Privacy Policy

This Privacy Policy describes how PAL collects, uses, shares, and protects information when you use MindPAL.

We collect information you provide and information generated through your use of the app and website, as described below.

• Email address and authentication identifiers.
• Profile, subscription status, and app entitlements.
• Account preferences, language, and support communications.

We collect the text you enter, AI responses, journal-style reflections, check-ins, saved memories, uploaded or attached content where supported, and related metadata. This content may include sensitive personal information if you choose to provide it.

If you use voice features, audio may be processed temporarily to convert speech to text and generate audio replies. We do not store raw audio recordings; voice input is processed in real time and deleted after processing. Transcripts and related context may be processed and stored according to this Privacy Policy.

• Mood check-ins, feature usage, session metrics, and plan limit information.
• Device type, operating system version, app version, language, locale, crash logs, and performance logs.
• Purchase records and subscription status from app stores. We do not store full payment card numbers.

• Provide, personalize, and improve emotional support, reflection, and voice features.
• Authenticate users, sync data where enabled, and enforce plan limits.
• Process AI and voice requests and generate AI responses.
• Maintain safety, detect abuse, troubleshoot issues, and comply with law.
• Communicate with you about the service, support, and important updates.

MindPAL relies on third-party AI providers to generate responses and operate its features. When you use chat and other text features, the following may be sent to Anthropic (the provider of the Claude AI models): the messages or journal text you submit, relevant conversation context, optional photos you attach, reflections and check-in content, AI safety signals, and limited technical request metadata needed to operate the service.

When you use voice features, your audio is sent to ElevenLabs for speech-to-text and voice generation, and the resulting transcript and relevant context are then sent to Anthropic to generate PAL's reply. We do not store raw audio recordings; voice input is processed in real time and deleted after processing.

We use this processing only to provide MindPAL's AI conversation, reflection, safety, voice, and support features. We do not sell your personal information and do not use your private conversations for advertising or to train third-party foundation models.

We only work with reputable AI providers that maintain industry-standard security and privacy practices. Our providers are Anthropic (chat, reflection, and safety AI) and ElevenLabs (speech-to-text and voice generation for voice features).

These providers act as our service providers / processors. They are bound by contract (or equivalent terms) to process the personal data we send only to provide their services to us, to keep it secure, and not to sell it or use it for their own advertising. We require them to provide privacy and security protections that are the same as, or equal to, those described in this Privacy Policy for the data they process on our behalf, subject to their published policies and applicable law.

You can review each provider's own privacy practices directly:

Before any messages, conversation context, attachments, or voice data are sent to Anthropic or ElevenLabs, the MindPAL app shows an in-app disclosure that names these providers and explains what is sent and why, and asks for your explicit permission. Accepting this Privacy Policy is not the only control — you also see and must accept a dedicated AI data-sharing consent screen inside the app, and a separate voice consent notice before any audio is sent.

If you decline, features that require third-party AI processing are not available, but you can continue to use parts of the app that do not require it. You can review these disclosures again in the app under Settings → Legal → AI Disclosure and Privacy Policy.

We share information with service providers who help us operate the app and website, including AI providers (Anthropic), voice providers (ElevenLabs), infrastructure and hosting providers, analytics providers, app stores, payment processors, and customer support tools. Each is permitted to use the data only to provide services to us and must protect it to a standard equal to this policy. We may also disclose information when required by law, to protect rights and safety, or in connection with a business transfer.

We do not sell your personal information and do not share private conversations for cross-context behavioral advertising.

We retain personal data for up to 365 days after your last activity with the service, or for as long as necessary to provide the service, comply with legal obligations, resolve disputes, and enforce our agreements. You may delete conversations and your account using in-app controls or by contacting support.

We use industry-standard safeguards. Data is encrypted in transit using TLS (HTTPS), and saved conversations and memories are encrypted at rest. No method of transmission or storage is completely secure, but we work to protect your data at every layer.

Your information may be processed in countries other than your own, with appropriate safeguards where required.

MindPAL is not intended for children under 13 or the minimum age required in your region. We do not knowingly collect personal information from children without appropriate consent.

• Access, correction, deletion, and portability where applicable.
• Withdraw consent for optional processing, including optional voice features.
• Object to or restrict certain processing where the law provides that right.
• Lodge a complaint with a supervisory authority where applicable.

California residents may have additional rights regarding access, deletion, correction, opt-out of certain sharing, and limitation of sensitive personal information. We do not sell personal information or share it for cross-context behavioral advertising.

EEA/UK users may contact support@pal.services for GDPR-related requests. Where applicable, we rely on contract performance, legitimate interests, consent, and legal obligations as our legal bases for processing.

We may update this Privacy Policy. The "Last updated" date will change and material updates will be communicated in-app or by other reasonable means where appropriate.

Privacy and support requests: support@pal.services.