Privacy Policy
Last updated: 1 November 2026
The short version. We collect what we need to run SlowMind for you: your account details, your test answers and results, and basic technical data. Your answers are used to generate your personal readings, including through AI providers acting under contract for us. We don't sell your data and we don't show ads. Only if you allow it, we use your device's advertising identifier to measure which of our own ads brought you to SlowMind. On our website, the free quizzes use the Meta Pixel and Google Analytics to measure our ads, and so does the web app at app.slowmind.app; in Europe only if you accept, and your answers are never sent (Section 9). If you buy Premium on the web, Stripe takes the payment and we never see your card (Section 2.5). You can delete your account and its data at any time, in the app or by email: see how to delete your account.
1. Who is responsible for your data
This Privacy Policy explains how Slow Mind, MB ("SlowMind", "we", "us"), the data controller, handles your personal data when you use the SlowMind mobile app, the web app at app.slowmind.app, the website slowmind.app, or contact us.
Controller: Slow Mind, MB
Registered address: Burbiškių g. 6-59, LT-03164 Vilnius, Lithuania
Company code: 307673657
Privacy contact: privacy@slowmind.app (general support: info@slowmind.app)
We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and other applicable data-protection laws. If you do not agree with this Policy, please do not use the Service.
2. What we collect, why, and for how long
2.1 Your account
| Data | Email address; name (as you enter it, or as provided by Google or Apple sign-in); authentication identifiers; account creation date. |
|---|---|
| Purpose | Creating and securing your account, signing you in, syncing your content across your devices. |
| Legal basis | Contract (GDPR Art. 6(1)(b)). |
| Retention | Until you delete your account. Deletion removes your profile and personal content from our production systems; residual copies in encrypted backups expire on the backup cycle. |
2.2 Onboarding, tests, and results
| Data | Your onboarding questionnaire choices; your test answers; the trait scores computed from them (for example five-factor percentiles, emotional-intelligence dimensions, Enneagram type, attachment pattern, values ranking); which test was recommended to you. |
|---|---|
| Purpose | Scoring your tests, generating your personal readings and insights, recommending courses, remembering your progress so it survives logging out and switching devices. |
| Legal basis | Contract (Art. 6(1)(b)): this processing is the core of the Service you sign up for. To the extent test answers may reveal information about your psychological characteristics, we process them on the basis of your explicit consent given when you choose to take a test (Art. 9(2)(a)); you can delete your results and account at any time. |
| Retention | Until you retake the test (which replaces earlier answers) or delete your account. |
2.2.1 Numerology (optional, just for fun)
| Data | Your date of birth, only if you choose to use the Numerology feature, and the numbers worked out from it (for example your Life Path and Personal Year). With Premium, also the numerology reading written from those numbers. |
|---|---|
| Purpose | Showing your numbers and their traditional meanings, keeping them the same on all your devices, and writing your numerology reading if you ask for it. Your date of birth is not used for advertising, is not sent to analytics or advertising partners, and is never sent to our AI providers: they receive only the numbers. |
| Legal basis | Contract (Art. 6(1)(b)): providing a feature you choose to use. |
| Retention | Until you remove your date of birth in the app (which also removes your numerology reading) or delete your account. |
2.2.2 Compare with someone (optional)
On every test, once you have taken it yourself, and on your numerology numbers, you can compare your result with a partner or friend. Nothing is shared unless you both choose it.
