Privacy Policy
Last updated: 16 July 2026
1. What we collect
When you use MindBloom we store the account details you provide (name, email), the daily check-ins, habits, career goals and skills, and toolkit or library activity you record, and basic usage data needed to operate the app (such as when you last checked in).
2. How we use it
Your recorded data is used to: show your own history back to you, compute behaviour patterns and progress summaries, generate personalised reflections and recommendations (some written with the help of an AI model), and maintain your account. We do not use your data to serve third-party advertising.
3. AI processing
Some reflections and coaching text are generated by sending a structured summary of your recorded activity (for example, check-in scores and dates — never free-text notes or your name) to Anthropic, our AI language model provider, in order to generate that text. Anthropic processes the request but does not use it to build a profile of you outside of generating the response.
4. Where your data lives
Your data is stored with Supabase, a hosted database and authentication provider. Access is protected by row-level security so that, by default, only you (and, for administrative purposes, authorised MindBloom administrators) can read your records.
5. Third-party service providers
To operate MindBloom we use a small number of third-party service providers, each processing only the data needed for their role. Supabase hosts our database and authentication, and processes your account details and recorded activity (check-ins, habits, goals, and other content) so it can be stored and retrieved securely. Vercel hosts and serves the application, and as our hosting infrastructure it processes the same data as part of normal web traffic. Anthropic provides the AI language model used to generate coaching reflections and journey summaries, and processes a structured summary of your check-in data (scores and dates only, never free-text notes or your name) to produce that text. Cloudflare Turnstile is a bot-protection check on our registration and password reset pages, and processes your IP address and a verification token to confirm you are not an automated script, which helps keep accounts genuine and prevents abuse.
6. What we don't do
We do not sell your personal data. We do not share your recorded check-ins, notes, or career information with advertisers.
7. Cookies and sessions
MindBloom uses cookies only to keep you signed in (session authentication). We don’t use third-party tracking or advertising cookies.
8. Your choices
You can review and update most of your information from within the app. You can request deletion of your account and associated data by contacting us at info@zavaraai.com.
9. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the date at the top of this page.
10. Governing law
This Privacy Policy, and any dispute arising from or relating to it, is governed by the laws of Victoria, Australia, and subject to the exclusive jurisdiction of the courts of Victoria, Australia.
11. Contact
Questions about this Privacy Policy, or requests relating to your personal data, can be sent to info@zavaraai.com.
This document is a general-purpose summary of data practices for a personal wellbeing app and has not been reviewed by a lawyer for any specific jurisdiction (e.g. GDPR, CCPA). It should be reviewed by qualified legal counsel before relying on it for a public launch.