Privacy Policy

Mind Mirror EEG App

Privacy Policy – Mind Mirror App

Effective Date: 23-9-2025
Last updated: October 2025


Mind Mirror App — developed and operated by Mind Mirror Press & Media (“we,” “our,” “us”) — is committed to protecting your privacy.
This Privacy Policy explains what information we collect, how we use it, and the choices you have regarding your data.

By using the Mind Mirror App (“the App”) or visiting our website, you agree to the terms of this Privacy Policy.


1. Scope

This policy applies to all users of the Mind Mirror App, related websites, and online services offered under the Mind Mirror brand.
It covers data collected through the App, our support channels, and integrated services such as payment or analytics providers.


2. Information We Collect

We collect only the data necessary to deliver and improve our services:

2.1. Account & Contact Data

If you create an account or contact us, we collect your name, email address, and any information you choose to share with us (for example, support requests or subscription details).

2.2. App Usage & Technical Data

When you use the App, certain technical information may be collected automatically, such as device model, operating system version, anonymised device identifiers, time of access, and app performance statistics.


We may use Google Play Services or equivalent diagnostic tools to detect crashes or errors. These services may collect limited, anonymised technical data as described in their own privacy policies.

2.3. EEG & Meditation Data

If you choose to record or analyse sessions with a connected EEG headband, the App may store non-identifiable session data (e.g., brainwave frequency ranges, session duration, meditation type).
This data stays on your device unless you choose to back it up or share it. We do not sell or share EEG data with third parties.

2.4. Bluetooth & Location Permissions

Our App connects to EEG headbands via Bluetooth.
Because Android may require Location permission for Bluetooth device discovery, the system might prompt you to grant this access.

  • We use this permission only to enable Bluetooth connection between your mobile device and your EEG headband.

  • We do not collect, store, or share your precise or approximate location data.

  • The permission is requested only when you connect a Bluetooth device and is not used while the App runs in the background.

  • On Android 12 and higher, we apply the technical flag neverForLocation, which prevents Bluetooth access from being used to determine location.

This permission exists purely for device connectivity and is never used for analytics, advertising, or tracking purposes.


3. How We Use Your Data

We use the collected information to:

  • Provide and maintain the App’s core functionality;

  • Manage user subscriptions and in-app purchases;

  • Offer personalised session summaries and performance feedback;

  • Improve our services and troubleshoot technical issues;

  • Respond to your questions and support requests; and

  • Comply with legal obligations.

We do not sell, rent, or trade your personal data.
We do not track or use your physical location — any permission labelled “location” exists solely to enable Bluetooth pairing with your EEG device.


4. Legal Basis for Processing (EU & EEA Users)

We process your information on the following legal bases:

  • Contractual necessity — to provide the App’s core services;

  • Legitimate interest — to ensure functionality, security, and customer support;

  • Consent — for optional analytics or marketing communications;

  • Legal obligation — when required by applicable law.


5. Sharing of Information

We may share limited data with trusted service providers who assist us in operating the App, such as:

  • Cloud hosting and storage providers;

  • Payment processors;

  • Crash-reporting or analytics services (e.g., Google Play Services).

These partners process data only on our behalf and under strict confidentiality and data-protection agreements.

We may also disclose information if required by law or to protect our legal rights, safety, or property.


6. Data Storage & Security

Your data is stored in secure systems located within the European Economic Area (EEA) or other jurisdictions providing adequate protection under the GDPR.
We apply technical and organisational measures to protect data against loss, misuse, or unauthorised access.
While no digital system is entirely risk-free, we continuously review and enhance our safeguards.


7. Data Retention

We retain your data only as long as necessary to provide the App and comply with legal obligations.
Session data stored on your device remains under your control.
If you delete your account, we will remove your personal data from our servers within 30 days unless retention is required by law.


8. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access, correct, or delete your data;

  • Withdraw consent for specific processing;

  • Request data portability; and

  • Object to processing under legitimate interest.

To exercise these rights, contact us at the email address below.
We may request verification of your identity before processing such requests.


9. Data Deletion Requests

You can request deletion of your account and all associated data at any time by emailing the email address below.
After verifying your request, we will permanently delete your data and confirm completion by email.


10. Children’s Privacy

The Mind Mirror App is not intended for children under 13 years of age.
We do not knowingly collect personal data from anyone under 13.
If you believe a child has provided personal information to us, please contact us so we can promptly delete it.


11. Third-Party Links and Services

The App may contain links to third-party websites or integrations.
We are not responsible for the content, privacy policies, or practices of those external services.
We encourage you to review their privacy statements separately.


12. International Transfers

If data is transferred outside your country, we ensure adequate protection through contractual safeguards consistent with GDPR standards (such as EU Standard Contractual Clauses).


13. Changes to This Privacy Policy

We may update this Privacy Policy to reflect legal, technical, or business developments.
Any updates will appear on this page with a revised “Last updated” date.
If changes are material, we will notify you within the App or by email before they take effect.


14. Contact Us

If you have questions, requests, or concerns about this Privacy Policy, please contact us at:
Email: emma@mindmirror.events