Privacy Notice

MindPsy Guidance ("MindPsy Guidance", "we", "us", or "our") operates the Seven Centers System® app and website (the "Service"). This Privacy Notice explains what personal information we collect, how we use and share it, and the rights you have. We act as the data controller for the personal information we process about you in connection with the Service.

1. Information we collect

Information you give us

• Account information — name, email, password (hashed), and authentication identifiers from sign-in providers (e.g. Google).
• Profile preferences — notification times, time zone, and onboarding answers (e.g. whether you've read the book).
• Practice content — daily check-ins, journal notes, goals, habit stacks, and nervous-system regulation logs you create in the app.
• Support communications — anything you send us by email or in support requests.

Information collected automatically

• Device & usage data — browser type, operating system, IP address, pages viewed, in-app actions, error logs, and approximate location derived from IP.
• Push-notification tokens — if you allow notifications, we store the subscription endpoint needed to deliver them.
• Cookies & similar technologies — strictly necessary cookies for authentication and session management, plus product-analytics cookies. See "Cookies" below.

Information we receive from third parties

• Payment processor (Paddle) — confirmation of your subscription status, plan, customer ID, and billing events. Paddle handles your payment details directly; we do not see your card number.
• Authentication providers — basic profile information (name, email, profile photo) when you sign in via Google or similar.

2. How we use your information

We use your information to:

• Create and manage your account, and provide the Service (contractual necessity);
• Save, sync, and display your practice content across devices (contractual necessity);
• Send you the reminders and push notifications you've configured (your consent / contractual necessity);
• Process subscriptions, prevent fraud, and meet tax and accounting obligations (legal obligation / legitimate interests);
• Diagnose bugs, monitor performance, and improve features (legitimate interests);
• Respond to support inquiries and communicate important Service updates (contractual necessity);
• Comply with law and enforce our Terms (legal obligation / legitimate interests).

We do not sell your personal information. We do not use your practice content to train AI models for third parties.

3. How we share your information

We share personal information with the following categories of recipients:

• Merchant of Record & payments — Paddle.com: for selling the subscription, managing your subscription, processing payments, calculating sales tax, issuing invoices, and handling refund or chargeback requests.
• Cloud hosting & database (Supabase / Cloudflare): to store and serve the Service and your account data.
• Email and notification providers: to deliver transactional emails and push notifications.
• Analytics and error monitoring: to understand aggregate usage and diagnose issues.
• Professional advisers: lawyers, accountants, and auditors, where reasonably needed.
• Government authorities: when required by law, subpoena, or to protect rights, property, or safety.
• Acquirers: in connection with a merger, acquisition, financing, or sale of assets, subject to standard confidentiality protections.

4. Data retention

We keep your account information and practice content for as long as your account is active. If you cancel and delete your account, we delete or anonymize your personal information within a reasonable period, except where we must retain certain records for legal, accounting, or fraud-prevention purposes (typically up to 7 years for billing records). You can request deletion at any time (see "Your rights" below).

5. Security

We use appropriate technical and organizational measures — including encryption in transit, encrypted storage, role-based access control, and database row-level security — to protect your information. No system is perfectly secure; if we learn of a breach affecting your personal information, we will notify you as required by law.

6. International transfers

We are based in the United States and our service providers may process your information in the United States and other countries. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for international transfers.

7. Your rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you;
• Correct inaccurate or incomplete information;
• Delete your information ("right to be forgotten");
• Restrict or object to certain processing;
• Receive a portable copy of your information;
• Withdraw consent (e.g. turn off notifications);
• Lodge a complaint with your local data-protection authority.

For California residents, this includes rights under the CCPA/CPRA, including the right to know, delete, correct, and opt out of "sharing" as defined in those laws. We do not knowingly sell personal information.

To exercise any of these rights, email support@sevencenterslifeschool.com. We will respond within the time required by applicable law (typically 30–45 days).

8. Cookies

• Strictly necessary: required for authentication and to remember your session.
• Analytics: help us understand how the Service is used so we can improve it.
• No advertising cookies.

You can manage cookies through your browser settings; disabling strictly-necessary cookies may break sign-in.

9. Children

The Service is intended for adults (18+). We do not knowingly collect personal information from children under 13 (or under 16 in the EU/UK). If you believe a child has provided us information, contact us and we will delete it.

10. Changes to this notice

We may update this Privacy Notice from time to time. We'll post the new version here and, for material changes, notify you in the app or by email.

11. Contact

Questions about this notice or your information? Email support@sevencenterslifeschool.com.