| Data | When you invite someone: an invite code, the test it is for, your first name, and when it was created. When someone accepts: a link between your two accounts for that one test, called a pair. Also a joint reading written for the two of you: when either of you has Premium, or when its opening summary is offered to everyone. Reading all of it takes your own Premium. |
|---|---|
| What the other person sees | Only your scores for that one test, never your answers to its questions. For Core Values, only your ten value scores, never your life-area scores. For numerology, only your numbers, never your date of birth. They never see your other tests, your email address or anything else in your account. If you made the invite, they also see your first name, and so does anyone who opens your link (Section 2.2.3). The other person's scores are never readable from your app directly: our server builds the comparison from both people's stored scores after checking that you are one of the two people in the pair. |
| How it works | Inviting creates a code of 8 letters and numbers and a link (slowmind.app/c/<code>) that you share yourself. One link can be shared with several people, for example in a group chat, and each of them gets their own comparison with you. It expires after 30 days. The invitee sees what will be shared before they finish the test, and only after finishing do they choose whether to share. The invite page on our website shows the test, your first name and, to people who take the test there, your scores for that test (Section 2.2.3). On Android, if the invitee installs the app from that page, Google Play passes the code (and, after a comparison on the web, its result token) to the app once so it can open the invite. |
| Compare on this phone | For numerology you can also type in someone else's date of birth to compare numbers on your device. That date stays on your phone: it is never uploaded, saved or sent to us, analytics or AI providers, and it is gone when you close the screen. |
| Purpose | Showing the two of you where your results match and differ, with a suggestion for a conversation, and writing your joint reading when either of you has Premium or when its opening summary is offered to everyone. |
| Legal basis | Contract (Art. 6(1)(b)): providing a feature you choose to use. Where your scores may reveal information about your psychological characteristics, sharing them with the other person is based on your explicit consent (Art. 9(2)(a)), given when you send an invite (including showing your first name and your scores for that test to people who open your link) or tap "Share and compare". You can withdraw it at any time by unlinking, or by letting the link expire. |
| Retention | Either of you can unlink at any time, in the comparison itself: the pair and its joint reading are then deleted for both of you. Unused invite codes expire after 30 days. Deleting your account deletes your pairs for both people and your invite codes. |
2.2.3 Compare on the web (optional)
Someone who receives your invite link can take the same test on our website, without the app or an account, and see straight away how their scores compare with yours.
| Data | The answers given on the invite page (slowmind.app/c/<code>) are sent once to our server, which scores them. We keep only the resulting scores for that one test, with the invite code they belong to and when they were made. We never store the answers themselves. No name, email address or account is needed. If the visitor chooses to share the result with the inviter (below), we also keep that choice, when it was made and the first name they type, if any. The visitor's browser keeps a small note in its local storage (the code, a random result token and when it expires) so that reopening the link shows the result again. |
|---|---|
| What is shown | The visitor sees the inviter's first name and the inviter's scores for that test next to their own. The inviter sees nothing of the visitor's result unless the visitor taps "Share" on their result page, or saves the result in the app. After "Share", the inviter's app shows the visitor's scores for that test next to theirs, with the first name the visitor typed, if any, never their answers, and can have a joint report written for the two of them from both sets of scores by our AI providers (Section 2.3), as for a comparison in the app. The report is kept with the result and deleted with it. The visitor can tap "Stop sharing" on the same page at any time, and the inviter can remove it from their list. |
| Saving in the app | If the visitor installs SlowMind and signs in, the app sends the result token to our server. The scores then move into the visitor's account (unless they have already taken that test there), their reading is written, and the comparison appears for both people, as described in Section 2.2.2. If the visitor had shared the result with a first name, the inviter's list keeps that name with the comparison. On Android the token reaches the app through the Google Play install referrer. On iPhone the page copies a link to the result to the clipboard only when the visitor taps the App Store button, "Open it" or "Copy link", and the visitor pastes it in the app. |
| Analytics | The page records in Google Analytics (Section 9) that a comparison was started, finished, and that a store button was tapped, with the test's name only. Scores, answers, names and result tokens are never sent to analytics. |
| Purpose and legal basis | Showing the visitor the comparison they ask for by taking the test, and letting them keep it if they choose: contract (Art. 6(1)(b)). Showing the inviter's first name and scores is based on the inviter's explicit consent (Art. 9(2)(a)), given when making the link. Showing the visitor's scores to the inviter is based on the visitor's explicit consent (Art. 9(2)(a)), given by tapping "Share", which they can withdraw with "Stop sharing". |
| Retention | Scores from the web are deleted 30 days after they are made unless they are saved to an account first; saved scores are then kept like any other test result. The note in the browser stops working when the result expires, and can be removed at any time by clearing the site's data in the browser. |
2.3 AI-generated readings and insights
Your readings and insights are generated by large-language-model providers processing data on our behalf. Here is exactly how that works:
- We send the AI provider your computed trait scores (numbers and category labels), not your name, email address, or account identifiers.
