The promise in one paragraph

WhereIsMyMind is a personal mood-journaling app. By default, everything you write stays on your iPhone — we do not create an account for you or send your entries to a server. You can choose, at any time, to turn on Cloud Sync so a clinician you trust can receive your entries. That is a separate, opt-in feature you can leave cleanly whenever you want.

What this policy covers

This policy applies to:

The iOS app — the WhereIsMyMind mood-journaling app.
This website — our marketing and sign-up site.
The therapist portal — the web area where healthcare professionals sign up and view entries shared with them by their patients.

The iOS app

Local-only mode (default)

No account is created and we do not know who you are.
Your entries live in the app's local database on your device, protected by iOS file protection and the optional App Lock (PIN and Face ID / Touch ID) you can set up.
Nothing about your entries is sent to us, our servers, or any third party.

Cloud Sync mode (opt-in)

We create an authenticated account for you using Clerk.
A snapshot of the entries you choose to share is encrypted by Evervault and stored in our Supabase database. It is only decrypted inside a controlled environment when your connected clinician requests it.
You can revoke a connection or leave Cloud Sync at any time, which removes the server-side snapshot and returns you to local-only mode.

iCloud personal backup (opt-in)

You may back up a snapshot of your entries to your own iCloud Drive under your Apple ID. This is separate from therapist Cloud Sync and is never sent to WhereIsMyMind servers.

This website

The marketing pages collect as little as possible. We do not run advertising networks, tracking SDKs, or third-party analytics that profile you. If you sign up for the therapist portal, the section below applies.

The therapist portal

Healthcare professionals create an account through Clerk at the therapist sign-up page, providing details such as name and email.
A therapist can only view a patient's shared entries once there is an active connection between them, and only for as long as that connection lasts.
Access is scoped per account, so a therapist can never see patients they are not connected to. When a connection ends, their access to that patient's entries is removed.
The portal is a tool for viewing entries a patient has chosen to share. It does not make us a party to the clinical relationship, and we do not review the content of entries.

Third parties we rely on

We use a small number of providers, only for the purposes above:

Apple — app distribution and optional iOS diagnostics.
Clerk — sign-in, sign-up, and account management.
Evervault — encrypts shared snapshots and decrypts them only for authorised clinician requests.
Supabase — encrypted database storage with row-level security.

Each provider is required to protect your data to the same standard set out here.

How long we keep data

Local entries — until you delete them or uninstall the app.
Shared Cloud Sync snapshots — until you delete them or leave Cloud Sync; removed within 30 days of the request.
Accounts (Clerk) — while your account exists; deleted within 30 days of a deletion request.

Your rights

Depending on where you live, you can:

Access a copy of the data we hold about you.
Correct inaccurate data — edit entries in the app, or email us.
Delete your data — leave Cloud Sync in-app, or email us.
Export your entries using the in-app Export feature (JSON).
Object to or restrict processing.
Complain to your local data protection authority.

To make a request, email adiklyne@gmail.com and we will respond within one calendar month. We do not sell your personal information or share it for advertising.

Security

App Lock PINs are stored only as hashes in the iOS Keychain and never leave your device.
Biometric checks use Apple's frameworks; biometric data never leaves the Secure Enclave.
All network traffic uses TLS, and shared snapshots are encrypted in transit and at rest.
Row-level security ensures each account can only reach data it is entitled to.

No system is perfectly secure. If you discover a vulnerability, please report it to adiklyne@gmail.com.

Not a medical device

WhereIsMyMind is a wellness journaling tool. It is not a medical device, does not provide diagnosis or treatment, and is not a substitute for professional advice. If you are in crisis, contact your local emergency services or a crisis line such as Samaritans 116 123 (UK) or 988 (US).

Children

WhereIsMyMind is not directed at children under 16 and we do not knowingly collect their data. If you believe a child has provided us with personal data, contact adiklyne@gmail.com and we will delete it.

Changes to this policy

We will update this policy when we change how we handle data. Material changes affecting Cloud Sync users will be surfaced in-app and may require fresh consent.

Contact

Questions, data requests, and security reports: adiklyne@gmail.com

See also our Terms of Service and How we handle your data.