Privacy Policy

Last updated: 21 May 2026

MindMePlay is a mental conditioning and journaling app for cricketers, including children and young people. We have written this policy in plain language so that players, parents, and guardians can understand it. If anything is unclear, contact us at [email protected].

1. Who we are

MindMePlay ("we", "us", "our") is the app described at mindmeplay.com. For the purposes of UK and EU data protection law, MindMePlay is the data controller for the personal data described in this policy.

For any privacy question, request, or complaint, contact us at [email protected].

2. Who can use MindMePlay

MindMePlay is designed for cricketers of different ages. How an account is created depends on age:

Children under 13 cannot create their own account. A parent or guardian creates and manages the account, sets up the child's profile, and provides consent on the child's behalf.
Young people aged 13 to 17 may set up their own profile but must confirm they have permission from a parent or guardian to use the app.
Adults aged 18 and over create a standard account, and may also act as a parent or guardian managing children's profiles.

We do not knowingly allow children under 13 to register their own accounts. If we learn that a child under 13 has created an account without a parent or guardian, we will remove it.

3. What data we collect

Account information

Email address and password (passwords are stored securely by our authentication provider; we never see them in plain text).
A PIN set by parents or guardians to protect parental settings.
The account role: parent/guardian, teen, or adult.

Profile information

Display name or nickname, and an optional avatar.
Age or age band, and country or region.
Cricket details: playing role, and bowling or spin type where relevant.

Activity and journaling data

Journal entries, which include structured inputs (such as mood, energy, and focus ratings, session type, and selectable prompts) and free-text notes that the user chooses to type.
Game plans, session reflections, and cricket statistics the user records.
Progress data such as completed sessions, streaks, levels, and experience points.

Usage analytics

We use PostHog to understand how features are used (for example, how often a session is completed). This captures product events within the app. We have switched off automatic app lifecycle and deep-link tracking.
We do not use analytics to build advertising profiles, and we do not sell data.

What we do NOT collect

We do not collect precise location data. We do not collect payment or financial information. We do not use crash-reporting SDKs that share data with third parties. We do not use advertising trackers. We do not access contacts, photos, or the microphone for journaling. Audio guidance in the app is pre-recorded and bundled with the app — using it does not send any data to a voice provider.

4. How we use data

Purpose	Examples
Provide the app	Create and manage accounts and profiles, save journal entries and progress.
Personalise the experience	Show age-appropriate content and adjust guidance to the player's profile.
Improve the app	Understand which features help players, using aggregated product analytics.
Keep accounts secure	Authenticate sign-in and protect parental settings.
Communicate with you	Respond to support and privacy requests.

5. Legal bases (UK and EU users)

Where UK or EU data protection law applies, we rely on the following legal bases:

Contract — to provide the app and its core features.
Consent — for children's data, consent is given by a parent or guardian; this can be withdrawn at any time.
Legitimate interests — to keep the app secure and to improve it, balanced against users' rights, with particular care taken for children.

6. Children's and young people's privacy

We take the privacy of young athletes seriously and aim to follow the principles of the UK Age Appropriate Design Code (Children's Code), the US Children's Online Privacy Protection Act (COPPA), the EU GDPR, and India's Digital Personal Data Protection Act.

Accounts for children under 13 are created and controlled by a parent or guardian, who provides consent.
Users aged 13 to 17 must confirm they have parental or guardian permission.
Children's profiles are private. They are not public, and there are no social, sharing, messaging, or follower features in the app.
We do not use children's data for marketing or advertising, and we do not sell it.
A parent or guardian managing a child profile can view that child's information and progress, and can request changes or deletion.

If you are a parent or guardian and have any concern about your child's data, contact us at [email protected].

7. Who we share data with

We do not sell personal data. We share data only with service providers that help us run the app, and only as needed:

Supabase — secure database, authentication, and hosting. Data is hosted in the European Union (London region).
PostHog — product analytics, using its European Union hosting.
Apple and Google — app distribution through the App Store and Google Play.

These providers process data on our behalf under agreements that require them to protect it. We may also disclose data if required by law.

8. Where data is stored

Personal data is stored on servers in the European Union. Our database (Supabase) uses the London region, and our analytics provider (PostHog) uses European Union hosting. If we transfer data internationally in future, we will use appropriate safeguards and update this policy.

9. How long we keep data

We keep personal data for as long as an account is active. If an account or profile is deleted, we delete the associated personal data, except where we must keep limited information to meet legal obligations. You can ask us to delete data at any time.

10. Your rights

Depending on where you live, you may have the right to:

Access the personal data we hold about you or your child.
Correct inaccurate data.
Delete data ("right to erasure").
Object to or restrict certain processing.
Withdraw consent at any time, where processing is based on consent.
Request a copy of data in a portable format.

To exercise any of these rights, email [email protected]. For children's data, requests can be made by the managing parent or guardian. UK and EU users also have the right to complain to a data protection authority, such as the UK Information Commissioner's Office.

11. Security

We use appropriate technical and organisational measures to protect personal data, including encrypted connections, secure authentication, and access controls. No system can be guaranteed completely secure, but we work to protect data and to respond promptly to any issue.

12. Changes to this policy

We may update this policy as the app develops — for example, when we add new features or expand to new regions. When we make a significant change, we will update the date at the top and, where appropriate, notify users in the app.

13. Contact us

For any question about this policy or your data, contact:
[email protected]