SiftMind Privacy Policy

Last revised: October 6, 2026
Effective date: October 6, 2026

SiftMind is operated by InnovFlux Inc. (“we,” “us,” or “our”). This policy explains how information is handled in the current SiftMind iOS app and when you contact us about it. SiftMind is currently offered only on iOS, is intended for worldwide availability to adults aged 18 or older, and is free to use. This policy describes the current release; if we add other platforms, we will update the relevant disclosures before introducing changes to information handling.

Privacy and support contact: contact@innovflux.com.

1. Wellbeing support and sensitive information

SiftMind provides self-guided educational exercises and reflection tools for general wellbeing. SiftMind is not a medical device. It does not diagnose, screen for, or treat medical or mental health conditions. It does not provide medical advice, psychotherapy, or treatment plans.

Although the app has a nonmedical purpose, your entries may reveal sensitive information about your thoughts, emotions, relationships, or health. You choose what to enter. Avoid unnecessary identifying details about yourself or other people.

SiftMind is not a crisis service. Your entries and ratings are not monitored for emergencies, and entering information does not request or trigger emergency assistance.

2. Information stored on your device

The current app stores your exercise entries on your own device. Information deliberately submitted as feedback is handled separately, as described in Section 3. Local exercise information can include exercise responses, reflection notes, feelings ratings, plans, saved history, and preferences, depending on the features you use.

This information is processed locally to display your entries and provide the exercises and history features you use. InnovFlux Inc. does not receive or store your exercise entries on its servers. We cannot read those local exercise entries or remotely retrieve, correct, or delete them for you. The app also stores your self-entered date of birth and age-check timestamp, your disclaimer acknowledgement version and timestamp, and the document fingerprint identifying the Terms you accepted, the Terms URL, and your acceptance timestamp, locally in the device Keychain to manage eligibility, onboarding, and acceptance records.

The current app has no implemented AI, analytics, or payment services. It does not send your entries to AI providers or use them to train AI models. We do not collect payment information through SiftMind because the current app is free.

We do not sell your local entries or share them with advertisers. Since these entries remain on your device, we do not use them for server-side profiling, research, content review, or product analytics.

3. Information you send to us directly

If you email contact@innovflux.com, we receive the email address, message, attachments, and other information you choose to send. This is separate from the entries stored in the app. We use that correspondence to respond to your request, troubleshoot an issue, and meet applicable legal obligations.

Support email is for technical issues. Feedback about the app or its skills is submitted through the in-app Firebase feedback feature. It does not provide mental-health support, counselling, diagnosis, treatment, crisis monitoring, or emergency response. You may separately use the same address for privacy requests. We may read and respond to technical issues and privacy requests sent by email. Avoid sending your full reflection history or sensitive health information; describe the product issue without personal health details where possible. Sending an email does not create a therapist–client or clinician–patient relationship. Do not use this inbox for urgent help or expect an immediate response.

We use Hostinger Email (Business Starter plan) for contact@innovflux.com. The email service handles the messages, sender details, attachments, and delivery information needed to receive and manage correspondence. Access to the support mailbox is limited to the owner of InnovFlux Inc. We do not forward support emails or connect the mailbox to other apps, and we do not use AI tools to handle support correspondence. We may also disclose information we actually hold when required or permitted by applicable law. A lawful request does not give us access to app entries that exist only on your device.

Hostinger processes support correspondence through its email infrastructure and service providers. Support information may be processed outside your country. Its Data Processing Addendum describes confidentiality, subprocessors, limits on customer-data use, and applicable international-transfer safeguards. See also Hostinger’s privacy notice. We do not use support messages for advertising or AI model training.

In-app feedback through Firebase

When you choose to send feedback about an exercise, the app sends the skill identifier, selected category identifier, optional feedback text, submission timestamp, and app version to Google Firebase Cloud Firestore. We use this feedback to review exercise content and troubleshoot product issues. Access to reports within InnovFlux Inc. is limited to the owner. The Firestore database is located in the United States; Firebase authentication, security, support, and other service processing may involve additional locations under Google’s service terms. Sending feedback is optional and separate from saving your exercise entries. Do not include personal health details, reflection history, or unnecessary identifying information in a report.

The app uses Firebase Authentication to establish an anonymous authentication account for feedback submission and Firebase App Check to help verify requests. Anonymous authentication does not mean that no technical identifiers or personal information are processed. Firebase may process account identifiers, IP addresses, user-agent information, and app/device attestation information to provide authentication, security, and the feedback service. Google describes these services and their data handling in its Firebase privacy and security information.