- For a numerology reading, we send only the numbers worked out from your date of birth, never the date itself.
- For a joint reading in "Compare with someone", we send both people's scores for that one test (or both sets of numerology numbers), labelled only as person 1 and person 2, never names, email addresses, answers, dates of birth or account identifiers. The joint reading is shown to both people in the pair: all of it to each person with their own Premium, and its opening summary to a person without.
- The generated reading is stored in your account so you can revisit it.
- To keep the Service fast and efficient, a generated reading may be reused for another user whose computed scores are materially identical. What is reused contains only the text generated from those scores, never any information identifying you.
- Our AI providers are bound by data-processing agreements and do not use the data we send to train their models.
Readings are reflective content, not decisions about you: no automated decision-making with legal or similarly significant effects (GDPR Art. 22) takes place in the Service.
2.4 Courses, saved content, and downloads
| Data | Course and session progress; insights and result cards you like or save; sessions you download (the audio itself is stored on your device). |
|---|---|
| Purpose | Playing your courses, remembering where you left off, keeping your library in sync. |
| Legal basis | Contract (Art. 6(1)(b)). |
| Retention | Until you remove the item or delete your account. Downloads live on your device and disappear when you remove them or uninstall the App. |
2.5 Purchases and subscription status
| Data | Your subscription/entitlement status, product identifiers, purchase and expiry dates, store (Apple/Google, or the web), and a pseudonymous app-user identifier. We never receive your card number or full payment details: payments in the app are processed entirely by Apple or Google. |
|---|---|
| Premium bought on the web | The checkout at app.slowmind.app is run by RevenueCat (Web Billing) with Stripe, and the subscription is sold through Link, Stripe's checkout service, as reseller. For it, RevenueCat and Stripe process: the email address of your account (so the checkout doesn't ask for it, and for receipts), your account's user ID as the RevenueCat app-user identifier, the plan, price, currency, country, dates, trial and renewal status, and where the link to the paywall came from (the website page and its campaign tags, never anything about you). Your card or other payment details are entered on Stripe's payment form and handled by Stripe and Link: they never reach us. We receive the purchase records and a link to the customer portal where you cancel. |
| Purpose | Unlocking the content you paid for, restoring purchases, handling entitlement changes, and for web purchases taking the payment, sending receipts and letting you cancel. |
| Legal basis | Contract (Art. 6(1)(b)); legal obligation (Art. 6(1)(c)) for accounting records where applicable. |
| Retention | While your account exists; transaction records as required by tax and accounting law (typically up to 10 years). |
2.6 Technical and usage data
| Data | Device type and operating system, app version, language, IP address (transiently, for connections), crash and performance logs, and aggregated usage events (for example which screens are used, which tests are started and completed, and when a compare invite is created, opened, accepted, viewed or unlinked, with the test's name only, never scores, numbers, dates or invite codes, and on the web when a link to Premium is opened and a checkout is started, finished, cancelled or fails, with the plan and the page the link was on) via Firebase Analytics. On iOS, Firebase Analytics also receives the device's advertising identifier only if you allow tracking (see Section 2.8). |
|---|---|
| Purpose | Keeping the Service secure and working, fixing bugs, understanding, in aggregate, how the app is used so we can improve it. |
| Legal basis | Legitimate interests (Art. 6(1)(f)) in operating, securing, and improving the Service; consent where required for analytics identifiers by local law. |
| Retention | Logs and analytics data are retained for limited periods (typically 1 to 14 months depending on the log type) and then deleted or aggregated. |
2.7 Support and correspondence
| Data | Your email address, the content of your messages, and related account context needed to help you. |
|---|---|
