Privacy Policy

Who we are

Mindpuzzled is run by Think Code Ltd (trading as Mindpuzzled), a company registered in England and Wales under company number 11436741, whose registered office is at Southgate Chambers, 37-39 Southgate Street, Winchester, SO23 9EH, United Kingdom. In this policy "we" and "us" mean Think Code Ltd. We decide how your personal data is used, which makes us its controller under the UK General Data Protection Regulation (UK GDPR) and, for people in the European Economic Area, the EU General Data Protection Regulation (GDPR).

Write to us at hello@mindpuzzled.com, or by post to Southgate Chambers, 37-39 Southgate Street, Winchester, SO23 9EH, United Kingdom. We have no data protection officer; the address above reaches the person responsible for everything in this policy.

Mindpuzzled is offered to people in the United Kingdom, the United States and other countries outside the European Union and the European Economic Area. It isn't currently offered or marketed to people in the EU or EEA, so we haven't appointed a representative there under Article 27 of the GDPR.

What we collect, and where it comes from

Everything below comes from you, from how you use the site, or from the services named in each line.

• Your Assessment: your answers to the 20 statements, the five trait scores calculated from them, your Archetype and the trait it is led by. If you take the Assessment again, the new answers and scores too, linked to the first.
• Your onboarding choices: two questions before the Assessment and one halfway through it, including the goal you want to work on and how long it has felt this way.
• What we write for you: your insight line. Once you start a checkout, your Profile, Chapter 1 of the Journey and your Brief are written, so they're ready when you've paid, and they are kept even if you don't finish. If you subscribe, your Chapters and Daily Actions, and everything else written from your scores.
• What you do in the Journey: which Daily Actions you completed or skipped and when, your streak, the one-line reflections you choose to write, your Energy Audit lines, the notes you leave when you ask for something to be rewritten, and the choices you make along the way, such as your Career stance and how your Pivot Experiment turned out.
• Your email address, if you give it at the email stop, ask for the Energy Audit template with it, sign in with it or pay with it, and its state with us: whether you agreed to our emails, unsubscribed, or an email to it bounced, a record of the emails we sent you, and of each time the template was asked for.
• Your account: if you sign in with Google or Facebook, that service sends us your email address, your name and a link to your profile picture. If you sign in with Apple, it sends your email address (which may be a relay address Apple makes for you) and, on your first sign-in only, your name. Before you sign in, an anonymous account keeps your Assessment yours.
• Your subscription: from Polar we receive your plan, its status and dates, the email address you gave at checkout, and the orders on your subscription. We never receive your card number.
• What you send us: emails to hello@mindpuzzled.com, notes sent with "Disagree with a line? Tell us", your answers to the day-7 question about your Profile (with your first name and whether we may quote you, if you give them), and why you cancelled, if you tell us. A person reads these.
• Together: if you invite someone, the invite, the label you picked for who they are to you, whether they linked, the pair actions, which halves were done, and the one line each of you chooses to write on a "one line each" pair action. If you were invited, the same about your side.
• Your Share Card: if you share your Archetype, the card's Archetype name and trait, and how often its link was opened or started an Assessment.
• How you arrived: if a friend's card or an invite brought you, which one. Only where analytics is allowed (see "Analytics, recordings and cookies") do we store the page and the campaign tags of the link that brought you, for example utm_source, with your Assessment; PostHog sees the address of the page you land on, tags included, either way.
• Your device and connection: your time zone, and the country your connection comes from, which decides whether we ask about cookies. Our host records IP addresses in its request logs, and our sign-in service records the IP address and browser of each sign-in.
• How you use the site: PostHog records pages, taps and some sessions (see "Analytics, recordings and cookies" below).

How we use it, and why we're allowed to

The UK GDPR and the GDPR ask us to name a lawful basis for each use.

