Privacy Policy
Myndgard Discover is an educational programme about emotions, made available to students by their university or college. Because the programme asks you to record how you are feeling, some of the information it holds is sensitive. This policy explains, as plainly as we can, what we collect, why, who can see it, and what you can do about it.
Who is responsible for your data
The app and the service behind it are operated by Myndgard Limited ("Myndgard", "we"). Your university has licensed the programme for its students and receives only anonymous, aggregate figures about it, as described below. If you have any question about this policy or about your data, contact us at privacy@myndgard.com.
What we collect
| Information | Why we collect it |
|---|---|
| Email address | To create your account, confirm it, let you reset your password, and to identify which university's programme you receive (from the domain of the address). |
| Name (optional) | Shown to you inside the app. You can leave it blank. |
| Password | Stored only as a one-way hash. We cannot read it. |
| Mood check-ins and written reflections | So that you can see them again when you return. These are the most sensitive things the app holds and are treated as health data (see How we protect it). |
| Exercise responses and quiz attempts | So the programme can show you your own answers and progress. |
| Module completion | To unlock the next day of the programme and show your progress. |
| Reminder time | If you set a daily reminder. Reminders are scheduled on your device; we do not send push notifications from our servers. |
| Consent record | The version of this policy and the terms you accepted, and when. |
| Security log | Sign-in events and account actions, with the time and IP address, so we can detect misuse and investigate problems. |
That is the whole list. The app contains no advertising and no third-party analytics or tracking software, and we do not sell or share your data for marketing.
If a member of your university's staff uses the app's administration screens, the app may ask for access to their photo library so they can upload the university's logo. Students are never asked for this permission.
Who can see what
You can see everything you have entered.
Your university sees anonymous, cohort-level figures only: how many students have registered and how far, on average, the group has progressed. University staff cannot see who has registered, cannot read anyone's check-ins or reflections, and cannot see an individual student's progress.
Myndgard staff operate the service. Access to the systems that hold your data is restricted, logged, and used only to run and support the service, never to read reflections out of curiosity or for research without your separate, explicit consent.
Service providers. The service runs on Amazon Web Services, which stores the data on our behalf under a contract that restricts what it may do with it. We do not use any other processor for your personal data.
We will disclose information if the law requires it, or if we believe in good faith it is necessary to protect someone's life or safety.
How we protect it
Check-ins, reflections and exercise responses are encrypted in the database with keys held separately from the data. All traffic between the app and our servers is encrypted in transit. Sensitive fields are excluded from our application logs. Each university's data is kept logically separate from every other university's. Our infrastructure is hosted in a private network with encrypted backups.
Legal basis
We process your account details and programme progress because they are necessary to provide the service you have signed up for. We process your check-ins and reflections, which are special-category (health) data, on the basis of your explicit consent, which you give when you create your account and which you can withdraw at any time by deleting your account. Security logs are kept on the basis of our legitimate interest in keeping the service secure.
How long we keep it
We keep your data for as long as your account exists. If your account is inactive for a long period, or your university's licence ends, we will contact you at your registered email address before removing it. When you delete your account, your reflections and exercise responses are deleted outright and your email address and name are irreversibly anonymised. Anonymous module-completion, quiz and consent records are retained because they can no longer be linked to you and because we are required to be able to show that consent was obtained.
Your rights
You can do the two most important things yourself, from Settings inside the app, without asking us:
- Export my data gives you a complete copy of everything we hold about you in a machine-readable format.
- Delete my account removes your account as described above. It takes effect immediately and cannot be undone.
You also have the right to ask us to correct inaccurate information, to restrict or object to processing, and to withdraw consent. To exercise any of these, email privacy@myndgard.com. If you are in the EU or UK you also have the right to complain to your data protection authority; in Ireland this is the Data Protection Commission.
Where data is stored
Data is stored on Amazon Web Services infrastructure. Where a university requires it, its students' data is held in a region it specifies. Where data is transferred between regions, we rely on standard contractual clauses or an equivalent lawful transfer mechanism.
Children
The programme is made available to university and college students and is not directed at children under 16. If you believe a child under 16 has created an account, contact us and we will remove it.
Changes to this policy
If we make a material change we will tell you inside the app and ask you to accept the new version before you continue. The version number and effective date at the top of this page will change whenever the policy does.
If you are in distress
Myndgard Discover is an educational programme, not a medical or emergency service. If you need help now, use the crisis support screen in the app, which lists your university's support service and a national helpline, or contact your local emergency services.
Myndgard Limited · privacy@myndgard.com