| Purpose | Answering questions, resolving complaints, exercising your rights. |
| Legal basis | Contract (Art. 6(1)(b)); legitimate interests (Art. 6(1)(f)) for keeping records of how issues were resolved. |
| Retention | Up to 3 years after the matter is closed, unless a longer period is required for legal claims. |
2.8 Advertising measurement
| Data | On iOS: an identifier for this app on your device (IDFV), Apple's advertising identifier (IDFA) only if you tap "Allow" in the App Tracking Transparency prompt, and Apple Search Ads attribution data (AdServices). On Android: the advertising ID and Android ID. On both: IP address, your pseudonymous app-user identifier, and install, trial and subscription events. The app also includes Meta's SDK for App Events. On iOS it starts only after you tap "Allow"; on Android it starts with the app and follows your device's ad settings. It receives the advertising identifier, basic device data (model, operating system, language, time zone) and these events: app installed and opened, account created, onboarding finished, and test completed (with the test's name). It never receives your name, email address, answers or readings, and we do not use Meta's advanced matching. |
|---|---|
| Purpose | Measuring which of our own advertising campaigns (for example on Apple Search Ads or Meta) lead to installs and subscriptions, so we can spend less on ads that don't work. We do not use this data to show you ads, and we do not sell it. |
| Legal basis | Consent (Art. 6(1)(a)) for the advertising identifier, given through the App Tracking Transparency prompt on iOS or your device's ad settings on Android; legitimate interests (Art. 6(1)(f)) for aggregated campaign measurement. |
| Retention | While your account exists, or until you withdraw consent; attribution reports are kept only in aggregated form. |
| Your choice | You can withdraw at any time: on iOS, Settings → Privacy & Security → Tracking (turn SlowMind off); on Android, Settings → Google → Ads (delete or reset your advertising ID). The app works the same either way. |
3. Where your data comes from
We collect data directly from you (account creation, answers, saved content, messages), automatically from your use of the Service (technical and usage data), and from the app stores, RevenueCat and Stripe (purchase and entitlement events). We do not buy data about you, and we do not collect data about you from data brokers or public profiles.
4. Who we share data with
We never sell your personal data, and we do not share it with advertisers for their own purposes. To measure our own ad campaigns, the attribution data described in Section 2.8 is processed by RevenueCat and may be passed to the ad platforms where we advertise (such as Apple Search Ads and Meta) for that measurement only, and the quiz pages on our website send Meta the events described in Section 9. Otherwise we share data only with service providers who process it on our behalf under data-processing agreements, or with independent controllers where the law provides for it:
| Recipient | Role | What and why |
|---|---|---|
| Google Cloud / Firebase (Authentication, Realtime Database, Cloud Storage, Cloud Functions, Hosting, Analytics) | Processor | Hosting and running the Service: accounts, your content, audio delivery, server logic, crash/usage analytics, and Google Analytics on the website (Section 9). Primary data storage is in the EU (europe-west1, Belgium); some processing (server functions, analytics) occurs in the United States. |
| AI providers: Anthropic (Claude) and Google (Gemini) | Processor | Generating your readings and insights from computed trait scores, as described in Section 2.3. No name or contact data is included in requests. |
| RevenueCat, Inc. | Processor | Managing subscription entitlements across platforms (pseudonymous user ID and purchase status; no payment card data); running the checkout for Premium bought on the web (your account's email address and user ID, and the purchase records, as described in Section 2.5); and advertising measurement as described in Section 2.8 (device identifiers (the advertising identifier only with your permission), IP address, and install and subscription events). |
| Meta Platforms Ireland Limited | Joint controller for collecting and sending the data; independent controller for its own processing | Measuring and optimising our own ads on Facebook and Instagram, as described in Section 2.8: the events from Meta's SDK in the app, and install, trial and subscription events sent through RevenueCat. On the website's quiz pages and in the web app, the events from the Meta Pixel described in Section 9. Governed by the Meta Business Tools Terms and Meta's own privacy policy. |
