MindsetMonk™ Privacy Policy

Effective date: December 24, 2025
Applies to: mindsetmonk.ca and the MindsetMonk™ mobile app (iOS & Android)
Your trust matters. This policy explains what we collect, why we collect it, how we protect it, and the choices you have.

1) Who we are

“MindsetMonk™”, “we”, “us”, and “our” refer to the MindsetMonk™ team that operates the MindsetMonk™ website and mobile application (the “Service”).

Questions? Email: [email protected]

2) Data we collect

A. Account & identity data (optional)

  • Email address (if you create an account)
  • Apple Sign-In identifier (if you sign in with Apple)
  • Basic account metadata (created date, last sign-in)

You may be able to use parts of the app without creating a full account (for example, via a guest/anonymous session).

B. App content & progress data

  • Course progress (completed lessons, unlock timestamps)
  • Quiz score (if you take the quiz)
  • Dragon Log entries you choose to record (your “Most Important Task” and completion checkbox)

C. Purchase & subscription data

  • Subscription status and entitlement information
  • Purchase receipts / transaction identifiers (as needed to validate access)

Payments are processed by Apple (App Store) or Google (Play Store). We do not store your full payment card details.

D. Device & diagnostics data

  • Device and app information (e.g., app version, device model, OS version)
  • Diagnostics and crash/error information (to improve stability and performance)
  • IP address may be processed by our hosting/providers when you use the Service

E. Website data (cookies)

If you visit our website, it may use essential cookies or similar technologies for basic functionality and security. If we use analytics cookies, we will update this policy and/or provide cookie choices where required.

3) How we use your data

We use your data to:

  • Provide the core features of the Service (course access, lesson unlocks, progress saving, Dragon Log)
  • Authenticate you (if you sign in) and secure your account
  • Deliver subscription entitlements (paid access) and restore purchases
  • Send optional reminders you enable (e.g., the daily “Slay the Dragon” reminder)
  • Improve reliability, troubleshoot issues, and maintain security
  • Comply with legal obligations and enforce our terms
We do not sell your personal information. We do not use your data for third-party behavioral advertising.

4) How we share information

We share information only as needed to run the Service:

  • Service providers (processors) that help operate the app and website, such as:
    • Firebase (Google) for authentication, data storage (progress/logs), and app reliability services
    • RevenueCat for subscription management and entitlement status
    • Apple / Google for in-app purchases and store distribution
  • Legal / safety: if required by law, regulation, subpoena, or to protect rights and safety.
  • Business changes: if the Service is involved in a merger, acquisition, or asset sale, information may be transferred as part of that transaction.

Providers may process data in countries other than where you live. We take reasonable steps to require appropriate safeguards.

5) Device permissions

The MindsetMonk™ app may request the following permissions, only to support features you choose to use:

  • Notifications: to send reminders (e.g., daily “Slay the Dragon”)
  • Calendar access: to create a 30-minute lesson block when you tap “Schedule this Lesson”

You can change these permissions anytime in your device settings. The app should remain usable even if you decline optional permissions.

6) Subscriptions & billing (IAP-only)

Some lessons and features may require a paid subscription. Subscriptions are handled through Apple’s App Store or Google Play billing.

  • You can manage or cancel your subscription through your App Store / Play Store account settings.
  • If you reinstall the app or change devices, use Restore Purchases inside the app to regain access.

7) Data retention

We keep personal information only as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. When you delete your account, we delete or de-identify associated personal data unless we are legally required to keep certain records.

8) Security

We use reasonable administrative, technical, and organizational measures to protect your information. However, no system can be guaranteed 100% secure.

Please use a strong password (if applicable) and keep your device secure.

9) Your choices and rights

A. Access, correction, deletion

You may request access to, correction of, or deletion of your personal information.

B. Delete your account

If the app supports account creation, you can initiate account deletion from inside the app (typically under Settings > Delete Account). If you cannot access the app, you can request deletion by emailing [email protected].

C. Notifications

You can enable/disable reminders in the app Settings and/or your device notification settings.

D. Dragon Log content

Your Dragon Log entries are optional. You control what you write. Avoid entering sensitive personal information.

Depending on where you live, you may have additional rights under applicable privacy laws. We will respond within a reasonable timeframe.

10) Children’s privacy

The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, please contact us so we can delete it.

11) Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Effective date” at the top of this page. Material changes may also be communicated in-app or on our website.

12) Contact

Email: [email protected]

If you have questions about privacy, account deletion, or data requests, email us with the subject line “Privacy Request”.

Important note

This page is a practical privacy policy template to support app submission and user transparency. If you need legal certainty (especially for GDPR/UK GDPR/CCPA/CPRA), consider having counsel review it.