Privacy Policy

1. Introduction

Welcome to My Human Code (the App), owned and operated by The White Owl LLC ("Company", "we", "us" or "our"), a Delaware limited liability company. The App was previously published as MindFlow. It is the same application, the same accounts and the same service under a new name; this policy applies to both names and to the website at myhumancode.com (and mindflow.life, which redirects here).

This Privacy Policy explains what data we collect, how we use and protect it, and your rights and choices. By using the App or the website you agree to the collection and use of information as described here. If you do not agree, please do not use the App.

2. Data we collect

We collect and process only the minimum necessary data to provide the App's features.

A. Account data

• Email address, and the identifier provided by Apple or Google if you sign in with them.
• The profile details you enter at sign-up: language, name, age range, goals and gender.
• Subscription status, provided by Apple or Google through RevenueCat. We never see your payment details.

B. Content you create

• Dreams, thoughts, stories, mood check-ins, routine steps and self-reflection responses.
• Text and voice conversations with the in-app companion, and their transcripts.
• Meditation, sleep and Mind Booster usage.

C. Birth details, for Reveal your code

To calculate your Hologenetic Profile for the game, the App sends your date of birth, time of birth, the place of birth you select and its time zone, together with your chosen language, to our own server at seismic.myhumancode.com. The server returns your profile and its written content, which the App stores on your device. As you type a birth city, the partial text is sent to the same server to find matching places. Because an interest in the Gene Keys can suggest something about a person's philosophical outlook, we treat birth details with the care given to sensitive information whether or not the law requires it, and we do not use them for any other purpose.

D. Usage events

The App records which features are used and when (for example, that a dream was decoded or a level was completed), together with app version, platform, language and subscription state. These events are sent to PostHog, our analytics provider. They never include the content of your entries, messages or voice. We use them to understand which features help people and to improve the App. No session recording is used, ever.

E. Support and contact

Your name, email and message when you write to us through the website forms or by email, including any screenshots you attach.

F. Notifications

A device push token and your time zone, so we can send the reminders you switch on.

G. What we do not collect

• No precise location. No contacts, photos or camera access.
• No advertising identifier, and no advertising.
• No tracking across other apps or websites.
• No government identifiers, phone numbers or postal addresses.

3. How we use your data

• To provide the App: reflections on your dreams and thoughts, conversations, mood statistics, your routine, and the game.
• To calculate and display your Hologenetic Profile.
• To send the reminders you choose.
• To improve the App's performance and features, using aggregate usage events.
• To respond to support inquiries.
• With your explicit consent, to share your activity with a therapist through the therapist portal (section 6).

We do not sell your data, share it for advertising, or use it for automated decision-making that affects your rights.

4. AI processing

Reflections, conversations and summaries in the App are generated by AI models provided by third-party processors under contract with us. Content is sent to them only to produce the response you asked for. These responses are not reviewed by a human and may be inaccurate; they are an invitation to reflection, not advice.

5. Who else is involved

• Supabase hosts our database and authentication.
• Apple and Google handle purchases, downloads and, if you choose them, sign-in.
• RevenueCat manages subscription status.
• Amazon Web Services hosts the audio recordings for the game and provides the read-aloud speech synthesis (Amazon Polly). When you use read aloud, the text of that page is sent to Amazon, and the audio is cached on your device.
• PostHog receives usage events (section 2D).
• Resend delivers our emails.
• Gene Keys Ltd is our content partner. The written material and the recorded stories in the game are theirs, used under licence. We do not send them any data about you.

6. Therapist portal

If you ask to be linked to a therapist who takes part in our pilot, and only after we have recorded your explicit consent, that therapist can read your dreams, thoughts, moods, assessments, conversations and engagement through a web portal, write private notes, send you reminders and add guidance that shapes how the in-app companion responds to you. Every view is written to an append-only audit log. You or your therapist can revoke the link at any time by writing to us, and access ends immediately. Without a link, none of this applies.

7. How we store and protect your data

• Encryption: your content is encrypted in transit and at rest.
• Retention: data is stored only as long as your account exists, or as long as necessary to provide the App.
• Deletion: you can delete individual entries in the App, and delete your whole account from Profile. Deletion removes your content within 30 days, subject to legal retention requirements. Audit records of therapist access are retained as required for clinical accountability.
• Game progress is stored on your phone. If iCloud or Google backup is on, it may be included in your device backup under Apple's or Google's terms.

In case of a data breach, affected users will be notified as required by law.

8. Legal bases

Where the UK GDPR or EU GDPR applies, we process your account data and content to perform our contract with you, usage events on the basis of our legitimate interest in improving the App, and therapist sharing on the basis of your consent.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your data, to restrict or object to processing, and to withdraw consent. California residents may request a list of collected data and its deletion; we do not sell data. To exercise any right, email support@myhumancode.com. If you are in the EEA or the UK, you may also complain to your local data protection authority.

10. Gifts and codes

Premium may be bought as a gift. The purchase is recorded against the buyer's account with a unique activation code generated by our server; activation is recorded against the recipient's account. We do not share the buyer's identity with the recipient or the recipient's identity with the buyer. Activation codes contain no personal information. Records are kept for as long as the entitlement is valid and as tax and accounting rules require.

11. Children

The App is not directed at children under 13, and use of the App requires you to be at least 18. If you believe a child has given us personal data, write to us and we will delete it.

12. Changes

We may update this policy. The date at the top will change, and material changes will be announced in the App. Continued use after an update means you accept the new version.

13. Governing law

This policy is governed by the laws of the State of Delaware, without regard to conflict of law principles, except that consumers keep the mandatory protections of their own country.

14. Contact

Email: support@myhumancode.com
Address: The White Owl LLC, Delaware, United States