MindShift — Privacy Policy
Effective: 2026-10-31. Provided by Mr Harvey Butters, trading as Winning Beans.
Contact: hello@healthnothype.co.uk
In one paragraph
MindShift records how you feel each day, the habits you tick off, and the notes you write. That is health information about your mental health, and UK law treats it as one of the most sensitive kinds of personal data there is. We only collect it because you choose to type it in, we only use it to show you your own patterns and to write your coaching, and we never sell it or use it for advertising. You can download everything we hold, and you can request permanent account deletion from inside the app. Access is disabled while any pending deletion is completed.
1. Who is responsible for your data
MindShift is provided by Mr Harvey Butters, trading as Winning Beans ("we", "us"). Winning Beans is the trading name of Mr Harvey Butters. For UK data protection law he is the data controller for the information described here.
- Postal address: Fairview, 8 Daffodil Gardens, Walberton, Arundel, West Sussex, BN18 0XQ
- ICO registration number: ZC263073
- Email: hello@healthnothype.co.uk
If you want to ask anything about your data, contact us by email or post.
2. What we collect
Information you give us
| What | Examples | Why we need it |
|---|---|---|
| Mood check-ins | A score from 1–10, an optional stress level, an optional emoji | This is the core of the app — it is what the charts and insights are built from |
| Your notes | Free text you write about your day | Shown back to you; shared with the AI only when you explicitly approve a coaching session |
| Habits | Habit names you create, and which you ticked each day | To work out which habits line up with better or worse moods |
| Your account | Email address, and a name and photo if supplied through your account | To sign you in and to greet you by name |
| Onboarding choices | Your motivation and whether you have completed onboarding | To save your setup choices |
Information created automatically
| What | Why |
|---|---|
| Your streak and check-in dates | To show your streak and fill in the calendar |
| Habit–mood correlations | Calculated from your own entries, e.g. "your mood is 0.8 points higher on days you exercise" |
| AI coaching text | Stored so you can read it again without us paying to generate it twice |
| A purchase identifier | An account-linked Apple purchase identifier. This version of MindShift sells nothing, so no purchase, product or access period is recorded against it |
| Consent and account requests | Health and AI consent versions, disclosure text and dates, and a pending account-deletion marker, to apply your choices and complete pending deletions |
| AI usage records and feedback | Generation dates and your helpful/not-helpful response, to apply usage limits and save your feedback |
| Optional push token | A device delivery token, if you allow notifications. MindShift does not currently send any notifications. The token is removed when you request account deletion |
| Basic technical and security metadata | Request times, routes and response status in app logs, kept as described in section 6; hosting and sign-in providers also process network/device information to deliver and secure the service. App request logs omit note contents |
What we do not collect
- MindShift does not request GPS or device-location permissions. Network providers may infer an approximate region from an IP address for routing and security.
- We do not access your contacts, photo library, camera or microphone. Your sign-in provider may supply an account profile image, as described above.
- We do not use advertising identifiers, and there are no adverts in MindShift.
- We do not track you across other apps or websites.
3. Your mental health data — the important bit
Your mood scores, stress levels and notes are "special category data" under Article 9 of the UK GDPR, because they are information about your health.
The law says we need a stronger reason than usual to handle it. Ours is your explicit consent — Article 9(2)(a). In plain terms: we only have this information because you deliberately chose to record it.
Because it is consent:
- You can withdraw it at any time by deleting your account (Profile → Privacy & Data → Delete my account).
- Withdrawing does not get you into trouble. You do not have to give a reason.
- Withdrawing is not retrospective — it does not undo processing that already happened. From that point we stop using your health data, and your account data is deleted from the live MindShift database when deletion completes. Section 6 explains pending requests, backups and supplier records.
