Juan Carlos Martell, LMHC· Florida telehealth · incorporated in Florida in 2017
Privacy Policy - Psych Life
Last updated: November 2, 2026
Psych Life, Inc. built MindfulPractice. This policy explains what the app collects, where it goes, and how to get rid of it. Plain language, no tricks.
1. What we collect
The app stores your email, an account ID, when the account was created, and your consent record. Your email lets you have an account and sign in. Your consent record shows which version of the app’s disclaimer you accepted, that you accepted it, and when.
Journal entries are saved on your phone. Sync is on by default for signed-in users once you agree to the terms. You can turn it off with the Save to account switch in Journal settings. Turning it off keeps new entries on your phone only. It does not remove entries already synced. Entries already synced are removed when you choose delete everywhere, or when you delete your account.
Cloud Firestore is the only cloud store for journal text. Exercise text is never saved.
The app does not ask for access to your camera, microphone, location, contacts, photos, calendar, Bluetooth, or Health data.
You can turn on Lock journal in Settings (off by default). When it is on, the app may use Face ID or your device biometrics, with a PIN fallback, so only you can open the journal on this phone. Face ID, biometrics, and your PIN stay on your phone; Psych Life and Firebase never receive them.
You can turn on an optional daily local reminder (device only; off by default; not used for marketing).
The app includes no analytics, crash-reporting, diagnostics, or advertising software, so we do not collect usage analytics, crash reports, or diagnostics from it.
2. Where it is stored
Your account record, and journal entries synced to your account, are stored in a Google Firebase database (Cloud Firestore) located in the United States. Google provides Firebase to us as a service provider; it stores and processes this information on our behalf, under Firebase’s terms, and not for its own advertising.
Sign-in is handled by Firebase Authentication. Sign-in information, including your password, is processed by Google as part of that service. Your password is stored in hashed (scrambled) form, not as plain text, and we never see it. Firebase also keeps the time your account was created and the time you last signed in.
You create an account with your email address and a password. We don’t offer sign-in through Apple, Google or other third parties in this beta.
3. AI: none in this version
This version of MindfulPractice has no AI features. Nothing you write is sent to Anthropic or to any other AI company. Before adding any AI feature in the future, we will ask for your permission first. We will also update this policy and tell you in the app before the change takes effect.
4. Who reads what you write
Exercise text is not saved, so we cannot read it. We don’t read or monitor journal entries. If you need a person, the crisis lines in the app are there for exactly that.
5. What we never do
We do not sell your information. We do not share it with advertisers. The app does not show ads.
6. How long we keep it
We keep your account record until your account is deleted; encrypted backups may hold a copy for up to 7 days after that. Journal entries synced to your account stay until you delete them or your account is deleted.
7. Deleting your account and data
You can delete your account in the app. Open Settings, tap Delete my account, and confirm with your password.
You can also ask us by email. We’ll delete your account, your sign-in record, and the data listed in section 1 within 30 days, usually sooner, and only for requests sent from the email address on the account. To ask, email contact@psychlife.org from that address with the subject line “Delete my account”. We send you a confirmation email when it is done.
To show that we completed your request, we keep your request email and a short internal record of the deletion, which holds only an account ID and the dates. We keep these for 7 years, then delete them.
Deletion is permanent. After we delete your account, encrypted backups may keep a copy of your data for up to 7 days; after that, the backups expire and we cannot recover it. We never use backups to bring back a deleted account. Google, which hosts our database, may take longer to fully clear deleted data from its own systems.
Legal requests
We share your information with law enforcement, a court or a government agency only when the law requires it, such as a valid subpoena, court order or search warrant. We don't hand over information just because someone asks.
When we get a request, we check that it's legally valid and share only what it requires. If a request seems too broad or isn't valid, we may ask that it be narrowed or decline it.
We'll tell you about a request for your information before we share anything, by emailing the address on your account, unless the law forbids it or the request involves an emergency. If we can't tell you beforehand, we'll tell you afterward once we're allowed to.
We could provide your email address, account ID, the record of when you agreed to our terms, and the journal entries synced to your account. Because your journal isn't end-to-end encrypted, we could provide those synced entries if the law requires it. We can only provide what we still have; deleted data is handled as described in section 7.
If police or emergency services tell us someone is in immediate danger of death or serious physical harm, we may share the minimum information needed to help, such as your email address. This would not include journal entries unless the law requires it. We don't read or monitor journals, so we won't make a report ourselves based on what you write.
Questions? Email contact@psychlife.org.
8. Children
MindfulPractice is for adults, 18 and over. We do not knowingly collect information from anyone under 18. If we learn that we have, we delete it.
9. Where this applies
MindfulPractice is offered in the United States. The crisis resources in the app are United States services.
10. Security
Access to your account requires your password. We use the security controls Firebase provides, and access is restricted so that a signed-in user can reach only their own account record and any journal entries synced to it. No system is perfectly secure, and we will not pretend otherwise.
11. A note about health information
MindfulPractice is a wellness app, not a health care service, and using it does not create a patient relationship. Because of that, this app is not covered by HIPAA. That is not a loophole; it is why we keep so little about you.
MindfulPractice is an educational app; it doesn’t replace therapy or medical care, and it is not for emergencies. If you are in danger, call 911. In the US, you can also call or text 988 (Suicide & Crisis Lifeline). The app and our email are not monitored for emergencies.
12. Changes
If this policy changes materially, we will tell you in the app before the change takes effect.
Email newsletter
If you subscribe to the Psych Life newsletter on psychlife.org, we keep your email address and, if you give it, your first name in Kit (ConvertKit), our email provider, so we can send you Psych Life updates. We don’t ask for health information in the signup. Every email includes an unsubscribe link, or you can email contact@psychlife.org to be removed. When you sign up, Kit sends you an email asking you to confirm; you are not added to the list until you confirm.