Effective date: February 23, 2026 · Last updated: February 23, 2026
Mind Shed LLC
251 Little Falls Drive, Wilmington, DE 19808, United States
privacy@mindshed.app
Mind Shed LLC ("Mind Shed," "we," "us," or "our") operates the Mind Shed mobile application. This Privacy Policy explains how we collect, use, and protect your information.
All sessions, preferences, bookmarks, and checklists are stored locally via on-device storage. There is no account, no cloud sync, and no server-side storage of your personal data.
You can export or delete your data at any time from Settings.
When you start a session, your text or voice transcript is sent to our server for AI processing. By using this feature, you consent to your session content being transmitted to the third-party AI services described below.
Audio recordings are transcribed using OpenAI's Whisper speech-to-text service. Session content is processed by OpenAI's language models (GPT) to generate your reflection cards. Weekly review summaries are generated the same way.
These transmissions happen only when you actively use a feature — never in the background.
OpenAI, Inc. (San Francisco, CA, USA) — processes your voice transcripts and text input to generate AI-powered reflection responses. Session content is processed in real time via the OpenAI API. Under OpenAI's API data usage policy, API inputs and outputs are not used to train their models. OpenAI may retain API data for up to 30 days for abuse and misuse monitoring, after which it is deleted. For details, see OpenAI's API data usage policy at openai.com/policies/api-data-usage-policies.
Sentry (optional) — if enabled by the app operator, anonymous crash reports and performance data may be sent to Sentry for error tracking. These reports do not contain session content, transcripts, or personal reflections — only technical metadata such as error messages, stack traces, and device type.
We do not sell, share, or monetize your data. No advertising or behavioral tracking SDKs are used in this app.
All reflection cards, insights, and suggestions displayed in Mind Shed are generated by AI (OpenAI's language models). These responses are not reviewed by a human before being shown to you.
AI-generated content may occasionally be inaccurate, incomplete, or inappropriate. If you encounter a response that seems harmful or incorrect, you can report it using the flag icon on any response card or by contacting us at safety@mindshed.app.
On-device data: Your sessions, preferences, and all personal data are stored exclusively on your device. This data persists until you choose to delete it via Settings.
Server-side: Our server does not store your session content after a response is delivered. Transcription and AI processing occur in real time, and no session data is logged or persisted on our servers.
OpenAI: API data may be retained by OpenAI for up to 30 days for abuse monitoring, then deleted. Sentry: Crash reports are retained for 90 days.
All data transmitted between your device and our server is encrypted in transit using TLS 1.2 or higher. On-device data is protected by your device's built-in encryption. App Lock PINs are hashed using PBKDF2 with SHA-256 (100,000 iterations) and stored in your device's secure keychain (iOS) or keystore (Android).
In the event of a security breach affecting your data, we will notify affected users within 72 hours via in-app notification and, where required by law, by other means.
Access: View all your stored data directly in the app.
Export: Download all your data as JSON from Settings (Pro feature).
Delete: Permanently erase all data from Settings > "Clear all data." This action is irreversible.
Correct: Since all data is stored locally on your device, you can view and manage your data directly.
Withdraw consent: You may stop using AI-powered features at any time. Uninstalling the app removes all locally stored data.
Revoke permissions: Disable microphone or notification access from your device settings at any time.
Legal basis for processing: We process your session data based on your explicit consent, which you provide when you initiate an AI-powered session. Health-related reflections are considered special category data under GDPR Article 9 and are processed only with your consent.
Cross-border transfers: When you use AI features, your session content is transmitted to OpenAI's servers in the United States. This transfer is made under standard contractual clauses as approved by the European Commission.
You have the right to access, rectify, erase, restrict processing, and port your data. To exercise these rights, contact privacy@mindshed.app. You also have the right to lodge a complaint with your local data protection authority.
We do not sell or share your personal information as defined by the California Consumer Privacy Act. We do not use your data for cross-context behavioral advertising. You have the right to know what personal information we collect, to delete it, and to opt out of any future sale or sharing.
To exercise your rights, use the in-app data deletion feature or contact privacy@mindshed.app.
Mind Shed collects consumer health data as defined under the Washington My Health My Data Act. This includes mental health reflections and wellness information you provide during sessions. This data is collected only with your consent, is not sold or shared, and is used solely to provide AI-powered reflection responses. You may delete all health data at any time from Settings.
Mind Shed is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has used this app, please contact us at privacy@mindshed.app and we will assist in deleting any associated data.
Mind Shed is not a medical device and does not diagnose, treat, cure, or prevent any medical condition. It is not a replacement for licensed therapy or crisis services. Always consult a qualified healthcare professional for medical advice.
If you're in crisis, contact 988 Suicide & Crisis Lifeline (call or text 988).
We may update this privacy policy from time to time. When we make material changes, we will notify you via an in-app notice. Continued use of the app after changes constitutes acceptance of the updated policy.
Questions about your privacy? Reach us at privacy@mindshed.app
Report a safety concern with AI-generated content: safety@mindshed.app