• To run the Assessment, write your Archetype, Profile and Journey, keep your account and give you what you paid for. Basis: our contract with you, or the steps you asked for before one.
• To send the emails about your account and your subscription, and the links you ask for, such as sign-in links and your cancellation confirmation. Basis: our contract with you.
• To send the flavor note and the "not now" email after your Archetype, Sunday Insight, the weekly Chapter email with its re-test invitation, and one note a month after a subscription ends. Basis: your consent, given at the email stop, in an email, or with the weekly-email tick in the app.
• To send a reminder, and at most one follow-up, about a checkout you started and didn't finish, and, if you subscribe, the day-7 question about your Profile. Basis: our legitimate interest in writing to someone about a purchase they began, or to a customer about the product they use.
• Every email that isn't about your account or a link you asked for carries a one-tap Unsubscribe link that stops them all.
• To see how the site is used and fix what breaks. Basis: our legitimate interest in running a site that works. In the UK and the EU, analytics stores nothing on your device unless you say yes to cookies.
• To keep the site secure and stop abuse, such as limiting how many notes one account can send in a day, and how often the Energy Audit template can be asked for from one connection (5 a day) or sent to one address (3 requests a day). We count connections with a daily-changing code made from your connection, not your IP address itself; each code is kept for two to three days, then deleted, and the rest of the record of the request is deleted after 30 days. Vercel BotID checks that a template request comes from a browser rather than a script. Basis: our legitimate interest in keeping the service safe.
• To quote your day-7 answer on the site. Basis: your consent, given only by ticking the box, and taken back by writing to us.
• To keep the records the law requires and answer lawful requests. Basis: legal obligation.

No decision that has a legal or similarly significant effect on you is made by software. The AI writes words; it decides nothing about you.

The AI that writes about you

OpenAI's models write, on our instructions and through OpenAI's API, your insight line, your Profile, your Brief, and in the Journey your Chapters and Daily Actions, your Energy Audit read, your Pivot Experiment and the ask, and the pair actions and the pair reading for Together.

To write them, OpenAI receives your five scores and your Archetype. Your Archetype itself is named from your scores by a fixed rule, not by OpenAI. For the Journey it also receives your onboarding goal and how long it has felt this way, the themes of your earlier Chapters, what you did in the Journey the week before, your one-line reflections, your Energy Audit lines, your Career stance, how your Pivot Experiment turned out, and the notes you leave when you ask for something to be rewritten. If you link with someone through Together, OpenAI receives both people's five scores and Archetypes, and the label the person who invited picked for who you are to each other, to write the pair reading you both see; if you are the person invited, it also receives the trait your Archetype is led by when the pair action is written for the person who invited you. OpenAI never receives your email address or your name. Under OpenAI's API terms it acts as our processor and does not use this data to train its models by default.

No person at Mindpuzzled reads your one-line reflections. They are stored with your Journey, sent to OpenAI when your next Chapter is written, and shown back to nobody, you included. A person sees one only if you send it to us yourself.

Who else handles your data

These services handle personal data for us, only on our instructions and under their data processing terms:

• Supabase: our database and sign-in. It stores everything listed above that we keep, in the United States, in its East US (North Virginia) region, and its sign-in service logs the IP address and browser of each sign-in.
• Vercel: hosts the site and runs our servers. It sees every request, including your IP address, and its BotID service checks the Energy Audit template form for automated requests.
• OpenAI: writes the words, as described above.
• PostHog: analytics and session recordings, hosted in the United States.
• Resend: sends our emails. It has your email address and the content of each email, including the copy of a "Disagree with a line? Tell us" note it forwards to our support inbox.
• Google Workspace (Google LLC): hosts our support mailbox, which holds the emails you send us and our replies.

Two more services handle your data as controllers in their own right, under their own privacy policies. Polar is our merchant of record: it sells you the subscription, takes the payment, handles sales tax and VAT, and holds your card details. Google, Facebook (Meta) and Apple, as sign-in services, are involved only if you choose to sign in with them.

