Mind ArtistsMind Artists

Privacy

Privacy Policy

Last updated: 28 August 2026

Who we are

Mind Artists (“we”, “us”) operates themindartists.com and related Mind Artists properties. Contact: hello@themindartists.com.

What we collect

  • Account and profile data: your email and, when you choose to provide them, your display name, profile photo and bio. A profile photo selected in the mobile app is uploaded to our Supabase storage. The app asks for photo library access only so you can select the image to upload.
  • Usage and progress data: pages or screens viewed, links clicked, content accessed, videos watched, playback position, time watched, completed steps, points, event RSVPs and progress through journeys. Used to provide your experience, resume your content and improve the product.
  • Reflections and personal text: information you choose to enter in a Mind Artists experience, including reflections and answers to prompts. We treat this as sensitive content. The text of private reflections is not sent to analytics, advertising systems or application logs.
  • Community data: posts, comments and reactions you choose to share, together with the display name and profile photo shown with your contribution. Community contributions are visible to other participants on the community surface.
  • Marketing attribution: UTM parameters, referrer, and advertising identifiers (e.g. Meta Pixel cookies) when you arrive from a campaign.
  • Device data: IP address and user-agent, used for security (rate limiting, fraud prevention) and analytics.
  • Event participant agreements: when you sign the agreement for a live event, we record your name, email, the exact version of the agreement you signed, the time you signed it, and your IP address and browser, so that we have a record of the agreement. If you choose to tell us about a health condition before an event, we use it only to keep you safe on the night and we do not share it. You can ask us to delete your agreement record once the event has passed.
  • Google Calendar connection data: for Mind Artists team members who choose to connect a calendar, we store the connected account identifier, selected calendar, granted permissions, connection status, and an encrypted OAuth refresh token. We request free/busy information and access the booking events managed by our scheduling system.

Mind Artists mobile app

The mobile app uses your account to show the content and community available to you and to keep your activity in sync across devices. It sends account and profile changes, the profile photo you select, community contributions, playback activity and journey progress to the Mind Artists service. That information is stored with your account in Supabase.

On a mobile device, your sign-in session is stored in the device's secure storage. You can sign in with email and password, or request an email containing a magic link and a 4-digit sign-in code. Password-reset emails also include a link and code.

When configured in the app, PostHog receives product events such as sign-in method, sign-in-link requests, password setup and capsule engagement. Signed-in activity is associated with your account ID and email. When configured, Sentry receives application error and performance diagnostic data, which can include app, device and operating-system information needed to diagnose a failure. We do not put reflection or community text into these analytics events.

How we use it

  • To deliver the resources you request (e.g. the PDF guide).
  • To create and secure your account and sign you in by password, emailed magic link or emailed code.
  • To save your profile, content progress, reflections and community contributions.
  • To send occasional product and educational emails. You can opt out at any time.
  • To measure and improve our marketing (Meta Pixel + Conversions API, PostHog product analytics).
  • To keep the service secure (abuse prevention, logging).
  • To check team availability and create, verify, update, or remove calendar events for calls booked through Mind Artists.

Who we share it with

We use trusted infrastructure providers as sub-processors. Where the provider operates an EU data region we use it by default.

  • Supabase (EU region) - authentication and database.
  • Resend - transactional email delivery and email engagement signals (delivery, open, click, bounce, spam complaint) via webhook.
  • Vercel - hosting.
  • Mux - video streaming and playback analytics.
  • PostHog (EU cloud, eu.i.posthog.com) - product analytics and session-level behaviour. PII (email, name) is stored on the PostHog person object only, not on individual event rows, so deletion-on-request cleanly removes it everywhere.
  • Sentry - application error monitoring and performance diagnostics for the website and mobile app.
  • Meta (Facebook / Instagram)- advertising performance via the Meta Pixel in your browser AND the Meta Conversions API (CAPI), a server-to-server connection. We send hashed email / phone / name (SHA-256), plus IP, user-agent and Meta’s own cookies (_fbp, _fbc) to help match conversions back to the ad you saw. You can opt out at facebook.com/settings.
  • Cloudflare - bot/abuse protection (Turnstile) on public forms.
  • Google Calendar - availability checks and calendar invitations for calls booked with connected Mind Artists team members. Google Calendar access is initiated by the team member and is used only for scheduling those calls.

We do not sell your data. We only share it with these providers to operate the service.

Google Calendar data

Google Calendar credentials are encrypted before storage and are available only to our server. We do not store the titles, descriptions, or attendees of unrelated calendar events. A team member can disconnect their calendar in the Mind Artists admin settings at any time; disconnecting removes the stored OAuth connection and stops our access. Google API data is handled in accordance with the Google API Services User Data Policy, including its Limited Use requirements.

Retention and deletion

We keep account, profile, progress, reflection and community data while your account is active so the service can provide it back to you. We may retain information for longer where needed to meet legal obligations, resolve disputes, prevent abuse or protect the service. Analytics and diagnostic records are kept according to the retention settings of the services listed above.

You can ask us to delete your account and associated personal data by emailing hello@themindartists.com. We will delete or anonymise it unless we need to retain specific information for a legal or security reason. Content you shared with a community may need to be retained in de-identified form to preserve the surrounding conversation.

Your rights

You can request access to, correction of, or deletion of your personal data at any time by emailing hello@themindartists.com. You can also unsubscribe from marketing emails using the link in any email we send you.

Cookies

We set cookies for authentication (strictly necessary), a long-lived anonymous visitor id (ma_vid) used to keep A/B test bucketing stable across sessions, analytics (PostHog), and advertising measurement (Meta Pixel - _fbp, _fbc). You can disable non-essential cookies using your browser's settings.

Changes

We may update this policy. Material changes will be announced by email or on this page.