Privacy

Written plainly on purpose. If any of it stops being true, it gets changed here first.

What is collected

Only what you type in or connect:

• Your Google account's email address and its identifier, which is how you sign in. No password is ever created or stored.
• Anything you enter: journal entries, photos, profile details, birthdate, medications and supplements, food and exercise preferences.
• Files you upload, such as lab reports.
• Data from a service you connect, currently Whoop: sleep, recovery, cycles and workouts. Read only. Nothing is ever written back.
• Ordinary web server request logs, which record the address a request came from, the path, and the browser's user agent. These are used to block abuse.

Where it lives

On a single server run by the operator of this site, not on a rented cloud platform. Journal text, AI replies, medications, birthdate, uploaded file contents and connected-service tokens are encrypted at rest. The encryption key is kept outside the application's own directory.

Who can see it

You. The operator has an administrative console that can see how many entries an account holds and what it costs to run, and can change a subscription, suspend an account or delete one. That console has no route that decrypts an entry, a medication or a record.

Nothing is sold. Nothing is shared with advertisers or data brokers. There are no third-party analytics, trackers, fonts or scripts on any page of this site.

The AI

Coaching is generated by Anthropic's Claude API. To produce a reply, the relevant parts of your data are sent to that API: your profile, medications, preferences, recent entries and recent connected-service data. Anthropic's API does not train models on data sent through it.

If you would rather nothing was sent anywhere, do not subscribe and do not use the coaching features. The journal, your records and your history all work without them.

Payments

Handled entirely by Stripe. MindState never receives or stores a card number. What is stored is a Stripe customer identifier and whether a subscription is active.

Getting it back, and getting rid of it

Inside the app, under My data, there is a button that exports everything held about you as a single decrypted file, and a button that deletes your account: every entry, every record, every uploaded file, and any subscription. Deletion is immediate and cannot be undone. Neither requires emailing anybody.

What this is not

MindState is not a medical device, not a clinical record system, and not a covered entity under HIPAA. It does not diagnose, and it will not advise you on prescribed medication. Treat it as a well-informed notebook that talks back, not as care.

Contact

Questions about any of this go to the operator of mindstate.adhocsupportllc.com.