Your Privacy Choices

Depending on where you live, some or all of the following rights may apply to you. Where the law grants these rights, we honor them. Where it does not, we still aim to offer reasonable choices wherever we can.

You can submit a privacy request in either of these ways:

• In the app: Open MindPAL, go to Settings, and use the available account and data controls (including account deletion).
• By email: Contact us at support@pal.services with the subject line “Privacy Request,” and let us know which right you would like to exercise.

To help us respond quickly, please include:

• The right you wish to exercise (for example, access, deletion, or correction).
• The email address or account associated with your MindPAL profile.
• Any details that help us locate your information.

You may also use an authorized agent to submit a request on your behalf where the law allows. We may ask the agent to provide proof of authorization and may still ask you to verify your identity directly.

We will respond to verified requests within the time periods required by applicable law. If we need more time, we will let you know within the required timeframe and explain why.

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the “CCPA”), provides you with the rights described above, including the rights to know, delete, correct, opt out of sale/sharing, limit the use of sensitive personal information, and not be discriminated against.

Additional details for California residents:

• No sale or sharing. In the preceding 12 months, we have not sold personal information and have not shared it for cross‑context behavioral advertising. We do not sell or share the personal information of any user, including individuals we know to be under 16.
• Sensitive personal information. We use sensitive personal information only to provide and secure MindPAL — not to infer characteristics about you, and not for advertising.
• No financial incentives. We do not offer financial incentives or price differences in exchange for your personal information.
• Authorized agents. You may designate an authorized agent to make a request on your behalf, subject to verification.
• Global Privacy Control. Where required, we honor recognized opt‑out preference signals, such as the Global Privacy Control (GPC), as a valid request to opt out of sale/sharing for the browser or device sending the signal.

You may exercise your California rights using the methods described in How to Exercise Your Rights above. We will not discriminate against you for doing so.

We want to be direct: MindPAL does not sell your personal information for money or other valuable consideration, and we do not share it for cross‑context behavioral advertising.

Because we do not engage in these practices, no opt‑out is necessary to stop them. Even so:

• If your browser or device sends a recognized opt‑out preference signal (such as GPC), we treat it as a request to opt out of sale/sharing where applicable.
• If you have any questions about how your information is used, you can contact us at support@pal.services at any time.

To protect your privacy and security, we may need to verify your identity before we act on certain requests — particularly requests to access, correct, delete, or receive a copy of your information.

• Verification usually involves confirming control of the account or email address associated with your MindPAL profile, and may require additional information that matches what we already hold.
• We will only use information provided for verification to confirm your identity and to process your request.
• If we are unable to verify your identity to the standard required by law, we may be unable to fulfill the request, and we will explain why.

We are required to take these steps to prevent unauthorized access to sensitive personal information.

We honor privacy rights to the fullest extent the law requires. However, the law also recognizes that we cannot always delete or restrict every piece of information in every circumstance. As a result:

• We may retain certain information after a deletion request where retention is permitted or required — for example, to comply with legal or regulatory obligations, to detect and prevent fraud or security incidents, to resolve disputes or enforce our agreements, to complete a transaction you requested, or for other legitimate internal purposes compatible with the context in which the information was provided.
• We may retain de‑identified or aggregated information that can no longer reasonably be linked to you.
• Some records related to purchases and billing are handled by the app store or payment provider and are subject to their own retention practices.
• We may decline or limit a request that is not verifiable, that is manifestly unfounded or excessive, or where an exception under applicable law applies. If we cannot fully honor a request, we will tell you the reason.

These limitations exist to meet our legal obligations and to keep MindPAL safe and reliable. They are not used to avoid honoring valid requests.

We may update this page from time to time to reflect changes in our practices, technology, or applicable law. When we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of MindPAL after an update takes effect means you accept the revised page.

If you have questions about your privacy choices, would like to exercise a right, or need help with a request, please reach out:

• Email: support@pal.services
• Related: Privacy Policy and Terms of Service

We read every message and aim to respond with care.