Privacy Policy – Insightable app

1. Who we are

NovoPsych Pty Ltd (ABN 99 158 319 629) develops and operates Insightable and Insightable Mind.

Postal address: PO Box 68, Ivanhoe, Victoria 3079, Australia

Privacy enquiries: legal@insightablemind.com

App support: support@insightablemind.com or our app support page.

2. What information we collect

We collect only what we need to run the App and personalise your meditation library.

2.1 Email address

• Email address, used to identify you in the App and send service-related messages.

2.2 Health and wellbeing information (sensitive)

When you enter your email address in the App, we link to your self-assessments on Insightable Mind and receive:

• The names of assessments you have completed on Insightable Mind
• Focus areas derived from your assessment results (for example, stress and relaxation, emotional awareness)

We do not store your individual question responses, raw scores, severity ratings, or free-text context in the App. Those are handled under the website Privacy Policy when you take assessments on the web.

Under the Privacy Act, focus areas linked to psychological assessments constitute health information. We treat this accordingly.

2.3 Meditation usage

To personalise and improve your experience, we collect:

• Which meditations you start, complete, or favourite
• Your meditation history, streaks, and preferences within the App
• Listening duration and playback position

2.4 Device and app analytics

We automatically collect technical and usage data, including:

• App opens, screen views, and feature interactions
• Device type, operating system version, and app version
• Crash reports and performance diagnostics

We use PostHog session replay in the App, which may capture a visual recording of what appears on your screen during your session, including meditation content and focus-area information if visible at the time.

2.5 Information we do not collect

We do not collect:

• Your full name (unless you choose to provide it elsewhere)
• Payment or financial information. The App is free.
• Precise GPS location
• Contacts, photos, or camera roll
• Microphone recordings. The App does not record your voice. Audio you hear is generated for you; we do not listen to or store what you say.

3. Why we collect your information

• Email, to identify you in the App and send service-related messages
• Assessment names and focus areas, to surface meditations from our library that match your focus areas
• Meditation usage, to track progress, streaks, and favourites, and improve the App
• Analytics and diagnostics, to understand how the App is used, fix bugs, and improve performance
• Product communications, for occasional updates about Insightable while you remain on our audience

We do not sell your personal information and we do not use it for third-party advertising.

4. How we store and protect your information

• In transit: All data sent between your device and our servers is encrypted using HTTPS/TLS.
• At rest: Your email and personalisation data is stored on secure servers with access restricted to authorised personnel.
• Location: Primary data is stored in Australia on Fly.io infrastructure in the Sydney region.
• Access controls: We use authentication and industry-standard security practices to protect your data.

No method of transmission or storage is completely secure. If you believe your information has been compromised, contact us immediately at legal@insightablemind.com.

5. How long we keep your information

• Your data (email, focus areas, meditation history), while you continue to use the App with that email and as needed to provide the App
• After a deletion request, we delete or de-identify your data within 90 days
• Analytics (PostHog), retained according to PostHog's settings and our configuration, including session replay recordings where enabled
• Email delivery logs (Resend), retained per Resend's practices, typically for delivery troubleshooting
• Marketing audience (Mailchimp), until you unsubscribe or request deletion

When you request deletion, we remove your data from our active systems within 90 days. Some information may persist in backup systems for a limited period before being overwritten, or in third-party systems until those providers process our deletion request.

6. Who we share your information with

We share personal information only with service providers that help us operate the App. Each receives only what they need.

6.1 PostHog (Analytics)

Provider: PostHog, Inc. Location: United States (us.i.posthog.com).

We share app usage events, device information, and, when you have entered your email in the App, that email address so activity can be linked to you. We have enabled session replay, which may record what appears on your screen while you use the App. This helps us understand how people use the App, diagnose issues, and improve the experience.

6.2 ElevenLabs (Voice synthesis)

Provider: ElevenLabs. Location: United States.

We send pre-written meditation script text to ElevenLabs so it can be converted into spoken audio you hear in the App. We do not send any content you type or create, and we do not send microphone recordings or your voice to ElevenLabs.

6.3 Resend (Transactional email)

Provider: Resend, Inc. Location: United States.

We share your email address and message content for service emails (for example important App notices).

6.4 Mailchimp (Product communications)

Provider: The Rocket Science Group LLC d/b/a Mailchimp. Location: United States.

When you enter your email in the App, we add it to our Mailchimp audience so we can send occasional product updates about Insightable and Insightable Mind. We do not email frequently. You can unsubscribe at any time using the link in any message we send, or by contacting us.

We do not share your health information with advertisers, data brokers, or social media platforms.

7. Overseas disclosure

Several providers listed in Section 6, including PostHog, ElevenLabs, Resend, and Mailchimp, are located in the United States. When you use the App, your personal information may be transferred to and processed in the US.

Under Australian Privacy Principle 8, we take reasonable steps to ensure overseas recipients handle your information in a way that reflects the standards of the APPs, through contractual arrangements, their own privacy commitments, or applicable law.

You should be aware that Australian privacy law may not apply to handling of your information overseas, and you may not be able to seek redress under Australian law for that handling. We select providers with strong data protection practices.

8. How we personalise your library

The App does not currently use artificial intelligence to personalise your experience. When you enter your email address in the App, we link to your self-assessments on Insightable Mind and match meditations from our curated library to your focus areas using predefined rules. For example, we may surface stress-and-relaxation meditations when that focus area applies to you.

Meditation content is for general wellbeing and self-reflection only. It is not a substitute for professional mental health care.

If we introduce AI-powered personalisation in future, we will update this policy before or when that feature launches and explain what data is involved.

9. Your privacy rights

Under the Privacy Act and APPs, you have the right to:

• Access the personal information we hold about you
• Correct information that is inaccurate, incomplete, or out of date
• Delete your personal data. Email legal@insightablemind.com and we will action your request
• Unsubscribe from marketing emails via the link in any Mailchimp message, or by contacting us
• Complain if you believe we have mishandled your information. Contact us at legal@insightablemind.com

We will respond to access, correction, and deletion requests within a reasonable time. Because some data is also held by third-party providers (PostHog, Mailchimp, and others), we will help you understand which provider may hold relevant information when you make a request.

10. How to request deletion

To delete your personal data:

1. Email legal@insightablemind.com from the email address you use in the App
2. Tell us you want your Insightable data associated with that email deleted
3. We will confirm once deletion is complete (within 90 days)

Deleting your data in the App does not automatically delete data from Insightable Mind website assessments. If you also want website assessment data removed, say so in your request or see the website Privacy Policy.

11. Cookies and tracking

The App itself does not use browser cookies. We use PostHog, including session replay, and native iOS analytics identifiers to understand App usage, as described in Section 2.4. You can limit ad tracking in your iOS Settings under Privacy and Tracking, though this may not affect our first-party analytics.

12. Children and young people

The App does not have a minimum age requirement and we do not knowingly collect personal information from children without appropriate consent.

The App is designed for general wellbeing and self-reflection. It is not directed at children. If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact legal@insightablemind.com and we will delete it.

13. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the effective date at the top of this page and, where appropriate, notify you through the App or by email.

Continued use of the App after changes take effect means you accept the updated policy.

14. Contact us

NovoPsych Pty Ltd (trading as Insightable Mind)
PO Box 68, Ivanhoe, Victoria 3079, Australia
ABN 99 158 319 629

Privacy: legal@insightablemind.com
Support: support@insightablemind.com