Privacy Policy

A plain-language summary of how we handle your data.

Who we are

Heart Dynamics is operated by The Mind Academy (“we”, “us”). This policy explains what we collect and why.

What we collect

• Account data: your email address and an encrypted password, managed by our authentication provider (Supabase).
• Session data: summary results of your practice sessions — duration, time to reach coherence, and time spent in coherence — linked to your account so your progress follows you.
• Billing data: subscription status and a customer reference. Payments are processed by Stripe; we never receive or store your full card details.

Your heart-rate data stays on your device

Live heart-rate and beat-to-beat data from your sensor is processed in your browser to produce feedback. We do not transmit or store your raw heart-rate stream on our servers. Only the summary results listed above are saved to your account.

How we use your data

To provide the service, save your progress, manage your subscription, and keep the app secure. We do not sell your personal data.

Who we share it with

Only the service providers that make the app work: Supabase (accounts, database), Stripe (payments), and our hosting provider. Each processes data on our behalf under their own terms.

Your rights

You can request access to, correction of, or deletion of your data, and you can cancel your subscription at any time from the billing portal. To exercise these rights, contact us at the email below.

Data retention & security

Data is protected with encryption in transit and row-level security so that your records are only ever accessible to your account. We retain your data while your account is active and delete it on request.

Contact

Questions about your privacy: hello@themindacademy.com

This policy is a starting template. Please have it reviewed for your jurisdiction (e.g. UK GDPR / EU GDPR / CCPA) before launch and insert your real legal entity and contact details.