Privacy Policy
At Anatol Labs, we built Matchamind to help people lift their inner dialogue. You share personal information within this app (thoughts, moods, interests…) and we think that deserves real care.
This Privacy Policy explains what we collect, how we use it, and what control you have over it.
1. Collection of personal information
We collect information in three ways: what you share with us directly, what we collect automatically as you use the App, and what we receive from third parties.
a. Information you provide to us
Onboarding preferences. When you first open Matchamind, we ask a few questions to personalize your experience: your current life situation, what you need support with, and the areas that matter most to you (such as career, health, or self-esteem). We also ask for your preferred notification times.
Journal entries and mood check-ins. Each session, you share how you are feeling through a mood selection, optional emotion tags, and a free-text journal entry. This is the most personal information you share with us, and we treat it with the highest level of care.
Affirmations and interactions. We keep track of affirmations you save and the customizations you make within the affirmations feed.
Account information (optional). You can use Matchamind without creating an account. If you choose to create one, we collect your email address and password, or your Apple or Google sign-in identifier. If you sign in with Apple or Google, note that their privacy policies also apply to that part of your experience. We encourage you to read them.
b. Information we collect automatically
Usage data. We collect information about how you interact with the App: features used, screens visited, session duration, and interaction patterns. This helps us understand what is working and improve the experience.
Device and technical data. We collect basic technical information such as your device type, operating system, app version, language, and time zone. We collect your IP address transiently to deliver the Service but do not store it long-term.
Notification preferences. If you grant permission, we store your notification settings and reminder schedule.
2. Use of personal information
Matchamind is not a substitute for professional mental health support. The affirmations, insights, and recommendations generated by the App are supportive tools only. If you are experiencing a mental health crisis, please contact a qualified healthcare professional or emergency services.
We use your personal information in the following ways:
- To deliver and personalize your daily experience in the App, including affirmations, mood calendar, and journal history
- To generate personalized affirmations using AI, based on your journal entries, mood, and profile
- To manage your subscription and send billing-related communications
- To understand how users interact with the App and improve the experience
- To send you notifications and reminders at times you have chosen
- To protect the App and its users against fraud and misuse
- To comply with our legal obligations
3. Sharing of Personal Information
We work with a small number of trusted providers who help us run Matchamind.
- Railway — cloud hosting. Your data is stored on servers located within the European Union.
- Amplitude — product analytics. No journal content is shared.
- OneSignal — push notifications and transactional and marketing email delivery.
- RevenueCat — subscription and purchase management.
- Axiom — app diagnostics, crash reporting, and performance monitoring.
- Firebase — push notifications and transactional and marketing email delivery.
- OpenAI — AI-powered features, as described below.
Each provider has access only to the data needed for their specific function and is required to keep it confidential.
Store platforms
When you purchase a Matchamind Plus subscription, Apple App Store or Google Play processes your payment and sends us a confirmation. We never receive or store your payment card details.
How we use AI
We share your onboarding data, mood and journal entries to OpenAI, to generate content tailored to your emotional state. We do not share your email address or any other contact information with OpenAI. That said, journal entries may contain additional personal details you have chosen to write, so please exercise discretion and do not include sensitive information such as bank account details, passwords, or identity document numbers in your journal entries
We perform automated safety checks on all journal entries, including detection of content related to self-harm, violence, or hateful content, in order to maintain a safe experience.
As an independent third-party provider, OpenAI processes data subject to its own Terms of Use and Privacy Policy, available at openai.com/policies.
