Your privacy, in plain language

What we store

Only what you create or choose to connect:

• Account: your email, display name, and, if you add them, date of birth and gender.
• Mood check-ins: your mood score, energy, anxiety, stress, sleep and focus ratings, emotions, factors and notes.
• Journal entries, and any AI reflection on an entry that you choose to keep.
• Assessments: your answers and scores for questionnaires such as the PHQ-9, GAD-7, PSS-10 and PCL-5.
• Health data you connect (for example Apple Health, Health Connect, Oura, Fitbit or Whoop): things like sleep, heart rate, HRV and steps.
• Audio: which meditations and sleep stories you played, where you stopped, and what you finished.
• Program progress: CBT modules, PTSD toolkit ratings and ADHD program weeks.
• AI coach: your conversations, plus short facts the coach remembers about you (coach memory). You can turn coach memory off in Privacy settings.
• Anything else you enter, such as your safety plan, medications, habits, goals, sleep and gratitude logs.
• Technical logs we need to run the service, fix problems and keep it secure.

Where it's stored and who handles it

We use a few companies to run the service. Each gets only what the feature you're using needs:

• Firebase authenticates your shared CoreForge account. Supabase manages the app session and stores wellness records in the United States (AWS US West, Northern California).
• Lovable hosts coreforgemind.com. Additional CoreForge backend services run on Render.
• AI providers: online coaching sends your message and relevant context (for example recent check-ins and remembered facts) to OpenAI. Other AI features, such as journal reflection, can use Anthropic, OpenRouter or OpenAI according to the configured provider. OpenAI also creates text search indexes (embeddings).
• Payments are handled by Stripe, Apple or Google. We don't see your full card details.
• Email is sent through Resend.

Product analytics

We record anonymous usage events, such as a screen being opened or a feature being used, to learn which parts of the app help people. These events don't include what you write, your scores or your health data.

You can opt out of product analytics in settings at any time.

What we don't do

• We don't sell your personal data.
• We don't show ads, and we don't share your data with advertisers or data brokers.
• Any sharing requires the permissions described when you enable it.

Export and delete

• Export: in Privacy settings, tap Export My Data to save a JSON copy of your data.
• Delete one kind of data: Privacy settings lists each category (for example mood entries or journal entries) with a Delete All button.
• Delete your account: this permanently removes your account and the data linked to it, and cancels a subscription bought on our website. Subscriptions bought through the App Store or Google Play must be cancelled there.
• Our database provider keeps backups for a limited time, so deleted data can remain in a backup until it's overwritten.

How long we keep it

We keep your data while your account is open, or until you delete it. Some data is deleted automatically even if you don't:

• Raw data from connected health devices: 2 years.
• Daily health summaries from connected devices: 5 years.
• Crisis records (see below): 7 years.
• When you delete your account, all of these are deleted with it.

If you're in crisis

Messages to the AI coach are checked for signs of crisis, using a keyword check and an AI check. If one is found, the app shows crisis lines for your region (in the US, call or text 988) and the coach focuses on your safety.

We keep a record of the event (its type, how serious it looked, your message and which resources we showed) so we can check that safety features work. It's kept for up to 7 years, or until you delete your account.

No one is watching conversations in real time, and we don't contact emergency services or your contacts for you. If you're in danger, call your local emergency number (911 in the US).

Not a medical service

CoreForge Mind is a wellness app. It doesn't diagnose or treat any condition and isn't a replacement for professional care. Assessment scores are screening results, not a diagnosis.

Questions or requests

Email support@coreforgemind.com. You can also ask us to access, correct or delete your data there. Our full privacy policy has the formal details.