Skymind- Skymind stores what you enter (moods, journal, check-ins, progress) so the app can work for you. Our database is in the EU (Frankfurt).
- We ask for your explicit consent before processing this wellbeing data, and separately before any AI feature is used.
- We never sell your data and never use it for advertising. If you allow it, Meta only learns that the app was installed from an ad.
- You can export all of it or delete your account from inside the app at any time.
1. Who we are
Skymind is provided by Next step d.o.o., Croatia ("we", "us"), the controller of your personal data. For anything about your data or this policy, write to support@skymindapp.com.
2. What we collect
Account
- Email address, an optional name, your language and time zone.
- Your password, stored only as a one-way hash (we can't read it). If you sign in with Apple or Google, we receive your name and email from them, plus an identifier for that account.
Wellbeing data (special category / health data)
- Answers and scores from the check-in questionnaires (for example GAD-7, PHQ-2 and PSS-10) and the focus areas you choose.
- Mood check-ins: how you feel, emotions, what's behind it, optional notes.
- Journal entries, CBT exercises, habits, program progress and reflections.
- If you use the companion: your messages and its replies, and the weekly reflections and daily journal questions written for you.
- Safety records: when a message suggests you may be in crisis, the app shows crisis resources and we keep a short record of that (the time and the triggering text) to make sure the safety feature works.
Subscription
- Whether you have Skymind Pro, which plan, renewal and trial dates. Payments are handled by Apple or Google; we never see your card details.
Technical
- A push-notification token for your device, if you allow notifications.
- Crash reports: the error, the app version and the device model, linked only to an account ID — never your messages, entries or email.
- Short-lived server logs (time, request path, error codes) for security and troubleshooting.
- Ad measurement (only if you allow it): Meta's SDK records that the app was installed and opened, so we can count installs from our ads. It doesn't use your advertising ID and receives nothing about your account or what you do in the app.
Kept only on your device
- Reminder settings, favourite meditations, appearance and language choice before sign-in.
3. Why we use it, and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Running your account and the app's features | Contract (Art. 6(1)(b)) |
| Storing and using your wellbeing data to personalise the app | Your explicit consent (Art. 9(2)(a)), given in the app before use |
| AI features: companion chat, weekly reflection, daily question | Your separate, optional consent (Art. 9(2)(a)); off until you turn it on |
| Subscriptions and restoring purchases | Contract (Art. 6(1)(b)) |
| Password-reset and other service emails | Contract (Art. 6(1)(b)) |
| Reminders and notifications you switch on | Consent (Art. 6(1)(a)), managed in the app and your phone settings |
| Counting installs from our ads (Meta) | Your optional consent (Art. 6(1)(a)); off unless you turn it on |
| Security, preventing abuse, crash reports | Legitimate interests in a safe, working service (Art. 6(1)(f)) |
| Accounting and tax records for purchases | Legal obligation (Art. 6(1)(c)) |
We don't use your data for advertising, don't sell it, and don't make decisions about you that have legal or similarly significant effects based on automated processing.
4. AI features
AI features are optional and off until you turn them on. When they're on, only the text needed for each feature is sent to our AI provider, Anthropic PBC (USA), solely to write a response:
- Companion chat: your messages and the recent conversation, plus your first name, language, focus areas, check-in questionnaire scores and recent mood ratings (rating, emotion and what's behind it).
- Weekly reflection: that week's mood ratings, emotions, what's behind them and the short notes you add to mood check-ins, plus which exercises, habits and program days you completed.
- Daily journal question: your focus areas and recent mood ratings.
Your journal entries are never sent to the AI, only which kind of template you used. Your data is not used to train AI models. Anthropic may keep it for a limited period for safety monitoring under its commercial terms, then deletes it. You can switch AI features off at any time in Profile.
The companion is not a therapist and can make mistakes. Messages that suggest a crisis are answered by the app directly with crisis resources, without being sent to the AI.
5. Who we share data with
Only with service providers that help us run Skymind, under contracts that let them use it solely for that:
- Hosting and database: servers and storage in the EU (Frankfurt).
- AI provider: Anthropic (USA), only if you turn on AI features.
- App stores and payments: Apple and Google, for purchases, sign-in and notifications; RevenueCat for subscription status.
- Ad measurement: Meta (Ireland/USA), only if you allow it, and only that the app was installed and opened.
- Crash reports and email: EU-based services for error reports (no personal content) and password-reset emails.
When data leaves the EU, it's protected by the EU–US Data Privacy Framework or the EU's Standard Contractual Clauses. We never sell your data.
6. How long we keep it
- Your account and everything in it: until you delete your account. Deletion is immediate and permanent in our database; copies in encrypted backups expire within 30 days.
- Crash reports: up to 90 days. Server logs: a few days.
- Purchase records required for accounting: as long as the law requires.
7. Your rights
Under the GDPR you can access, correct, export (portability), restrict or delete your data, object to processing based on legitimate interests, and withdraw consent at any time (this doesn't affect processing before withdrawal).
- Export: Profile → Export my data.
- Delete: Profile → Delete my account, or see how to delete your account.
- AI features: Profile → AI features.
- Ad measurement: Profile → Help us see which ads work.
- Anything else: support@skymindapp.com. We reply within one month.
You can also complain to a data-protection authority. In Croatia this is AZOP, the Croatian Personal Data Protection Agency (azop.hr), or the authority where you live.
8. Security
Data is encrypted in transit and at rest. Passwords are hashed with Argon2id, sign-in tokens expire quickly, and access to production systems is limited to the people who run Skymind.
9. Age
Skymind is for people aged 16 and over. If you believe someone younger has given us data, contact us and we'll delete it.
10. Not a medical service
Skymind supports wellbeing; it doesn't diagnose or treat any condition and isn't a substitute for professional care. In an emergency, call 112 (EU) or your local emergency number.
11. Changes
If we change this policy in a way that matters, we'll tell you in the app and ask for your consent again where needed. The version and date at the top always show what's current.