Privacy Policy

1. The short version

Your data is yours. We use it to deliver Peak Mind Coach to you. We never sell it. We never share it with advertisers. AI providers we use cannot retain or train on it. Sharing your data with another human (a paired Leader or Engineer) is granular and reversible. Contributing your data to our research is a separate, opt-in choice you make inside the app — nothing in our Terms or this Policy grants those rights at signup.

2. What we collect

Three categories:

Account information. Name, email address, date of birth, the tier you subscribe to, and the connections you create with paired Leaders or Engineers.

Activity inside the Service. Your responses to assessments (PPFA, PMM-DAT, SDM), your daily readiness check-ins, your tool sessions and reflections, your goals, your journal entries, your game scores, the AI-generated insights returned to you, and the events you log on your performance calendar.

Optional sensor data, only if you opt in. If you grant HealthKit access, we read HRV, resting heart rate, and sleep metrics to compute your Body Readiness score. If you connect a wearable, an environmental sensor, an eye-tracker, a neural sensor, or a voice biomarker pipeline, the relevant data flows in only after the matching consent toggle in Settings is enabled.

3. Why we collect it

To deliver the Service to you. Your assessments inform what tools the system prescribes. Your check-ins drive the readiness gauge. Your tool history feeds the Performance Dial. Your data is what makes the product work — without it, the Coach has nothing to coach against.

To improve the Service generally — anonymously and aggregately. By default, your scores feed anonymous cohort benchmarks so you can see how your trajectory compares to similar performers. Individual values are never shown to anyone else and cannot be linked back to you. You can turn this off in Settings → Research & Privacy.

To support research, only if you opt in. Beyond the anonymous benchmark default, every other research use of your data — longitudinal analysis, IRB-approved studies, academic-partner sharing, AI coaching improvement, neural / eye-tracking / environmental / voice / genomic / location signals — is gated by a separate, granular opt-in toggle in Settings. We do not collect, retain, or analyze any of these unless you grant the matching scope.

4. Who can see your data

You. Always. Your full data is visible to you on the Track tab and in the Settings export.

Paired humans (Leaders and Engineers), only the categories you toggle on. When you connect with a Leader or an Engineer, they can view the categories you've enabled in Settings — assessments, readiness, tool progress, goals, reflections — and nothing more. Each is a separate toggle. You can revoke any at any time, and revocation takes effect immediately.

Peak Mind Mechanics® staff. Limited to legitimate operational needs (debugging, customer support, abuse investigation). Staff access to identifiable data is logged.

Never. We do not sell your data. We do not share it with advertisers. We do not let third-party AI providers retain it or use it for their training. We do not disclose it for marketing purposes.

5. AI providers — zero retention

We use AI services (currently OpenAI; Anthropic, Cartesia, and Speechify in adjacent paths) to generate coaching insights, summaries, narrations, and audio. Every provider operates under one of two postures:

• Contractual zero-retention agreement where available — the provider contractually commits not to retain, log, or use prompts and responses beyond returning them to us.
• Default no-training tier where the contractual addendum is not yet in place — the provider's standard terms already prohibit using customer data for training. We are progressing every contract to the explicit zero-retention posture.

Either way, your data is never used to train an AI provider's model. Architectural firewalls also limit what the AI sees: PMM's proprietary methodology (framework names, scoring algorithms, internal taxonomy) is sanitized out before any AI call.

6. Research participation — separate from these terms

Peak Mind Coach is designed to support legitimate research into how mental performance training works across diverse performers. That work depends on data — but only data you choose to contribute. Research participation is broken into thirteen granular scopes, each one a separate yes-or-no toggle in Settings → Research & Privacy:

• Anonymous performance benchmarks (default ON; powers cohort comparisons; individual values never shared)
• Longitudinal improvement research
• Continuous wearable streams
• De-identified sharing with academic partners (Stanford, Michigan, UNC type)
• Published study participation (IRB-approved)
• Open dataset contribution
• Neural activity signals (EEG, fNIRS — only if you connect a device)
• Eye tracking signals (only if you use a compatible eye-tracker)
• Environment around your sessions (lighting, noise, air quality)
• Voice signals (on-device features only; raw audio never stored)
• Genomic data (only if you import it)
• Training venue and travel context (no raw GPS)
• AI coaching improvement (de-identified, internal use only — never shared with our AI providers)

Every scope except the anonymous benchmark default is opt-in only. You can change any scope at any time. Revocation takes effect for future use of your data; data already in a prepared training extract is removed from the next refresh of that extract.

7. How to delete your data

Delete your account. Settings → Delete Account. Permanently removes your profile, assessment history, tool progress, connections, and all associated data. Cannot be undone.

Withdraw research consent. Settings → Research & Privacy → toggle off any scope. Future events stop contributing under that scope. Data already contributed is removed from any in-prep training set on its next preparation pass.

Export your data first. Settings → Export My Data — downloads a complete copy of everything we hold about you in JSON format. Available before deletion or at any other time.

8. Children's privacy

Peak Mind Coach is not intended for users under 13 years of age. We do not knowingly collect data from anyone under 13. Account signup enforces a 13+ date-of-birth gate. If we become aware that data from a user under 13 has been collected, we will delete it.

If you are between 13 and 17, the Terms of Use require a parent or legal guardian to have reviewed and agreed to the Terms on your behalf.

9. International users

The Service is operated from California, USA. By using the Service, you consent to your data being processed in the United States. We do not currently offer regional data residency. If you are subject to GDPR, UK GDPR, CCPA, or similar regulations, you have the rights granted by those regulations (access, rectification, erasure, portability, objection); contact us at the address below to exercise them.

10. Sub-processors

We use the following sub-processors to deliver the Service:

• Supabase — authentication, database, edge function hosting
• Stripe — payment processing for web subscriptions
• RevenueCat — payment processing for iOS subscriptions
• Resend — transactional email (account confirmation, password reset, referral notifications)
• OpenAI — AI text generation and transcription, under no-training tier
• Cartesia — text-to-speech for visualization scripts, under provider terms
• Speechify — text-to-speech fallback, under provider terms
• Sentry — error and crash reporting (no PII or user content captured)
• Expo — mobile app delivery, OTA updates, push notifications
• Vercel — web app hosting

We will update this list as the sub-processor set changes. Material additions are surfaced in-app.

11. Cookies and tracking

We do not use third-party advertising or analytics trackers. Authentication uses standard session cookies. The mobile app uses anonymized device identifiers for push notification delivery and crash reporting only. We do not place cross-site trackers.

12. Data retention

We retain your data for as long as your account is active. On account deletion, all personal data is permanently removed from our systems. De-identified aggregates that you previously consented to (anonymous benchmarks, research scopes you enabled) may persist in aggregate form — but no row is reconstructable to you after deletion.

13. Changes to this Policy

We will notify you in-app when this Policy changes. Material changes — particularly any change to what data is collected by default or who has access to it — require explicit acknowledgement before continued use. Minor clarifications are surfaced via the in-app changelog.

14. Contact

Questions about this Policy, requests to exercise your data rights, or concerns about how your data is handled: contact us at info@peakmindmechanics.com.