Privacy Policy

Last updated: July 10, 2026.

Mind Magic ("we", "us", "our") is a personal growth platform. This policy explains what we collect, how we use it, and the choices you have. We wrote it to be read, not skimmed past: your Map answers, journals, and conversations with ME are personal, and we treat them that way.

1. What we collect

Account: your name, email, phone number (if you provide one), and timezone.
Mind Magic Map: your birth date, birth time and place, and your answers across the assessment phases, including reflections, memories, beliefs, values, and future-self descriptions. Some of this is sensitive personal information you choose to share.
The 21-Day Experience: your journal entries, reflections, check-ins, and progress.
ME conversations: the messages you exchange with ME, and the things you ask ME to remember (or forget).
Membership and billing: your plan and billing status. Card details are handled by Stripe and never touch our servers; we do not store card numbers.
Sessions: bookings, and, where recording is enabled and you are notified, session recordings and transcripts.
Notifications: if you turn notifications on, the push subscription or device token needed to deliver them.
Usage: basic activity (for example when you sign in or complete a day) and standard technical data (IP address, device, browser) used for security and to run the service.

We use session cookies to keep you signed in. We do not use advertising trackers or third party analytics.

2. How we use it

To provide the service: generate your Mind Magic Map, let ME respond and remember your context, run the 21-Day Experience and scheduling, and keep your records.
To personalize your experience and, for Dr. Carla and authorized staff, to maintain a client record so they can support you. Your Experience journals and private check-ins are visible only to you.
To process payments (through Stripe) and send you service and account emails.
To send the notifications you opt into. You can turn each category off any time.
To keep the service secure and to comply with law.

We do not sell your personal information, and we do not share it for advertising.

3. AI processing

Your Map answers and your messages to ME are processed by our AI model providers (currently OpenAI and Anthropic) to generate responses. We send only what is needed for that purpose, under API terms that do not permit our providers to use your data to train their models.

4. Who can see your data

You.
Dr. Carla and authorized Mind Magic admins can view your client record to support you. Admin access to member data is logged. Your Experience journal entries and private check-ins are excluded from admin view.
Service providers who process data on our behalf under contract: Supabase (database, authentication, storage), Stripe (payments), Mailgun (email), our AI model providers (OpenAI and Anthropic), and Zoom (sessions). They may process data outside your country.

Other members can never see your private data. Your notes, Map, journals, and ME conversations are not visible to anyone except as described above.

5. Recordings and transcripts

Where sessions with Dr. Carla are recorded, you will be notified and, where required, asked to consent before recording begins. Recordings and transcripts are stored to support your coaching and may be summarized into your record so ME can reference prior sessions. You can ask us to delete a recording at any time.

6. Retention and deletion

We keep your data while your account is active. You can delete individual content (for example a future memory, or things ME remembers) inside the app. To delete your account and data, use "Delete my account" in your profile, or email support@mindmagic.app from your account email; we complete deletion within 30 days, except for records we must keep by law (for example billing records, which Stripe retains under its own policy).

7. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your data, and to object to or restrict certain processing. Email support@mindmagic.app and we will respond as required by law.

8. Security

Every member's data is scoped to them with database-level access controls, encrypted in transit, and admin actions are logged. No system is perfectly secure, but protecting what you share here is a design rule of the platform, not an afterthought.

9. Children

Mind Magic is for adults 18 and older. We do not knowingly collect data from children.

10. Changes

We may update this policy as the service grows. We will tell you about material changes, and continued use after that means you accept them.

11. Contact

support@mindmagic.app