4. Data security and retention
a. How we protect your data
We take the security of your personal data seriously. The measures we have in place include:
- Encryption of data in transit (TLS) and at rest
- Your data is hosted on Railway servers located within the European Union
- Access to personal data is restricted to team members who need it to perform their role
- Regular reviews of our security practices and those of our third-party providers
No system is completely immune to risk. If we become aware of a breach that affects your data, we will notify you and the relevant authorities within the timeframes required by law (72 hours under GDPR).
b. International data transfers
Your data is primarily stored within the European Union. Some of our third-party providers, including OpenAI, Firebase, Amplitude, OneSignal, and RevenueCat, are based in the United States. When data is transferred outside the EEA, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission as the appropriate safeguard.
c. How long we keep your data
| Data type | Retention period |
|---|---|
| Journal entries, emotions & affirmations | While your account is active. Automatically deleted after 18 months of inactivity. Permanently deleted within 30 days of account deletion. |
| Onboarding preferences | Kept for the duration of your account and deleted alongside it. |
| Analytics data | Retained in anonymized or aggregated form for up to 24 months. |
| Subscription and transaction records | Kept for 10 years as required by applicable accounting and tax law. |
You can delete your account and all associated personal data at any time from the App settings.
5. Your Privacy Rights
Anatol Labs is a French company subject to the GDPR. We apply GDPR standards to all Matchamind users, regardless of where they are located.
You have the following rights over your personal data:
- Right of access : request a copy of the personal data we hold about you
- Right to rectification : ask us to correct inaccurate or incomplete data
- Right to erasure : ask us to delete your personal data
- Right to restriction : ask us to limit how we use your data
- Right to data portability : receive your data in a structured, machine-readable format
- Right to object : object to processing based on our legitimate interests, including automated profiling
- Right to withdraw consent : at any time, without affecting prior lawful processing
You can also manage your data erasure and rectification directly from the App settings by deleting your account, or updating your onboarding preferences.
To submit any privacy request, contact us at admin@matcha-mind.com or use the App settings. We will respond within 30 days.
If you are not satisfied with how we handle your data, you have the right to lodge a complaint with your national data protection authority.
- France: CNIL (cnil.fr).
- EU states: edpb.europa.eu.
6. Children privacy
Matchamind is intended for adults aged 18 and over. The App is not directed to children, and we do not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at admin@matcha-mind.com and we will promptly delete it.
7. Changes
This Privacy Policy is effective as of the date posted at the top. We may update this Privacy Policy from time to time to reflect Platform changes, make corrections, improve clarity, reflect changes in our privacy practices, or as required by applicable laws. When we may make a significant change, it will be notified via an in-app or push notification. We encourage you to periodically check this Privacy Policy to stay informed about how we handle your personal information.
8. Regional specificities
a. France
In addition to your rights under the GDPR described in Section 5, French law (loi Informatique et Libertés) grants you the right to define instructions regarding the use of your personal data after your death, including whether your data should be retained, deleted, or transferred to a third party of your choice. To exercise this right, contact us at admin@matcha-mind.com
b. California
We include this section for residents of California in order to comply with the California Consumer Privacy Act of 2018, and its amendment, the California Privacy Rights Act of 2020 (together, the "CCPA"). This section supplements the information provided elsewhere in this Privacy Policy.
The CCPA requires us to disclose the categories of personal information we have collected from you. The table below covers the last twelve (12) months.
Anatol Labs does not sell your personal information to third parties for payment and does not use your data for targeted advertising. Any sharing of personal information with third-party service providers, as described in Section 3, is solely for the purpose of delivering the Matchamind service.
We have noted in the table below what categories we have shared in the last twelve (12) months.
| Category | What we collect | Shared |
|---|---|---|
| Identifiers | First name, email or Apple/Google sign-in ID (if account created), anonymous device ID, IP address (transient) | Yes |
| Demographics | Age range, relationship status, employment status, gender (optional) collected at onboarding. May also appear incidentally in journal entries. | No |
| Journal & emotional data | Free-text journal entries, mood check-ins, emotion tags, detected emotions, generated affirmations | Yes |
| App activity | Features used, screens visited, session data | Yes (Amplitude, Firebase) |
| Subscription & purchases | Subscription status, purchase history | Yes (Revenue Cat) |
| Location | Derived from IP address (transient, not stored) | No |
| Inferences | Emotional patterns and cognitive tendencies derived from journal entries over time | Plus Only (Open AI) |
Please note that because of the overlapping nature of certain categories identified above, some of the personal information we collect may be reasonably classified under multiple categories.