Our retention policy for submitted Firebase feedback is one year after submission, with earlier deletion where appropriate or required by law. Firebase technical records and backups may follow separate provider retention schedules. The app retains a local feedback copy and queues pending reports for later delivery when a connection is available. Firebase feedback is a remote data flow; it is not an AI or analytics integration. It does not automatically upload your saved exercise history. Feedback does not request mental-health support or trigger emergency assistance.

4. Device backups, app stores, and external services

SiftMind does not provide an in-app backup function. Your operating system or a backup service you enable may nevertheless include app data in device backups. Such backups are controlled through your device or backup provider's settings and may place copies outside your device. Local app storage does not guarantee that a backup provider has no copy.

Apple, through the App Store and iOS platform, may process information under its own privacy practices. Email services and external websites you choose to visit may also process information under their own policies. Information handled independently by these providers is separate from our local storage of your app entries and from any reports made available to InnovFlux.

We use crash reports made available through Apple to investigate and fix app crashes. Access to those reports within InnovFlux Inc. is limited to the owner. We view reports only in Apple’s tools and do not download or retain separate copies. Reports remain available according to Apple’s platform practices. This technical troubleshooting does not assess users’ mental health.

This policy covers the app, submitted feedback, and related support correspondence. Separate websites may have their own privacy notices.

5. Retention and deletion

Local records have different lifecycles. Ordinary saved skill sessions are assigned a 90-day expiry, with a 14-day expiry for brain-dump session types if used. Expired sessions are removed when the app next launches, rather than at a guaranteed time while the app is closed. These session-expiry rules do not apply to separately saved plans, feedback files and pending reports, or Keychain onboarding records.

Use Settings & Privacy → Delete My Data to delete saved exercise history, saved plans, local feedback copies and pending reports, and the locally stored age-verification, disclaimer acknowledgement, and Terms acceptance records, including those records in Keychain. You will need to complete the age, disclaimer, and Terms acceptance steps again. The app also attempts to delete your Firebase anonymous feedback account. If account deletion cannot finish, the app saves that pending step and offers a retry; it does not report the whole operation as completed. This action does not delete previously submitted Firebase feedback reports, support correspondence, or separate device-backup copies.

We retain support correspondence for one year after the request is resolved, with earlier deletion where appropriate or required by law. We review correspondence monthly and delete messages that have reached the end of this period during that review; routine deletion may therefore occur up to one month after the one-year point. Hostinger’s email-deletion guidance states that deleted messages remain in Trash for up to 30 days unless manually deleted from Trash sooner. Provider backups and technical records may follow separate retention schedules. If a legal obligation prevents deletion of particular records, we will explain the applicable exception where permitted and limit their use to that purpose.

6. Security and privacy risks

Storing entries locally limits transmission of your reflections to InnovFlux Inc.; it does not make the device immune to loss, unauthorized access, malware, or backup exposure. We do not promise absolute security or claim that local storage is end-to-end encrypted.

Use your device's screen lock and security updates, take care on shared devices, and review your backup settings. Anyone who can access your unlocked device may be able to view your entries. Sensitive information exposed without authorization could cause distress, embarrassment, or other harm.

If we become aware of an incident affecting personal information we hold, we will investigate and provide any notices required by applicable law.

7. Your choices and privacy rights

You can choose what to enter, skip optional reflection fields, and stop exercises. Local entries are managed on your device using the controls described above.

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of personal information we hold; withdraw consent; object to or restrict processing; or raise a complaint with a privacy regulator. Those rights and their exceptions vary by law. Rights concerning information held only on your device are exercised through the app or device controls rather than through a server-side request to us.

For personal information we receive through submitted feedback or support, contact contact@innovflux.com to make a privacy request or complaint. We may request limited information needed to verify your identity. We respond within applicable legal deadlines and explain any lawful limitations. You may also contact the relevant privacy regulator in your country or region.

8. Adults only

SiftMind is intended for people aged 18 or older. It is not intended for children. If you believe we have received personal information from someone under 18 through support or another channel, contact us so we can investigate and take appropriate action. We do not remotely inspect local entries to determine a user's age.

9. Future changes

This policy describes the current version: local exercise storage, optional Firebase feedback, free access, and no implemented AI, analytics, or payment services. If we later introduce cloud storage of exercise entries, AI processing, analytics, payments, or another material change in information handling, we will explain the change before the new processing begins and obtain any consent required by law. A policy update alone does not substitute for required consent.

We will publish updated policies with a revised effective date and provide notice of material changes in the app or another appropriate channel where required.

10. Contact

InnovFlux Inc.
Privacy and support: contact@innovflux.com