Our lawful basis for each use
| What we do | Information used | Lawful basis (UK GDPR Article 6) | Health-data condition (Article 9) |
|---|---|---|---|
| Record and show your check-ins, notes and habits, and calculate your patterns | Mood, stress, notes, habits, correlations | Consent — 6(1)(a) | Explicit consent — 9(2)(a) |
| Write AI coaching you approve | The selected check-in and history shown in the in-app disclosure | Consent — 6(1)(a) | Explicit consent — 9(2)(a) |
| Run your account and sign-in | Email, name and photo if supplied | Contract — 6(1)(b) | Not health data |
| Register a device for notifications, if you allow them | Push token | Consent — 6(1)(a) | Not health data |
| Keep the service secure, apply usage limits and prevent abuse | Request logs, AI usage records | Legitimate interests — 6(1)(f): keeping MindShift secure and affordable | Not used to infer anything about your health |
| Keep records of your consents and handle your requests, including pending deletions | Consent versions, disclosure text and dates, deletion marker | Legal obligation — 6(1)(c): showing that consent was given and responding to your data-protection rights | Not used for any other purpose |
4. Who else sees it
We do not sell your data. We do not share it for advertising. Ever.
We use a small number of suppliers to make the app work. Each one only receives what it needs to do its job. Clerk, Cloudflare and Neon act for us under written data-processing terms that require them to protect your information to a standard equal to this policy. Apple and Expo handle the information listed below under their own privacy terms.
| Supplier | What they get | What for |
|---|---|---|
| Clerk | Your email address and sign-in details | Signing you in and keeping your account secure |
| Cloudflare Workers AI | The selected check-in and relevant history described in the in-app disclosure | Generating optional reflections using Meta Llama 3.3, only after you explicitly approve that session |
| Apple | Sign-in information if you choose Apple login | Apple sign-in. This version sells nothing, so Apple receives no purchase for MindShift |
| Expo | A device push token, if you allow notifications | Issuing the device token. No notification content is currently sent |
| Neon | App account records, check-ins, notes, habits and coaching | Storing the app database |
| Cloudflare | Requests sent to the app server and database; app account and wellbeing data needed to answer those requests | Hosting the selected backend and connecting it securely to Neon using Hyperdrive |
On the AI specifically. Before a new coaching session, the app identifies the data and recipient and asks for your permission. This includes the selected check-in, seven-day mood/stress/note history, a 30-day mood average, habit names and calculated patterns. Only after you agree is that information sent to Cloudflare Workers AI. Cloudflare states that it does not use this content to train AI models. Standard inference processes the content to return a response; operational metadata and legal or security exceptions are described in Cloudflare’s data-use policy. If you would rather no AI ever saw your notes, do not request coaching — the rest of the app, including all charts, streaks and correlations, works without it.
Some requests containing explicit current-safety wording return clearly labelled support information without contacting an AI model or using an AI allowance. This limited safeguard is not a risk assessment, does not detect every dangerous situation and does not alert a person. Support information is also available without accepting AI sharing or health-data consent.
We will also disclose data if we are legally required to — for example a court order — or where it is necessary to protect someone's life.
5. Where your data is held
The selected Neon database is configured in AWS London (Europe West 2), as shown in Neon's own project settings. The selected server host is Cloudflare, whose network is distributed globally; a London database does not mean every supplier processes all data only in the UK.
Our suppliers may process information outside the UK, including in the United States. Their published data-processing terms provide international-transfer safeguards, including Standard Contractual Clauses with the UK Addendum or the UK Extension to the Data Privacy Framework, as applicable. These safeguards do not mean that processing stays in the UK. You can ask us for information about the safeguards relevant to your data.
The applicable supplier information is available in Cloudflare’s data-processing terms, Clerk’s data-processing terms, Neon’s current platform terms and their incorporated Databricks data-processing terms, and Expo’s privacy policy. Apple processes App Store and Apple-account information under its own privacy information. These companies also process some account, security or legal records for their own purposes under their policies.
6. How long we keep it
- While your account is open: we keep your check-ins indefinitely, because the whole point is to show you long-term patterns.