Use of personal information
We may use your personal information in the following ways:
- To deliver and personalize your experience in the App, including affirmations, mood calendar, and journal history
- To generate personalized affirmations and emotional insights using AI, based on your journal entries, mood, and profile
- To communicate with you regarding the App, including updates or changes
- To provide support and respond to your questions or requests
- To process payment and manage your subscription
- To maintain and improve the quality of the App, including understanding user trends
- To protect the App and its users against fraud and misuse
- To comply with our legal obligations and respond to lawful requests from courts or public authorities
- To establish or exercise our legal rights or defense against legal claims
Use of sensitive personal information
We use sensitive personal information (journal entries, mood data, emotional content, gender identity) for the same purposes listed above. We never use sensitive personal information for advertising.
Retention
We keep your personal information for as long as needed to deliver the Service, or as long as legally required. The criteria we use to determine retention periods include: (i) the length of time we have an ongoing relationship with you; (ii) legal obligations we are subject to; and (iii) whether retention is advisable in light of our legal position. Specific retention periods are described in Section 4c of this Privacy Policy.
Your California privacy rights.
The CCPA provides California residents with rights regarding the collection, use, and disclosure of their personal information. These disclosures are provided in Sections 1–3 and the table in Section 8 above. If you are a California resident, you have the following rights, subject to certain exceptions. As a GDPR-aligned company, we commit to responding to all verifiable requests within 30 days, which exceeds the 45-day requirement under the CCPA.
- Right to know and access. You have the right to know what personal information we collect, use, and share. You may request a portable copy of this information up to two times in a rolling twelve-month period.
- Right to delete. You have the right to request deletion of your personal information. You may also delete your account and all associated data directly from the App settings at any time.
- Right to correct. You have the right to request correction of inaccurate personal information.
- Right to non-discrimination. You have the right not to receive discriminatory treatment for exercising your privacy rights.
- Right to limit use of sensitive personal information. You have the right to limit our use of your sensitive personal information to what is necessary to deliver the Service.
- Right to opt out of sale or sharing. Matchamind does not sell your personal information and does not share it for targeted advertising purposes. This right is therefore not triggered. However, if you have any questions, contact us at admin@matcha-mind.com.
- Sharing with third parties for direct marketing. Matchamind does not personal share information to third parties for their own direct marketing purposes.
c. Other US States
We include this section for residents of other US states with privacy laws that may impact them. These privacy laws include the Virginia Consumer Data Privacy Act (“VCDPA”), the Connecticut Data Privacy Act (“CTDPA”), the Utah Consumer Privacy Act (“UCPA”), the Colorado Privacy Act (“CPA”), the Delaware Personal Data Privacy Act (“DPDPA”), the Kentucky Consumer Data Protection Act (“KCDPA”), the Maryland Online Data Privacy Act (“MODPA”), the Nevada Privacy Law (“NPL”), the Rhode Island Data Transparency and Privacy Protection Act (“RIDTPA”), the Minnesota Consumer Data Privacy Act (“MCDPA”), and the Oregon Consumer Privacy Act (“OCPA”). This section is intended to comply with these laws by supplementing the information provided elsewhere in the Privacy Policy.
Collection of personal information
Matchamind may collect the personal information described in Section 1 and as categorized in the table above. Some of this information may be considered sensitive under your state's legal definition. The sensitive personal information we may collect includes mental health and emotional data (journal entries, mood data), and gender identity (optional, collected at onboarding).
Use of personal information
Matchamind collects, uses, and discloses personal information about US residents for the purposes listed in Section 2 of this Privacy Policy. We use sensitive personal information for the same purposes, except that we never use it for advertising.
Disclosure of personal information
We may disclose your personal information to the service providers identified in Section 3 of this Privacy Policy, and only in the ways described in that section.
Your privacy rights.
We apply GDPR standards to all Matchamind users regardless of location, as described in Section 5. Your state may afford you additional rights as noted below. To exercise any right, contact us at admin@matcha-mind.com.
We will respond within the time limit required by applicable law.