Skip to content

Privacy Policy — The AncientMind Codex

Template, not legal advice. This is a solid, standard starting point tailored to how the app actually works. Before publishing, fill the [BRACKETED] fields and have a lawyer review it — especially because you will have EU and California traffic (GDPR / CCPA). Replace placeholders and the "Last updated" date.

Last updated: June 19, 2026

This Privacy Policy explains how AncientMind Elixir ("we", "us", "our"), operator of The AncientMind Codex (the "App", accessed at app.ancientmindelixir.com), collects, uses, and protects your information. By using the App you agree to this Policy.

1. Who we are

The App is provided by AncientMind Elixir, 19655 E 35th Dr #100, Aurora, CO 80011, United States. For any privacy question or request, contact us at support@ancientmindelixir.com.

2. Information we collect

  • Account information: the email address you used to purchase, and (if you choose to set one) a password.
  • Content you create in the App: your assessment answers, journal entries, dream entries, synchronicity entries, manifestation targets, and any feedback you submit. Some of this is personal and reflective in nature.
  • Practice and progress data: days practiced, streaks, calcification score, level, and similar progress metrics.
  • Purchase information: order details received from our checkout provider (CartPanda) when you buy, such as your email, order ID, and product purchased. We do not receive or store your full payment card details.
  • Usage and device data: standard technical data such as IP address, device/browser type, and in-app actions, collected through analytics and security tooling.

3. How we use your information

  • To create and provide access to your account and deliver the practice experience.
  • To save and display your personal progress and content.
  • To send you access and service emails (for example, a reminder with your login link if you have not yet signed in).
  • To secure the App, prevent abuse, and rate-limit sign-in attempts.
  • To understand how the App is used and improve it (analytics).
  • To comply with legal obligations.

4. Legal bases (EU/UK users, GDPR)

We process your data to perform our contract with you (providing the App you purchased), based on our legitimate interests (security, improving the product), to comply with legal obligations, and—where required—based on your consent (for example, certain analytics/cookies).

5. Service providers we share data with

We use trusted processors to run the App. They process data on our behalf under their own terms:

  • Supabase — database, authentication, and storage.
  • Vercel — application hosting.
  • Resend — sending access/service emails.
  • CartPanda — checkout/purchase processing (sends us order data).
  • PostHog — product analytics (no personal content captured; identified by an internal ID).
  • Sentry — error and performance monitoring (configured to exclude your personal content).

We do not sell your personal information.

6. Cookies and analytics

The App uses essential cookies (for login/session) and analytics to understand usage. Where required by law, we will ask for your consent to non-essential analytics/cookies. You can control cookies through your browser settings.

7. Data retention

We keep your account and content for as long as your account is active. If you request deletion, or if your purchase is refunded/charged back and access is revoked, we will delete or anonymize your personal data within [30] days, except where we must retain certain records for legal, accounting, or fraud-prevention purposes.

8. Your rights

Depending on where you live (including the EU/UK under GDPR and California under CCPA/CPRA), you may have the right to: access the data we hold about you, correct it, delete it, export a copy, object to or restrict certain processing, and withdraw consent. California residents may request disclosure of data practices and are entitled not to receive discriminatory treatment for exercising their rights.

To exercise any of these rights, email support@ancientmindelixir.com. We will respond within the timeframe required by law. You may also reset your in-app progress at any time from the App's settings.

9. Security

We protect your data with industry-standard measures: encrypted transport (HTTPS), row-level access controls so users can only reach their own data, restricted server-side access to sensitive tables, and rate-limited sign-in. No system is perfectly secure, but we work to protect your information.

Note on email-only access: to keep first access frictionless, you can sign in using only the email from your purchase. This means someone who knows your purchase email could access your account. To protect your account—especially your private journal—you may set a password in the App, which is required to sign in on a new device.

10. International transfers

Your data may be processed in countries other than your own (including the United States) by us and our providers. Where required, we rely on appropriate safeguards for such transfers.

11. Children

The App is intended only for adults aged 18 and over. We do not knowingly collect data from anyone under 18.

12. Health & wellness note

The App provides educational and reflective content and is not a medical service. It does not collect data for medical diagnosis or treatment. See our Terms of Use for important health disclaimers.

13. Changes to this Policy

We may update this Policy. We will post the new version here and update the "Last updated" date; significant changes may be communicated in-app or by email.

14. Contact

Questions or requests: support@ancientmindelixir.com.