Privacy Policy

Effective as of: January 1, 2026

This Privacy Policy describes how Yezo LP (“we,” “us,” or “our”) collects, uses, discloses, and protects personal data when you use the Mindaily website, mobile applications, quiz, and related services (collectively, the “Services”). By using the Services, you acknowledge the practices described here. If you do not agree, please do not use the Services.

1. Personal data controller

The controller responsible for personal data processed in connection with the Services is:

Yezo LP, a limited partnership registered in the United Kingdom.

For privacy inquiries: hello@themindaily.com

2. Categories of personal data we collect

We may collect the following categories of information, depending on how you interact with us:

Data you give us

Account and profile information (such as name, email address, password or authentication credentials).
Payment and billing-related information processed by our payment partners (we typically receive limited transaction metadata, not full card numbers).
Communications you send us (support tickets, emails, survey responses, feedback).
Content you voluntarily submit in the Services (for example, journal entries, quiz responses, or habit-related inputs).

Data we receive from third parties

Authentication or profile data if you sign in through a third party (for example, Apple or Google), subject to your settings.
Payment and subscription status from app stores or payment processors.
Advertising or attribution data from partners when you interact with our ads or install our apps (where permitted).

Data collected automatically

Device and technical data: device type, operating system, app version, language, time zone, IP address, and identifiers such as device IDs.
Usage data: features used, session duration, crash logs, performance diagnostics, and in-app events.
Advertising identifiers: such as IDFA (iOS) or GAID (Android), where available and where we or partners are permitted to use them.
Cookies and similar technologies: on our website and related properties, as described in our Cookie Policy.
Meta Pixel and similar tags: may collect or receive information about your visit to our website or interaction with our ads, subject to your choices and Meta’s policies.

Gambling-related behavioral data

Because Mindaily supports habit change around gambling, you may provide or generate data that relates to gambling behavior, urges, triggers, goals, and progress. We treat this category as sensitive in nature and use it only as described in this Policy and as permitted by law.

AI features data

If we offer features that use artificial intelligence or machine learning (for example, personalization, content suggestions, or automated insights), we may process inputs you provide and outputs generated to deliver and improve those features, including with the help of subprocessors. We do not use such data to train third-party foundation models for their general products unless we clearly disclose otherwise and, where required, obtain your consent.

3. For what purposes we process personal data

We use personal data for purposes including:

Provide the Services: create and manage accounts, deliver content, sync progress, and operate core functionality.
Customize experience: tailor programs, reminders, and recommendations based on your inputs and usage.
Customer support: respond to requests, troubleshoot issues, and improve help resources.
Communications: service-related notices, security alerts, and (where permitted) marketing about Mindaily.
Research and analytics: understand aggregate usage, measure performance, and develop new features.
Marketing: promote the Services through email, push notifications (if enabled), and advertising on third-party platforms.
Personalize ads: measure campaigns, attribute installs, build audience segments, and optimize ad delivery, consistent with your settings and applicable law.
Process payments: validate transactions, prevent fraud, and manage subscriptions.
Enforce terms: detect abuse, protect users, and defend our legal rights.
Legal compliance: meet regulatory obligations, respond to lawful requests, and cooperate with authorities when required.

4. Legal bases (EEA / UK)

Where the UK GDPR or EU GDPR applies, we rely on one or more of the following legal bases:

Consent — for optional cookies and similar technologies, certain marketing, and other processing where we ask for your clear affirmative choice.
Contract — to perform our agreement with you (providing the Services you request, billing, account management).
Legitimate interests — for example, securing our systems, improving the product, analytics that do not require consent, fraud prevention, and direct marketing where compatible with your rights.
Legal obligations — where we must process data to comply with the law.
Explicit consent — where required for certain sensitive categories of data under applicable law.
Vital interests — rarely, to protect someone’s life or physical safety in an emergency.

You may withdraw consent where processing is consent-based, without affecting the lawfulness of processing before withdrawal.

5. With whom we share personal data

We share data with categories of recipients such as:

Service providers who assist us under contract (hosting, analytics, customer support, email delivery, payment processing, attribution, advertising). Examples of providers we may use include Amazon Web Services, Google (including Firebase and Google Analytics where applicable), Meta, and other infrastructure or software vendors. The actual list may evolve; we require subprocessors to protect data appropriately.
Professional advisers (lawyers, auditors) where necessary.
Law enforcement and regulators when we believe disclosure is required by law or to protect rights, safety, or security.
Parties to a merger, acquisition, or asset sale, subject to appropriate safeguards and notice where required.

We do not sell your personal data for money in the traditional sense. Some jurisdictions treat certain sharing for advertising as a “sale” or “sharing”; see the U.S. states section below for opt-out rights where applicable.

6. How to exercise privacy rights

Depending on your location, you may have rights to:

Access a copy of your personal data.
Correct inaccurate data.
Delete certain data we hold about you.
Object or restrict certain processing, including in some cases profiling or direct marketing.
Portability of data you provided, in a structured, commonly used format where technically feasible.

To submit a request, contact hello@themindaily.com. We may need to verify your identity before responding.

EEA and UK additional rights

Residents of the EEA or UK may lodge a complaint with a supervisory authority. You also have the right to object to processing based on legitimate interests and to withdraw consent for consent-based processing at any time.

7. Age limitation

The Services are not directed to individuals under 18. We do not knowingly collect personal data from children. If you believe we have collected data from a minor, contact us and we will take appropriate steps to delete it.

8. International data transfers

We may process and store data in the United Kingdom, the European Economic Area, the United States, and other countries where we or our service providers operate. When we transfer personal data from the EEA, UK, or Switzerland to countries not deemed adequate, we use appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms, supplemented by technical and organizational measures where required.

9. Data retention

We retain personal data only as long as necessary for the purposes described in this Policy, unless a longer period is required or permitted by law. Factors include whether you maintain an account, whether data is needed for legal claims, and statutory retention obligations. When data is no longer needed, we delete or anonymize it in accordance with our internal schedules.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the effective date. If changes are material, we will provide additional notice as required by law (for example, by email or in-app message).

11. U.S. states privacy policy

Residents of certain U.S. states (including California, Colorado, Connecticut, Virginia, and others with comprehensive privacy laws) may have additional rights, such as:

Right to know categories and specific pieces of personal information collected.
Right to delete personal information, subject to exceptions.
Right to correct inaccurate personal information.
Right to opt out of “sale,” “sharing” for cross-context behavioral advertising, or targeted advertising, as those terms are defined locally.
Right to limit use of sensitive personal information where applicable.
Right to non-discrimination for exercising privacy rights.

To exercise these rights, email hello@themindaily.com. Authorized agents may submit requests where permitted by law. We will verify requests as required.

12. Do not track

Some browsers transmit “Do Not Track” signals. There is no consistent industry standard for how to respond. We currently do not respond to DNT signals; you can control cookies and ad preferences through our Cookie Policy, device settings, and industry opt-out tools.

13. Contact us

For any questions about this Privacy Policy or our data practices:

Email: hello@themindaily.com

Controller: Yezo LP, United Kingdom