- When you request account deletion: your account is locked straight away and your push token is removed. Deletion then removes your sign-in account at Clerk and your data from the live MindShift database, normally at once. If a step fails, for example because a supplier is unavailable, your account stays locked and the request stays pending. MindShift retries a pending deletion by itself every few minutes until it completes; the app tells you the request is pending while that happens. If it is still pending after a day, email hello@healthnothype.co.uk and we will complete it by hand, without undue delay and within one month at the latest.
- Backups and supplier records: the selected Neon Free database displays a six-hour restore history. This is a recovery setting, not a deadline for erasing every supplier copy. Deleted records can remain in restricted backups until those copies expire; suppliers can retain security, legal or account records for the purposes and periods set out in their policies. Deletion from the live MindShift database is separate from those records.
- Request logs: Cloudflare keeps the app's request logs (time, route and response status; never note contents) for the short period set by our hosting plan, measured in days rather than months. Only a sample of requests is logged (one in ten).
- Purchase records: this version sells nothing, so there are none. Any that a later paid version created would be removed when account deletion completes, and Apple would keep its own transaction records under its policies and applicable legal obligations. Deleting MindShift does not delete your Apple account or its transaction history.
7. Keeping it safe
- Everything travels over an encrypted connection (HTTPS).
- The app requires sign-in and checks account ownership before returning journal data. The Neon database provider documents AES-256 encryption at rest. Connections to the database are encrypted in transit by our hosting provider. This is provider-managed encryption; it does not mean only you hold the encryption keys.
- We never store your password — sign-in is handled by Clerk.
- We never store or see your card details. This version of MindShift takes no payments at all. The database still carries two unused columns from an earlier web version of the service that billed through Stripe; they are empty for every account created in the app, they are included in your data download if you ask for it, and they are deleted with your account.
No system is perfectly secure. If a breach ever affects your rights, we will tell you and the Information Commissioner's Office as the law requires.
8. Your rights, and how to use them
Under UK GDPR you have the right to:
| Right | What it means | How |
|---|---|---|
| Access | Get a copy of everything we hold about you | Profile → Privacy & Data → Download my data |
| Erasure | Have your account data deleted from the live MindShift database (section 6 covers pending requests, backups and supplier records) | Profile → Privacy & Data → Delete my account |
| Rectification | Correct anything wrong | Delete a check-in, edit or delete a habit, or contact us for other corrections |
| Portability | Take your data elsewhere in a reusable format | The export is a JSON file — a standard, machine-readable format |
| Withdraw consent | Stop us processing your health data | Delete your account |
| Object / restrict | Ask us to stop or pause certain processing | Email us |
Both the main ones are buttons in the app, and you do not have to explain yourself. Download is immediate. Deletion normally completes straight away; if the app shows it as pending, email us and we will complete it (see section 6).
If a later version ever sells a subscription: deleting your MindShift account would not cancel it. This version sells nothing, so there is nothing to cancel.
If you used Sign in with Apple: when your account is deleted, MindShift asks Apple to revoke its sign-in token, as Apple requires. That request only runs once the Apple key for it is configured, and we are not yet claiming it has been proved end to end. Until we can show it working, also remove the connection yourself: Settings → your name → Sign in with Apple → MindShift → Delete.
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office — ico.org.uk, helpline 0303 123 1113. We would rather you told us first so we can put it right.
9. Children
MindShift is not intended for anyone under 16. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.
10. MindShift is not a medical service
MindShift is a self-tracking and wellbeing tool. It is not a medical device, it does not diagnose anything, and the AI coaching is not clinical advice. It is not a substitute for a GP, a therapist, or a crisis service.
If you are struggling, these are free and available 24 hours a day:
- Samaritans — call 116 123. You do not have to be suicidal to call.
- Text SHOUT to 85258 if you would rather not speak to anyone.
- NHS 111, choose the mental health option for urgent mental health support in England, Wales and Scotland (in Scotland, 111 is NHS 24).
- Northern Ireland: call Lifeline on 0808 808 8000. Northern Ireland has no NHS 111 mental health option.
- 999 if your life is at risk.
11. Changes to this policy
If we change this policy we will update the effective date at the top. If the change is significant — for example a new supplier receiving your health data — we will tell you in the app before it takes effect.