Privacy Policy

This Privacy Policy explains how &Mind LLC, a Nevada limited liability company (&Mind, "we", "us") collects, uses, and protects information when you use the &Mind app. By using &Mind, you agree to this Policy.

1. Who we are

&Mind is operated by &Mind LLC, 5725 S Valley View Blvd, Ste 5 #325173, Las Vegas, NV 89118. For privacy questions or to exercise your rights, see Section 11.

2. Information we collect

• Account and contact. Your email address and birth year.
• Cognitive health data. Your assessment sessions, task responses, scores, and brain-age estimates.
• Lifestyle data. Your lifestyle profile and daily check-ins (such as sleep, mood, and stress).
• Device and usage. Basic technical information needed to operate and secure the service.
• Usage and interaction analytics (first-party). Which screens and tasks you use, collected on our own systems to understand and improve &Mind.

3. How we use your information

We use your information only to provide the service: to deliver assessments, calculate your scores, improve our scoring through anonymous aggregates, sign you in, and keep the service secure. We process your health data on the basis of your consent.

4. Consumer Health Data

Your cognitive and lifestyle information is sensitive consumer health data. We collect and process it only with your consent. We do not sell your health data, and we do not share it for advertising or for any cross-context behavioral advertising. We will not share your health data with third parties except as needed to operate the service (see Section 5) or with your separate authorization. You may withdraw consent and delete your data at any time from your Account.

5. How we share information

We share information only with service providers that help us operate &Mind, under contracts that limit their use of it: Supabase (database, authentication, hosting), Vercel (application hosting), Resend (sign-in emails), Google (optional sign-in), Upstash (rate limiting), and Sentry (error monitoring). Personal information is never sold and is not used for targeted advertising.

6. Data retention

We keep your information while your account is active and delete it when you ask us to. Anonymous aggregate statistics, which do not identify you, may be retained to maintain our scoring norms.

7. Security

We encrypt data in transit and at rest, enforce row-level access controls, and follow least-privilege practices. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

8. Your rights and choices

You can access, export, and delete your data, and withdraw consent, directly from your Account. Depending on where you live, you may have additional rights under the laws of California (CCPA/CPRA), Washington (My Health My Data Act), and Nevada (SB 370 consumer health data law), including the right to know, delete, and opt out. We do not discriminate against you for exercising your rights. To make a request, use your Account tools or email support@andmind.com.

9. Children

&Mind is intended for adults 18 and older. We do not knowingly collect information from anyone under 18.

10. Changes to this Policy

If we make material changes, we will update this Policy and ask you to review and accept it again before you continue using &Mind.

11. Contact us

&Mind LLC, 5725 S Valley View Blvd, Ste 5 #325173, Las Vegas, NV 89118.