We don't sell your personal information, and we don't share your answers or your Profile with anyone beyond these services.

Analytics, recordings and cookies

PostHog records the pages you visit and what you tap, linked to the random id of your account. It never receives your answers to the 20 statements or your scores: the answer buttons are left out of its tap tracking. Its events do carry a few things you chose, so we can count how people move through the site: your three onboarding choices, your Archetype's name when you view it, the trait it is led by when you open the sample of the Journey's Daily Action, and, if you subscribe, your plan and your Track. If you give your email address at the email stop, PostHog stores it with that record too, so we can tell our own test visits apart from yours. PostHog also works out an approximate location from your IP address.

The two links in the Energy Audit template email go through our site first, which records which one you tapped, against the address it was sent to. No other email of ours tracks your clicks.

PostHog records a sample of visits as a replay of the screen; how many is set in our PostHog project. Every text box is masked, your email address is masked wherever it appears on the page, and the answer buttons of the Assessment and the onboarding questions are blocked out, so a replay shows the statements but never which answer you chose.

What we store on your device:

• Sign-in cookies from Supabase, which keep you signed in, including the anonymous account that saves your Assessment. The site doesn't work without them.
• mp_magic_link_email, which holds the email address you asked a sign-in link for, in plain text, for as long as that link works, so the link signs in only the browser that asked for it. The sign-in link doesn't work safely without it.
• mp_auth_pending, which holds a sign-in link you opened in a browser that didn't ask for it, until you tap to finish signing in or the link runs out, so no other site can sign you in without that tap.
• mp_consent, which remembers your cookie choice or your opt-out, for a year.
• mp_landing, kept for ten minutes, which carries the friend's card or invite that brought you into the Assessment you start and, where analytics is allowed, the page and campaign tags of the link.
• mp_together, kept for ten minutes, which carries a Together invite into the Assessment you start from it.
• mp_bought_twice, kept for ten minutes, which carries a one-time notice, shown after you sign in, about a second subscription you bought by mistake.
• PostHog's cookie and browser storage, which let it recognise a returning visit: in the UK and the EU only after you say yes, elsewhere until you opt out. If you opt out, PostHog keeps a small note in your browser's storage so it stays off.
• Small notes the site keeps in your browser for itself, such as the plan you picked on the Paywall or a notice you closed.

In the UK and the EU we ask first, with a one-line banner. Until you say yes, PostHog keeps nothing on your device and counts your visit in memory only. You can change your answer here at any time.

Advertising, and Do Not Sell or Share

We don't sell your personal information, and we don't share it with anyone for advertising. No advertising pixel or tag from TikTok, Meta or Google is on the site, and our servers send nothing about you to an ad platform.

The link below still works. It turns off the analytics that runs in your browser, and if you've started an Assessment it is recorded against it and, once you've signed in, against your account too, so it keeps applying if we ever add advertising tools. Our servers still record the events they send to PostHog themselves, such as a finished Assessment or a purchase; none of that goes to an ad platform.

Do Not Sell or Share My Personal Information

Together

If you link with someone, they see your trait bands, the pair reading, whether you did your half of a shared action, and a line you write for a "one line each" action once you've both written one. Never your exact scores (unless you switch that on), your Profile text, your reflections, or your own Journey. Unlink any time and it all disappears for both of you.

If you delete your Assessment, your bands leave any Two Profiles view you were part of, and the pair reading is deleted for both people.

The pair reading is kept once per link. If either of you takes the Assessment again, it is written again from the new scores and the older one is deleted, and the other person sees, for each of your traits, your band before and after and whether it moved more than the test itself wobbles, but never your earlier score. Unlinking deletes it and the pair actions for both of you, and so does either of you having your Assessment deleted. Your exact scores are shown to the other person only while you have switched that on, and the label chosen with the invite for who the two of you are to each other is never shown to the person invited. A record of the link itself (that it existed, when it formed and ended, and which side ended it, which is never shown to either of you) stays until either of you has your Assessment deleted.