| The person you compare with | Recipient you choose | Only if you send an invite or accept one in "Compare with someone": your scores for that one test (or your numerology numbers), never your answers or your date of birth, as described in Section 2.2.2. Either of you can unlink at any time. |
| People who open your invite link | Recipients you choose | Only if you make an invite link: your first name and your scores for that one test, shown on the website to people who open the link and take the test there, as described in Section 2.2.3. |
| Stripe and Link (Stripe's checkout service) | Processor for our purchase records; independent controller for the payment itself, as reseller and merchant of record (Link) | Premium bought on the web: the payment form, payment processing, tax, receipts and subscription emails, the customer portal for cancelling, fraud prevention and payment support. Receives your email address, the purchase and your payment details (which never reach us). Governed by Stripe's and Link's own privacy policies. |
| Apple / Google | Independent controllers | App distribution, payment processing, and refunds under their own terms and privacy policies. |
| Authorities, courts, advisers | Independent controllers | Only where required by law, to defend legal claims, or to prevent fraud or abuse. |
In the event of a merger, acquisition, or asset sale, personal data may be transferred as part of the transaction; we will notify you before your data becomes subject to a different privacy policy.
5. International transfers
Your data is primarily stored in the European Economic Area. Where processing takes place outside the EEA (for example US-based cloud functions, AI providers, RevenueCat or Stripe), we ensure an adequate level of protection through: European Commission adequacy decisions (including the EU-US Data Privacy Framework for certified US providers), the European Commission's Standard Contractual Clauses supplemented by transfer impact assessments, and technical safeguards such as encryption in transit and at rest.
6. How we protect your data
- Encryption in transit (TLS) and at rest on our cloud infrastructure;
- Per-user access rules on the database: your content is readable only by your authenticated account;
- Server-side security rules validated and reviewed; internal access to production data limited to what operating the Service requires;
- No payment card data ever touches our systems;
- Regular review of dependencies, security rules, and logs. Prompts sent to AI providers exclude identifying data by design.
No system is perfectly secure. Please use a strong, unique password and keep your device protected. If a data breach affecting your rights occurs, we will notify you and the supervisory authority as required by GDPR Articles 33 and 34.
7. Your rights
Under the GDPR (and equivalent laws), you have the right to:
- Access: obtain a copy of the personal data we hold about you (Art. 15);
- Rectification: correct inaccurate or incomplete data (Art. 16);
- Erasure: delete your data ("right to be forgotten", Art. 17). The fastest way is deleting your account in the App (Profile → My account → Delete account, version 1.0.1 or later); you can also email privacy@slowmind.app. What we keep and for how long is on our account deletion page;
- Restriction of processing in the situations set out in Art. 18;
- Portability: receive your data in a structured, machine-readable format (Art. 20);
- Objection: object to processing based on legitimate interests (Art. 21);
- Withdraw consent at any time, without affecting prior processing (Art. 7(3)). On the website, choose Cookie choices at the bottom of any page;
- Complain to your local supervisory authority or to the State Data Protection Inspectorate of Lithuania (vdai.lrv.lt).
To exercise any right, email privacy@slowmind.app from the address linked to your account (we may ask you to verify your identity). We respond within one month; for complex requests we may extend by a further two months with an explanation. Exercising your rights is free of charge unless requests are manifestly unfounded or excessive.
8. Children
The Service is not directed at children under 16, and we do not knowingly collect personal data from them. If you believe a child has created an account, contact us and we will delete it promptly.
