Privacy Policy

Effective 2 October 2026 · Applies to the Mindful Hero app and this website

1. Who we are

Mindful Hero is made and published by Curtis Hunter, trading as Westflame, a sole trader established in the United Kingdom. Westflame is the data controller for the personal data described in this policy.

2. What we collect

We collect as little as the app needs to work. Most people who use Mindful Hero never send us anything at all. Here is everything, grouped by where it comes from.

Your world, which stays on your phone

Your hero, your coins, your islands and recruits, your streak, your daily target, your meditation totals and your settings are stored on your device. They are not sent to us or to anyone else, with or without an account. We do not keep a copy, so we cannot restore them if you delete the app or move to a new phone.

Information you give us

• Account (optional). Mindful Hero works fully without an account. You only need one to appear on the leaderboard. Sign-in is with Apple only. If you sign in, we receive a unique account identifier from Apple and, if you choose to share it, your email address. Apple lets you hide your email, and that works with Mindful Hero. You choose the name shown on the leaderboard. We do not ask for your real name, date of birth, phone number or a photo.
• Meditation minutes. If you have an account, the app sends us the minutes you meditate so the leaderboard can rank them. Only the minutes: not what you meditated, when in the day, or anything you felt.
• Support messages. Anything you send to contact@westflame.co.uk, including your email address.

Information collected automatically

• Subscription status. Whether you have an active trial or subscription, which plan, and the renewal date. This comes from Apple through RevenueCat (see section 6). Apple takes the payment; we never see your card number or billing address.
• Crash reports. We do not use a crash-reporting service. If you have allowed your iPhone to share analytics with app developers, Apple passes us crash logs for Mindful Hero through the App Store. You can turn that sharing off in your iPhone settings.

3. The leaderboard

The leaderboard ranks meditation minutes. If you have an account, the name you chose and your minutes are shown publicly on it, to everyone who uses Mindful Hero, for as long as you have an account. Your email address and your Apple account identifier are never shown. Pick a name you are happy for others to see; it does not need to be your real one. Deleting your account takes you off the leaderboard (section 9).

4. What we do not collect

• No analytics. The app contains no analytics SDK and sends no usage events to anyone.
• No advertising. There are no ads and no ad SDKs in Mindful Hero.
• No tracking. We do not use the Apple advertising identifier and the app will never show you an App Tracking Transparency prompt, because it does not track you.
• No health data. Mindful Hero does not read or write Apple Health (HealthKit).
• No location, contacts, photos or microphone. The app plays sound, such as the gong and breath sounds, but it never records anything.

5. Why we use it, and the legal basis

We do not use your data for advertising, we do not sell it, and we do not share it with data brokers.

6. Third parties who process data for us

These providers process data only to provide their service to us, under contracts that restrict what they can do with it.

We may also disclose data if the law requires it, or to protect our rights or the safety of users.

7. International transfers

Your account data (your Apple identifier, your email if you share it, your chosen name and your meditation minutes) is stored in our database provider’s Canada region. RevenueCat, Vercel, Mailchimp, Apple and Google Workspace may process data in the United States. Where data leaves the UK we rely on safeguards recognised under UK GDPR: a UK adequacy decision for the destination country (Canada has one for commercial organisations), the UK Extension to the EU–US Data Privacy Framework for certified providers, or the International Data Transfer Agreement / UK Addendum to the EU Standard Contractual Clauses. You can ask us for details of the safeguard used for a particular provider.

8. How long we keep it

• Account and leaderboard data (account ID, email if shared, chosen name, minutes): only while your account exists. Deleting your account removes it (section 9). Without an account, none of it is on our servers at all.
• Your world on your phone: until you delete the app. Deleting your account does not touch it.
• Subscription records: for as long as needed to manage your subscription and to meet UK accounting and tax rules — six years after the last transaction.
• Support emails: up to 24 months after the conversation ends.
• Backups: our database provider keeps rolling backups for a limited period; deleted data drops out of them within that window.

9. Deleting your account and data

Open Settings in the app and choose Delete account. It is not hidden and it does not require emailing us. Deletion removes your account identifier, chosen name, email (if we had one) and meditation minutes from our systems, and takes you off the leaderboard. Where a record must be kept for legal reasons (for example a subscription transaction) it is anonymised so it no longer identifies you.

Your world is not affected. Your hero, coins, islands, recruits and streak stay on your phone, and the app carries on as it did before you signed in, anonymously.

Deleting your account does not cancel a subscription. Subscriptions are managed by Apple; see the Terms for how to cancel first.

If you cannot access the app, email contact@westflame.co.uk and we will delete your account for you once we can confirm it is yours.

10. Your rights

Under UK GDPR (and, if you are in the EEA, the EU GDPR) you can ask us to:

• give you a copy of the personal data we hold about you (access);
• correct data that is wrong (rectification);
• delete your data (erasure);
• limit how we use it (restriction);
• send your data to you or another service in a usable format (portability);
• stop using your data where we rely on legitimate interests (objection); and
• withdraw consent where we rely on it, for example by unsubscribing from waitlist emails.

Email contact@westflame.co.uk. We answer within one month. We may ask you to confirm you control the account before acting.

If you are unhappy with how we handle your data you can complain to the UK regulator, the Information Commissioner’s Office: ico.org.uk/make-a-complaint, or by phone on 0303 123 1113. We would appreciate the chance to resolve it first. If you live in the EEA you can also contact your local data protection authority.

11. Children

Mindful Hero is for people aged 16 and over. We do not knowingly collect personal data from anyone under 16. If you believe a child under 16 has created an account, email us and we will delete it. Our Terms say the same: 16 and over.

12. The website

This website is a static site. It sets no cookies and runs no analytics or advertising scripts. When we add a waitlist, if you join it we send your email address to Mailchimp, which stores it and sends you the launch email on our behalf. Every email includes an unsubscribe link, and unsubscribing deletes you from the list. Our hosting provider, Vercel, keeps standard server logs (IP address, browser, pages requested) for a short period for security and reliability.

13. Security

Data in transit is encrypted with TLS. Data at rest with our providers is encrypted. Sign-in is handled by Apple, so we never see or store a password. Access to production systems is limited to the founder. No system is perfectly secure; if a breach affects your data we will tell you and the ICO as the law requires.

14. Changes to this policy

If we change this policy in a way that matters to you, we will show a notice in the app or email you before the change takes effect. The date at the top always shows the current version.

15. Contact

Curtis Hunter, trading as Westflame · Lytchett House, 13 Freeland Park, Wareham Road, Poole, Dorset, BH16 6FA, United Kingdom · contact@westflame.co.uk