to the Mind the Gut mobile app and our informational website and policy pages. It does not apply to third-party services that operate under their own privacy policies, such as Apple's App Store.

The Service is a self-management and general-wellness companion. It is not a medical provider, diagnostic service, emergency service, or real-time monitoring service. The Service is not offered on behalf of a healthcare provider, health plan, employer, clinician, or research organization.

2. Information that stays on your device

The app stores the following information locally so its features can work:

• confirmation that you meet the minimum age, without requesting your birth date;
• selected Support needs, practice days, reminder time, and routine changes;
• Program selections, progress, recording completions, and completion dates;
• optional Check-in responses, including the current More tense, Same, or Calmer response and any retained legacy distress or gut-discomfort ratings;
• Likes, Flare Support saves and activity, and other content preferences;
• Preferred narrator, playback positions, and app settings;
• notification settings;
• download preferences, download status, and downloaded recordings; and
• identifiers and timestamps needed to preserve this history accurately.

This information is used on your device to personalize authored recommendations, show progress, maintain your collections and preferences, schedule local reminders, resume playback, and support offline use. Recommendations are not generated from your Check-in history.

Common Signal Labs does not receive this on-device information. It is not synchronized to an app account or stored in our cloud systems. The app does not use CloudKit or iCloud to back up this information. Deleting the app or losing your device may therefore cause this information to be permanently lost.

The app may share a limited snapshot with its widget through Apple's on-device App Group technology. That snapshot may include presentation-safe Learning Card information, a limited subscription-access state, an expiration boundary, and app routes. It does not include Check-ins, Support needs, symptoms, Routine Streaks, or practice history.

3. Information processed when you use online features

Content and website delivery

Production recordings are delivered over HTTPS by a content-hosting provider and may be downloaded for offline use. When your device requests a recording, the provider may process limited technical information such as:

• your Internet Protocol (IP) address;
• the date and time of the request;
• the requested opaque asset identifier; and
• connection, reliability, and security information.

Media requests do not include your Check-ins, Support needs, Program history, Likes, Flare Support activity, advertising identifiers, or other personal history.

Our static informational website does not use advertising pixels, behavioral analytics, or non-essential cookies. The website host may process comparable request and security information, such as an IP address, request time, requested page, and connection information, to deliver the site and protect it from abuse.

Detailed delivery logs will be disabled where practicable. Logs retained by us or our providers are deleted or de-identified within 30 days, unless a longer period is reasonably necessary to investigate a specific security incident or comply with law.

Support communications

If you contact us, we receive your email address, the contents of your message, and any other information you choose to provide. Please do not send medical records or information that is not necessary for us to answer your question. Mind the Gut support is not monitored as an emergency or clinical service.

We use support information to respond, troubleshoot, protect the Service, and keep an appropriate record of the request. We ordinarily delete support correspondence within 90 days after the request is resolved. We may retain particular records longer when reasonably necessary for security, dispute resolution, enforcing our agreements, or complying with law.

Launch waitlist

If you join the waitlist on our website, we collect the email address you enter. Our email provider, Buttondown, stores it for us and sends a message asking you to confirm it. It also receives the page you signed up from and your IP address, which it uses to estimate your general location and to screen out spam signups.

We use waitlist addresses only to tell you when Mind the Gut launches and to send occasional updates about it. Every email includes an unsubscribe link, and you can also ask us to remove your address by emailing privacy@mindthegutapp.com. We delete waitlist addresses when you unsubscribe or when we stop running the waitlist.

App Store subscriptions

Subscriptions and payments are processed by Apple under Apple's own terms and privacy policy. We do not receive your full payment-card number. The app receives limited StoreKit information—such as the purchased product, transaction or subscription status, and expiration information—to provide Premium access, restore purchases, and comply with financial and legal obligations. Apple may also provide us with sales and financial reports. StoreKit does not restore your personal history.

4. Information we do not collect or use

The current Service does not:

• offer app accounts, account profiles, or cloud History sync;
• collect free-text symptom journals, medical records, precise location, contacts, photos, camera or microphone recordings, HealthKit or Apple Health data, wearable data, or advertising identifiers;
• use third-party analytics, advertising, tracking, or crash-reporting SDKs;
• use personal information for artificial intelligence training or AI-generated health recommendations;
• use personal information for clinical research;
• perform automated decision-making that produces legal or similarly significant effects;
• share information with clinicians, insurers, health plans, employers, or referral partners; or
• sell personal information or share it for cross-context behavioral advertising or targeted advertising.

5. How we use information we receive

We use the limited information we receive to:

• deliver recordings, website pages, and requested Service functions;
• provide and troubleshoot customer support;
• confirm and administer App Store subscription access;
• maintain the security, integrity, and reliability of the Service;
• detect, investigate, and prevent fraud, abuse, or technical problems;
• establish, exercise, or defend legal claims; and
• comply with applicable law.

We do not use technical delivery information to infer your health, symptoms, Support needs, or activities inside the app.

6. When we disclose information

We may disclose the limited information described above to:

• Service providers. Content-delivery, website-hosting, email, and security providers process information for us only as needed to provide their services. We require providers to use appropriate safeguards and to handle information consistently with this Privacy Policy and applicable law.
• Apple. Apple processes App Store purchases, subscription management, app distribution, and device services under its own privacy policy.
• Professional advisers. Lawyers, accountants, auditors, insurers, and similar advisers may receive information when reasonably necessary for their services and subject to appropriate confidentiality obligations.
• Legal and safety recipients. We may disclose information when we reasonably believe disclosure is required by law, legal process, or a valid government request, or is necessary to protect rights, security, and the integrity of the Service.
• Business transaction participants. Information may be disclosed as part of a proposed or completed merger, financing, acquisition, reorganization, bankruptcy, or transfer of assets, subject to appropriate protections and applicable law.

