Privacy notice

Who we are

This website (4mindsthatroam.com) and the MindRoam portfolio of companion apps (MyJourneys, MyStoryTold, KnowMeFirst, LanguageBuster) are operated by 4MindsThatRoam OÜ ("4MindsThatRoam", "we", "us"), a private limited company incorporated in Estonia under the EU e-Residency framework.

• Legal name: 4MindsThatRoam OÜ
• Estonia registration number: 17496353
• Registered office: Tallinn, Estonia (EU)
• Sole director: Andrew Samuels
• Privacy contact: privacy@4mindsthatroam.com

4MindsThatRoam OÜ acts as the data controller for personal data processed through this website. Where a specific app in the MindRoam portfolio has its own privacy notice, that notice governs personal data processed through that app — supplemented (not replaced) by the principles below.

The principles we apply

Before describing what data we collect, it is worth stating the principles that govern the choices. We hold ourselves to these because we believe they describe the right relationship between an app and the person using it.

• No data sale. We do not sell personal data to third parties, ever.
• No surveillance advertising. We do not run advertising networks or share data with advertising networks. Our apps are subscription-funded.
• Subscription, not surveillance. When you pay us for an app, you are the customer — not the product.
• Export on demand. You can request a full export of your data at any time.
• Deletion on request. You can request deletion of your account and associated personal data; we will action it within the timeframes set by GDPR.
• EU-based. 4MindsThatRoam OÜ is incorporated in the EU, and the principal storage of personal data is in EU-based infrastructure.

What this website collects

The marketing website (4mindsthatroam.com) does not require an account. It does not run third-party advertising or surveillance scripts. The data we may collect on the marketing site is limited to:

• Server logs: standard request information (IP address, user agent, page requested, timestamp). Retained for up to 30 days for security and operational diagnostics.
• Contact submissions: if you choose to contact us via the addresses listed on the Contact page, we receive the email content you send. We use this only to respond to your enquiry.
• Apply submissions: if you submit an Apply form (when live), we receive the information you provide — used solely to evaluate partnership applications.

The marketing site does not use third-party analytics that build behavioural profiles. We may add privacy-respecting first-party analytics in future; if and when we do, this notice will be updated and the data collected will not include personally identifiable information beyond the IP-derived basics that are already in server logs.

What our apps collect

Each app in the MindRoam portfolio has its own purpose and therefore its own data needs. The full per-app privacy notices live with each app at its own domain (e.g. myjourneys.app/privacy). At the portfolio level, all apps adhere to the following commitments:

• Personal data is collected only where necessary for the app to function or for the user to receive a service they have asked for.
• Personal data is stored in EU-based infrastructure (Render Frankfurt region, Cloudflare R2, Neon Postgres EU, and similar EU-domiciled processors).
• Sub-processors (cloud hosting, payment processing, transactional email) are listed on each app's per-app privacy notice and are bound by appropriate data processing agreements.
• Sensitive content (voice recordings, life-story content, identity content) is held with additional access controls; specific commitments are detailed in the per-app notices.

Cookies and similar technologies

The marketing website uses a minimal set of strictly necessary cookies for functionality (for example, to remember if you have dismissed a banner). It does not currently use advertising cookies, social tracking pixels, or third-party analytics cookies. If this changes, this notice will be updated and a cookie consent mechanism will be added before any non-essential cookie is set.

Your rights under GDPR

Because 4MindsThatRoam OÜ is incorporated in the EU, the EU General Data Protection Regulation applies to personal data we process. You have the right to:

• Request access to the personal data we hold about you
• Request correction of inaccurate personal data
• Request deletion of your personal data, subject to legal retention requirements
• Request a portable export of your personal data in a machine-readable format
• Object to processing of your personal data for specific purposes
• Lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or your local supervisory authority

To exercise any of these rights, email privacy@4mindsthatroam.com. We aim to respond within 30 days as required by GDPR.

Children's data

Our apps are not directed at children under 13. We do not knowingly collect personal data from children under 13. Where an app within the MindRoam portfolio has a different minimum age (for example, an educational product designed for teenagers), that age and the relevant protections will be set out in the app-specific privacy notice.

International transfers

Where personal data is transferred outside the European Economic Area (for example, when we use a US-based payment processor), we rely on the Standard Contractual Clauses approved by the European Commission, or equivalent safeguards under Article 46 of GDPR.

Changes to this notice

We may update this privacy notice from time to time. Where the change is material, we will surface it visibly before it takes effect. The "Last updated" date at the top of this notice reflects the most recent version.

How to reach us

For privacy questions or to exercise any of the rights above:

• Email: privacy@4mindsthatroam.com
• Postal: 4MindsThatRoam OÜ, Tallinn, Estonia (registered office on file with Estonia Business Register, reg 17496353)