Privacy Policy

Frequencies for the Mind and Body ("FMB", "we", "us") provides a neurofeedback wellness platform — a website and mobile app delivering sound- and light-based entrainment sessions. This policy explains what personal information we collect, why, and the choices you have. It applies to our website and app worldwide, including users in the European Union and the United States.

What we collect

• Waitlist and contact details — email address, and optionally your name and message, when you join the waitlist or use the contact form.
• Account information — email, name, and a securely hashed password when you create an account (accounts are currently invite-only).
• Session and wellness data — if you choose to connect a heart-rate monitor or watch, we store heart-rate readings linked to your sessions so we can show you your own reports. We never collect this without a device you connected yourself.
• Payment status — subscription status via our payment processors. We never see or store your card number.
• Preferences — your dark/light theme choice, stored in your own browser (localStorage), not on our servers.

We do not use advertising trackers and we do not sell personal information.

Why we use it (legal bases under GDPR)

• To provide the service you asked for — accounts, sessions, reports (contract).
• To email you launch news if you joined the waitlist (consent — unsubscribe anytime).
• To answer messages you send us (legitimate interest).
• To keep the service secure, e.g. rate-limiting abuse (legitimate interest).

Who processes it for us

Your data is stored and processed by service providers acting on our instructions: Vercel (website hosting), Supabase (database), Resend (transactional email, e.g. password resets), and RevenueCat with Stripe/PayPal (subscriptions and payments). Audio files are delivered via Cloudflare; no personal data is attached to them. Some providers are located in the United States; transfers rely on their standard contractual safeguards.

How long we keep it

Account and session data: for as long as your account exists. Waitlist entries: until launch communications end or you unsubscribe. Contact messages: up to 2 years. You can ask us to delete any of it sooner.

Your rights

Everyone: you can ask us what we hold about you, ask for a copy, correction, or deletion, and withdraw consent at any time by emailing ask@frequenciesforthemindandbody.com.

EU/EEA residents (GDPR): you additionally have the rights to restrict or object to processing, to data portability, and to lodge a complaint with your local supervisory authority.

California residents (CCPA/CPRA): you have the rights to know, delete, and correct, and to non-discrimination for exercising them. We do not sell or share personal information as defined by the CCPA, so there is nothing to opt out of.

Children

FMB is not directed at children under 16, and we do not knowingly collect their data. If you believe a child has provided us personal information, contact us and we will delete it.

Changes and contact

We will post any changes to this policy on this page with a new "last updated" date. Questions or requests: ask@frequenciesforthemindandbody.com.