Your data is yours.
Last updated: DD Month 2026
ShazzyMind is a personal self-development tool. It holds some of the most private things a person records — moods, reflections, faith, honest failings. This policy explains, plainly, what is collected, why, where it lives, and the control you have over it.
Who is responsible
The person responsible for your data (the "data controller") is YOUR NAME OR ENTITY, contactable at [email protected]. If you have any question about your data or want to exercise the rights below, that address is where to write.
What we collect
Only two kinds of information:
- Your account details — the email address you sign up with, and an encrypted form of your password. These are handled by our authentication provider, Supabase, and are used solely to let you log in and to keep your data attached to you.
- What you record in the app — your daily pillar scores, notes, emotions, decisions, flashcard progress, speaking-session scores, and monthly reflections. You enter all of this yourself. We do not collect anything you don't type in.
We do not collect analytics, advertising identifiers, location, contacts, or any tracking of your activity outside the app. There are no third-party trackers or ad networks.
What we do not do
We never sell your data. We never share it with advertisers. We never use the private things you record to build a profile of you for any purpose other than showing you your own history back to you.
Where your data is stored
Your account and your recorded data are stored by Supabase, which hosts the database and manages authentication on our behalf. Your project is hosted in the EU / region you chose region. Access is protected by database-level security rules so that each account can only ever read or write its own data. Audio recordings from the speaking trainer are never uploaded or stored — they exist only in your browser for immediate playback and are discarded the moment you finish.
Our lawful basis (UK/EU GDPR)
We process your account details to perform the service you asked for (this is the "contract" basis). Because some of what you record can be sensitive — for example reflections touching on health, mood, or religious practice — we process that content only on the basis of your explicit consent, given when you create an account and enter it. You can withdraw that consent at any time by deleting your data or your account, as described below.
How long we keep it
Your data stays until you remove it. If you delete your account, your data is deleted along with it. If an account is inactive for a long period we may contact you before removing it; we will never delete your data silently.
Your rights
Under UK and EU data protection law you have the right to:
- Access everything we hold about you — the app's Export feature gives you your full history as a file at any time.
- Correct anything inaccurate — you can edit or overwrite your entries directly.
- Delete your data — remove entries in the app, use "Erase all data", or ask us (at the contact address above) to delete your account entirely; account deletion removes everything, including your login. In-app account deletion is planned.
- Port your data — the export is a standard, machine-readable file you can take elsewhere.
- Withdraw consent or object to processing — by erasing your data in the app and requesting account deletion.
- Complain — if you're in the UK, to the Information Commissioner's Office (ico.org.uk); elsewhere, your local data protection authority.
Storage on your device
The app keeps a copy of your data in your browser's local storage so it works quickly and offline. This is not a tracking cookie — it's your own data, cached on your own device, and it clears if you clear your browser data or delete the app from your home screen.
Security
Passwords are never stored in plain text. Data travels over encrypted connections (HTTPS). Database access is restricted per account by row-level security. No system is perfectly secure, but we hold your data with the care its sensitivity deserves, and we will tell you promptly if we ever become aware of a breach affecting it.
Children
ShazzyMind is intended for adults. It is not directed at children under 16, and we don't knowingly create accounts for them.
Changes to this policy
If this policy changes in a way that affects you, we'll update the date above and, for significant changes, let you know in the app or by email.
Contact
Questions, requests, or concerns about your data: [email protected].