Privacy Policy
Effective date: 15 August 2026
Mindborn is built on a simple promise: what happens here stays here. We collect the absolute minimum, we use no advertising trackers, and we never share your data with advertising platforms. This policy explains exactly what that means.
1. The short version
- We collect your email address, if you choose a path on our site, one tag describing it (e.g. “trying”, “IVF”, “pregnant”), and if you sign up from a specific meditation page, which meditation you asked for.
- That tag can reveal something about your health. That is why we ask for your explicit consent before storing it, and why we treat it with special care.
- No advertising pixels. No Google Analytics. No cookies for tracking. No lookalike audiences. No selling or sharing of your data with ad platforms — ever.
- You can unsubscribe, or ask us to delete everything, at any time with one email or one click.
2. What we collect and why
| Data | Why | Legal basis (GDPR) |
|---|---|---|
| Email address | To send you the meditations, emails, and access links you signed up for | Consent (Art. 6(1)(a)); contract performance for purchases (Art. 6(1)(b)) |
| Path tag (e.g. trying / IVF / pregnant) | To send you content that fits where you are, and nothing that doesn’t | Explicit consent (Art. 9(2)(a)) — because it may indicate health status |
| Sign-up meditation (which free-meditation page you signed up from) | To send you exactly the meditation you asked for | Explicit consent (Art. 9(2)(a)) — like the path tag, it may hint at your situation |
| Purchase records (what you bought, when) | To give you access to what you paid for; legal/tax obligations | Contract (Art. 6(1)(b)); legal obligation (Art. 6(1)(c)) |
| Email engagement basics (delivery, opens/clicks as measured by our email provider) | To know whether our emails work and stop sending what doesn’t | Legitimate interest (Art. 6(1)(f)) |
| Review answers, if you choose to leave one — anonymous: no email, no name, no IP address, nothing that links them to you | To learn what helped and what didn’t, and change what we make | Not personal data — we deliberately collect no identifier, so there is nothing to trace back to a person |
That’s all. We do not collect your name (unless you email us), your address, your medical records, your cycle data, or anything else. We deliberately built Mindborn so we don’t have to.
Consent is yours to give and yours to take back. You can withdraw consent at any time (unsubscribe link in every email, or write to hello@mindborn.io) with effect for the future. If you later choose a different path on our site (for example from “trying” to “pregnant”), we will again ask for your explicit consent before changing your tag.
3. What we deliberately do NOT do
Because a fertility-related tag is sensitive, we have hard rules:
- No Meta/Facebook, TikTok, Google, or any advertising pixel anywhere on our site or emails.
- No Google Analytics. Right now we run no visitor statistics at all. If we ever measure visits, it will be a privacy-first, cookieless service (such as Plausible or Fathom) that stores no personal data and cannot identify you — and this page will say so first.
- No uploading of our email list to any advertising platform — no “custom audiences”, no “lookalike audiences”, not in any form.
- No sale of personal data. No sharing of personal data for advertising. Ever.
4. Who processes data for us
We share your data only with the service providers needed to run Mindborn, under data processing agreements:
- MailerLite (Lithuania, EU) — email delivery and list management; data stored in the EU.
- Merchant of record — processes payments as the seller of record and is an independent controller of your payment data (card details never touch our systems). See their privacy policy at checkout.
- Vercel — website hosting, and storage for the anonymous review answers described above.
If a provider is located outside the EU/EEA, transfers are protected by an adequacy decision or EU Standard Contractual Clauses. We do not have — and do not want — any other data recipients.
5. How long we keep data
- Email + tag: for as long as you are subscribed, and deleted within 30 days of your unsubscribe or deletion request (suppression-list entry excepted, so we don’t accidentally email you again).
- Purchase records: as long as tax and accounting law requires (in Slovakia, generally 10 years), then deleted.
6. Your rights
Under the GDPR you have the right to access, correct, delete, and receive a copy of your data, to restrict or object to processing, and to withdraw consent at any time. One email to hello@mindborn.io is enough — we will respond within 30 days and we do not ask “why”.
You also have the right to complain to a supervisory authority — in Slovakia, the Office for Personal Data Protection (Úrad na ochranu osobných údajov SR, dataprotection.gov.sk), or the authority in your own EU country.
7. For visitors in the United States
- We do not sell your personal information and we do not share it for cross-context behavioral advertising (as those terms are defined in the California Consumer Privacy Act and similar state laws). There is nothing to opt out of, but you still have the rights to know, access, correct, and delete — email hello@mindborn.io.
- Washington State — My Health My Data Act: your path tag may be “consumer health data” under this law. We collect it only with your consent, use it only to deliver what you asked for, never sell it, and never share it for advertising. You have the right to access, withdraw consent, and have it deleted — email hello@mindborn.io. This paragraph, together with this policy, serves as our Consumer Health Data Privacy Policy.
- We honor deletion and access requests from all US states on the same terms.
8. Cookies and local storage
No cookies at all — not even necessary ones. See our Cookie Policy. The one thing kept on your device is your meditation library’s place in your browser’s local storage, so it opens on the right page when you come back. It never leaves your device. No tracking, no cookie banner theatre.
9. Children
Mindborn is for adults (18+). We do not knowingly collect data from anyone under 18.
10. Security
Access to your library works through magic links sent to your email; we store no passwords. Data lives with the EU-based or contractually safeguarded providers above, encrypted in transit. Our best security measure is structural: we simply don’t hold data worth stealing.
11. Changes
If we change this policy in any meaningful way, we will tell you by email before the change takes effect. The current version is always at mindborn.io/privacy.
Questions, requests, complaints: hello@mindborn.io