We do not permit our service providers to use Service information for advertising or to build profiles about you.

7. Consumer health information

Your on-device Check-ins and other personal history are not collected by Common Signal Labs. We do not use technical request information to identify or infer health conditions.

If you voluntarily include health-related information in a support message, we receive it directly from you and use it only as reasonably necessary to respond to your request, protect the Service, comply with law, or establish or defend legal claims. It may be processed by our email or support provider on our behalf and disclosed when legally required. We do not sell this information, use it for advertising, or disclose it to data brokers.

You may request access to or deletion of consumer health information contained in support correspondence by contacting privacy@mindthegutapp.com.

8. Notifications, downloads, and deletion controls

The app requests notification permission only after you choose to enable a practice or first-charge reminder. These are local notifications; Common Signal Labs does not operate a remote-push notification service. You can disable reminders in the app or in your device settings.

Downloaded recordings remain on your device until you remove them, use Delete All Local Data, or delete the app.

Delete All Local Data removes app-owned history, Program progress, Check-ins, routines, Likes, Flare Support information, preferences, cached content, downloaded recordings, local reminders, and widget data from that device. It does not cancel an App Store subscription. You can manage or cancel a subscription through Apple.

9. Retention

We retain information only for the periods described in this Policy or as reasonably necessary for the relevant purpose:

• on-device information and downloads remain until you remove them, use Delete All Local Data, or delete the app;
• content-delivery and website logs are disabled where practicable or deleted or de-identified within 30 days, subject to the limited security and legal exceptions described above;
• support correspondence is ordinarily deleted within 90 days after resolution, subject to the limited security, dispute, and legal exceptions described above; and
• App Store financial and transaction records are retained as required for subscription administration, accounting, tax, fraud prevention, and legal compliance.

Because we do not receive your on-device personal history, we cannot retrieve, export, correct, or remotely delete it for you.

10. Security

We minimize the information sent off your device. Online requests use HTTPS encryption in transit. We use administrative, technical, and organizational safeguards appropriate to the limited information we receive and require appropriate protections from our service providers.

Your local information is protected by the security features of your device and operating system. No storage or transmission method is completely secure, and we cannot guarantee absolute security. If a breach occurs, we will investigate and provide notices when required by applicable law.

11. International processing

Common Signal Labs is based in California, United States. Information received through online delivery or support may be processed in the United States and in other countries where our service providers operate. Those countries may have privacy laws different from the laws where you live.

Where applicable law requires a transfer mechanism or additional safeguards, we will use an available lawful mechanism and require appropriate contractual, technical, and organizational protections.

12. Legal bases for users in the EEA, United Kingdom, and similar jurisdictions

Where applicable, we process information under the following legal bases:

• Performance of a contract or steps requested by you: to deliver requested content, provide the Service, administer subscription access, and respond to support requests.
• Legitimate interests: to operate a reliable and secure Service, prevent abuse, troubleshoot problems, protect our rights, and improve operational reliability without behavioral analytics. We balance these interests against your rights and the limited nature of the information involved.
• Legal obligations: to comply with tax, accounting, consumer-protection, security, and other applicable laws.
• Consent: where we specifically ask for consent for an optional activity. You may withdraw consent at any time without affecting earlier lawful processing.

We do not use automated decision-making that produces legal or similarly significant effects.

13. Your privacy rights

Depending on where you live, you may have rights to request access to, correction of, deletion of, restriction of, or a portable copy of personal information we hold about you; to object to certain processing; to withdraw consent; and to appeal or complain to a privacy regulator. You may exercise applicable rights without unlawful discrimination.

We do not sell personal information, share it for cross-context behavioral advertising, or process it for targeted advertising. We therefore do not offer a sale, sharing, or targeted-advertising opt-out.

To make a request, email privacy@mindthegutapp.com. We may need to verify your request. Because technical logs are deliberately minimized and may not be associated with an identifiable account, we may be unable to connect a particular log entry to you. We will not collect additional information merely to identify data that we otherwise cannot associate with you.

Users in the EEA or United Kingdom may also complain to the data-protection authority where they live or work. California and other U.S. residents may have additional rights under applicable state privacy or consumer health-data laws, including rights to know, correct, delete, obtain a copy of, or restrict certain uses of covered information.

14. Young people

Mind the Gut is intended for people age 13 and older. We do not knowingly collect personal information from anyone under 13. If you are under 13, do not use the Service or send information to us.

If you are between 13 and 17, we encourage you to review this Policy and the Service with a parent or legal guardian. Where the law where you live requires permission from a parent or guardian to use the Service or provide personal information, you may use the Service only with that permission.

The app does not request your birth date. A confirmation that you meet the applicable minimum age is stored on your device and is not sent to Common Signal Labs.

If you believe a person under 13 has sent personal information to us, contact privacy@mindthegutapp.com. We will take reasonable steps to delete it.

15. Changes to this Policy

We may update this Privacy Policy to reflect changes to the Service, our practices, or applicable law. We will update the date above and, when changes are material, provide a prominent notice in the app or on our website as appropriate before or when the changes take effect.

Accounts, cloud History sync, analytics, advertising, artificial intelligence processing, research, or other materially different data practices will require an updated Policy and any consent or notice required by law before they are introduced.

16. Contact us

Privacy questions and rights requests: privacy@mindthegutapp.com
Product support: support@mindthegutapp.com
Website: mindthegutapp.com