9. Cookies and the website
The slowmind.app website is a static informational site with two free quizzes. It uses Google Analytics on every page, and the Meta Pixel only on the quiz pages, under the choice described here. The web app at app.slowmind.app uses the Meta Pixel and Google Analytics under the same choice (The web app).
Your choice
In the UK, the EU and the rest of Europe (as your browser's time zone shows; we don't look up your IP address for this), a card asks whether we may measure your visit. Until you choose Accept, nothing from Google Analytics or Meta is loaded and none of their cookies are set, and Reject is as easy as Accept. Elsewhere, measurement is on until you choose Reject. Wherever you are, while your browser sends the Global Privacy Control signal, nothing from Google Analytics or Meta is loaded, whatever you chose before. To change your mind at any time, choose Cookie choices at the bottom of any page: Reject stops Google Analytics and the Meta Pixel in that browser and deletes their cookies from this site. Your choice is kept in your browser's local storage (slowmind-consent-v1) for up to 12 months, and then we ask again. The same choice is also kept in a small cookie of our own on slowmind.app (slowmind_consent: Accept or Reject and when, 12 months), so the website and the web app at app.slowmind.app follow one choice and you are not asked twice. You can also delete cookies in your browser's settings at any time.
Google Analytics
Google Analytics (Google Ireland Limited, as our processor) shows us, in aggregate, how visitors find and use the site. It records the pages you view (their address without any query string, apart from the campaign tags of the link you came by, such as utm_source), the site you came from without its path, the events a page sends (on the quizzes, for example, that a quiz was started and finished), and your browser, device type, language and approximate location, which Google works out from your IP address. It sets first-party cookies (_ga and _ga_39DHLWGX3P, kept for up to 13 months). It isn't linked to your name, email or account: we don't set a user ID, and Google signals and all advertising features are off. Where you're asked, the legal basis is your consent (GDPR Art. 6(1)(a) and the ePrivacy rules as applied in Lithuania); elsewhere it is our legitimate interest in understanding how the site is used (Art. 6(1)(f)), and you can object at any time with Cookie choices.
The free quizzes
The quizzes at slowmind.app/apology-language-quiz and slowmind.app/conflict-style-quiz score your answers in your browser. Your answers are never saved or sent anywhere. To see which of our Facebook and Instagram ads bring people to the quizzes and how many of them go on to the app, the quiz pages use the Meta Pixel as well as Google Analytics:
| Data | That you opened a quiz page, started the quiz, saw your result and tapped the link to the app or to Premium on the web, each with the quiz's name; the page address, keeping only the tags from the ad's link (utm_*, fbclid and src); the site you came from; and the technical details every request carries, such as your browser, device type, language and IP address. Google Analytics also receives which part or style came out on top, and whether you sent the quiz to someone. |
|---|---|
| Never | Your answers, your scores, or anything you type. The Pixel's automatic events are switched off, so it doesn't read the page's buttons or text, and we don't use Meta's advanced matching. |
| Cookies | _fbp (Meta, a random ID for this browser, 90 days) and _fbc (Meta, which ad you came from, 90 days), as well as the Google Analytics cookies above. |
| When | As described under "Your choice": in Europe only after you choose Accept on the card in the quiz (it stays with the quiz until you answer) or on any other page of the site, elsewhere until you choose Reject. If you accept partway through, the page then sends the steps you had already reached on it: that you started the quiz and, if you had, that you saw your result. |
| Legal basis | Where you're asked: your consent (GDPR Art. 6(1)(a) and the ePrivacy rules as applied in Lithuania), which you can withdraw at any time. Elsewhere: our legitimate interest in knowing whether our advertising works (Art. 6(1)(f)), with your right to object at any time. |
| Recipients | Meta Platforms Ireland Limited (joint controller for collecting and sending the data, then independent controller for its own processing, as in Section 4) and Google Ireland Limited (processor). |
| Retention | Meta keeps Pixel events under the Meta Business Tools Terms and its own privacy policy. Google Analytics data is kept as described in Section 2.6. |
The link to the app on a quiz result goes through slowmind.app/get, which opens the App Store or Google Play and passes on the quiz's campaign tags (such as utm_campaign=web_quiz), never your answers or your result. "Send this quiz to your partner" uses your device's own sharing, or copies a link to the quiz; nothing about you is in that link.