Transfers outside the UK and EEA

Supabase, Vercel, OpenAI, PostHog, Resend, Google and Polar are based in or process data in the United States. When your data leaves the UK or the European Economic Area, the transfer relies on an adequacy decision (including the UK-US data bridge, for companies certified under it) or on the standard contractual clauses and the UK addendum in that service's data processing terms.

How long we keep it

• Your Assessment, Profile, Journey and account: until you ask us to delete them. Ending a subscription doesn't delete them, so they're there if you come back.
• Your email address and its state with us: until you ask us to delete it. An unsubscribe stays recorded with the address, so it keeps working.
• Pair actions from Together, and the lines written on them: until either of you unlinks. The record of the link itself: until either of you has your Assessment deleted.
• What you send us: until you ask us to delete it.
• Analytics and recordings in PostHog: PostHog keeps analytics events for up to 7 years and session recordings for up to 90 days.
• Request logs at Vercel and sign-in logs at Supabase: for the period each service keeps them.
• Your purchases: Polar keeps its own records for as long as the law requires of a seller.

Your rights in the UK and the EU

You can ask for a copy of what we hold about you, ask us to correct it or delete it, ask us to limit how we use it, object to a use based on our legitimate interests, and ask for your data in a form you can take elsewhere. Where a use rests on your consent, you can take the consent back at any time; that doesn't undo what was done before.

Write to hello@mindpuzzled.com. It's free. We answer within one month, and we may ask you to write from the email address on your account so we know the request is yours.

If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113), or in the EU to the data protection authority where you live. We'd like the chance to put it right first, but you don't have to ask us before you complain.

Your rights in the United States

If you live in California or another US state with a privacy law, you can ask to know what personal information we collect, use and disclose, ask for a copy, ask us to correct or delete it, and opt out of our selling it, of our sharing it for cross-context behavioral advertising, and of its use for targeted advertising. We won't treat you differently for using any of these rights.

In the last 12 months we collected these categories of personal information, all for the purposes above: identifiers (your email address, your account id, your IP address, and your name and profile picture link if you sign in with Google, Facebook or Apple), commercial information (your plan and your purchases, through Polar), internet activity (how you use the site), approximate location (from your IP address), professional information (what you tell the Career clarity Track about your work, such as your Energy Audit lines and your Career stance), and inferences (your trait scores and what we write from them). We don't ask for sensitive personal information as California law defines it.

Write to hello@mindpuzzled.com to use a right, or have someone you authorise write for you. We confirm a request by asking you to write from the email address on your account. If we refuse a request, reply and we'll look at it again; if you're still unhappy, you can contact your state attorney general.

Deleting everything

Write to hello@mindpuzzled.com from the address on your account and we'll delete your account, your Assessments, your scores, everything we wrote for you, your Journey and your email address from our systems, and ask PostHog to delete what it holds about you, within one month. Polar keeps its own records of your purchases as the seller. If you were linked with someone through Together, the link, its pair actions and the pair reading are deleted for both of you.

Children

Mindpuzzled isn't meant for anyone under 16, and we don't knowingly collect personal information from anyone under 16. We don't ask your age. If you think a child has used Mindpuzzled, write to hello@mindpuzzled.com and we'll delete their data.

Keeping it safe

Everything travels encrypted over HTTPS. Our database lets each account read only its own rows, and only our servers can write most of them, with four deliberate exceptions: anyone holding the link to your Archetype, or to your Share Card, can see your Archetype's name and the trait it is led by; the two people in a Together link can each see the link's own state; and the pair reading written for a Together link can be read by the two linked people, and by nobody else. No system is perfectly secure; if a breach puts you at risk, we'll tell you, and the ICO, as the law requires.

Changes to this policy

When this policy changes, the new version goes on this page with a new date. If a change affects how we use data we already hold about you, we'll email you before it applies.