The web app
A link to one of our tests (app.slowmind.app/t/ and the test's name, from our ads or the website's test guides) opens that test in the web app without an account: the web app makes a guest account for it, as the phone apps do, so your answers can be scored and your result kept. A short summary of your result is written from your scores, as for the full reading (Section 2.2). Your full reading needs an account you create with Apple, Google or an email address, which keeps the guest's result. The web app asks for the same measurement choice as the website and, in Europe, sends nothing to Meta or Google Analytics until you choose Accept:
| Data | The Meta Pixel receives that a test's page was opened and that a test was finished (each with the test's name), that an account was made, that the web checkout was opened and that a subscription or a free trial started (with the plan and its price), and the page address keeping only the tags from the ad's link (utm_*, fbclid and src). Google Analytics (the web app's own stream) receives the app's usage events, such as a test started or finished, without your answers. |
|---|---|
| Never | Your answers, your scores, your result, your name or your email. The Pixel's automatic events are off and we don't use Meta's advanced matching. |
| Cookies | _fbp and _fbc (Meta, 90 days) and the Google Analytics cookies (_ga and _ga_8HV50SDRL3, up to 13 months), only after you accept where you're asked. |
| Legal basis, recipients and retention | As for the free quizzes above. |
Other pages
A compare invite page (slowmind.app/c/<code>) sends the code to our server to look up the invite and, if you take the test there, your answers to be scored (Section 2.2.3). It keeps the code, a result token and its expiry date in your browser's local storage so you can reopen your result, and it sets no cookies of its own. Its page views are recorded without the result token. Apart from the measurement above, the web app at app.slowmind.app uses only the technical storage required for you to stay signed in and for the app to function (authentication tokens, local caches). When you open a link to Premium or to a test, it keeps a note of that link (the plan or the test, the page it was on and its campaign tags) for that browser tab, until the paywall it opens is closed or used, or you leave the test. When you buy Premium there, RevenueCat's checkout and Stripe's payment form load in the page and use what they need to take the payment safely (Section 2.5). The website uses your device's own fonts and loads no web fonts, so opening a page sends no request to Google Fonts or any other third party before you choose.
10. Regional notes
United Kingdom
If you are in the UK, the rights above apply under the UK GDPR and the Data Protection Act 2018. Transfers from the UK are safeguarded by adequacy regulations, the UK IDTA, or the UK Addendum to the EU SCCs. You may complain to the Information Commissioner's Office (ico.org.uk).
United States
Depending on your state (for example under the CCPA/CPRA in California), you may have rights to know, access, correct, delete, and port your personal information, and to opt out of "sales" or "sharing" of personal information. We do not sell your personal information, and we do not use it for profiling with significant effects. On our website's quiz pages, the Meta Pixel (Section 9) may count as "sharing" for cross-context behavioural advertising under some state laws: you can opt out at any time with Cookie choices at the bottom of the page, and we treat the Global Privacy Control signal as an opt-out, even if you accepted before. You may exercise your rights via privacy@slowmind.app; we do not discriminate against you for doing so.
Other jurisdictions
Where local law grants you additional rights (for example in Australia, Canada, or Brazil), we honour them on request through the same contact.
11. Changes to this Policy
We may update this Policy from time to time. The current version, with its "Last updated" date, is always available at slowmind.app/privacy. For material changes we will give notice in the App or by email before they take effect.
12. Contact
Privacy requests: privacy@slowmind.app
General support: info@slowmind.app
Controller: Slow Mind, MB, Burbiškių g. 6-59, LT-03164 Vilnius, Lithuania, company code 307673657