Privacy Policy

Who we are

Magnetic Action is operated by Black Bird Ventures Inc., trading as All About Mindset. We are the controller of the personal information described here. You can reach us at [email protected].

What we collect

We collect only what the product needs to work. There is no advertising network here, no tracking pixel, and no analytics script of any kind.

• Your account. Your first and last name, your email address, and, if you sign in with Google, the profile picture Google gives us. If you sign up with a password instead, we store a one-way hash of it and never the password itself.
• What you write in the app. Your Mindset Map answers and results, and the full conversation in each coaching module, including your messages and the AI coach’s replies. The finished result of a module is saved so you can come back to it and download it.
• Purchases. If you buy something, we record the amount, what it was for, and the name and email address you gave at checkout. Card numbers never reach us: payment is taken on Stripe’s own hosted page.
• Event bookings. If you reserve a seat at an adventure, we record your seat and, for a seat you buy for somebody else, the first and last name you type for that guest.
• Session technical data. Each time you sign in we store the IP address and browser user agent alongside that sign-in session, which is what lets us show and end active sessions.
• Notifications. If you turn on push notifications, we store the anonymous address your browser issues for them, so we can send to that browser.

Sign in with Google

Signing in with Google is optional. When you use it, we ask Google for three standard sign-in permissions and nothing else: openid, email and profile. We do not request access to your Gmail, Drive, Calendar, Contacts or any other Google service, and we cannot read them.

• What we receive. Your Google account identifier, your email address and whether Google has verified it, your name (given and family name), and your profile picture URL.
• How we access it. Only during the sign-in exchange you start by choosing “Continue with Google”. We never access your Google account in the background.
• How we use it. To create your account, to recognize you when you come back, to address you by name in the app, and to send you service email such as a password reset or a booking confirmation.
• How we store it. In our own database on our own server, alongside the tokens Google issues for your sign-in. Everything travels over HTTPS.
• How we share it. We do not. Google sign-in data is not sold, not passed to advertisers, and not used to train any AI model.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect us from your Google account at any time at myaccount.google.com/permissions. Doing so stops future Google sign-ins; it does not delete the account you already have with us, which is covered under Deleting your account below.

Cookies and browser storage

We set one cookie that matters: the sign-in cookie that keeps you signed in. It is restricted to this site, is not readable by JavaScript, and exists for no purpose other than your session. Signing in with Google also sets short-lived cookies during the exchange itself, which expire as soon as it completes.

Two preferences are kept in your browser’s own local storage rather than sent to us: your light or dark theme choice, and whether you have dismissed the prompt to install the app. Clearing your browser data clears both.

There are no advertising cookies and no third-party trackers on this site.

Who else sees your information

We use a small number of service providers to run the product. Each one sees only what it needs for its part of the job.

• Anthropic powers the AI coaching. Your conversation in a module is sent to Anthropic’s API each time you send a message, so the coach can reply with the thread in view. Your name, email address and account identifier are not sent. Under Anthropic’s commercial terms, content sent through their API is not used to train their models.
• Stripe handles payments. Checkout happens on Stripe’s own page, so your card details go to Stripe and never to us. We send Stripe your email address and name so your receipt and billing records are yours.
• Resend delivers our email. It sees the address we are writing to and the contents of that message.
• Google is involved only if you choose to sign in with Google, as described above.
• Push notification services (Apple, Google or Mozilla, depending on your browser) deliver notifications if you turn them on. The contents are encrypted before they leave us.

We do not sell your personal information, and we do not share it for advertising. We will disclose information if the law requires it, and we will tell you unless we are prohibited from doing so.

How we protect it

Everything travels over HTTPS. Passwords are stored as one-way hashes, so nobody here can read them. The sign-in cookie cannot be read by scripts in your browser. Card details never reach our systems at all. Access to the database is limited to the people who operate the service.

No service can promise perfect security, and we will not pretend otherwise. If a breach ever affected your information, we would tell you.

How long we keep it

We keep your account and your work for as long as your account exists, because the point of the product is that your Mindset Map and your module results are still there when you come back months later.

Payment records are the exception, and this is deliberate. A receipt with no buyer on it is not a record of anything, so a payment keeps the name and email address given at checkout even after the related account is deleted. Those records are visible only to us, are used only to answer questions about that specific purchase, and are kept for as long as tax and accounting rules require.

Your choices

• See and correct your details. Your name is editable on your settings page. For a copy of everything we hold about you, email us and we will send it.
• Manage your subscription. A paying member can open Stripe’s billing portal from the settings page to change a card or cancel.
• Turn off notifications. Push notifications are off until you turn them on, and can be turned off again in settings or in your browser.
• Disconnect Google. At myaccount.google.com/permissions, as described above.

Depending on where you live you may have further rights over your personal information, such as the right to object to how we use it or to ask for it in a portable format. Email us and we will honor them.

Deleting your account

Email us at [email protected] from the address on your account and ask us to delete it. We will remove your account, your sign-in records, your Mindset Map results, and every module conversation and result, apart from the payment records described under How long we keep it.

Deletion is permanent, and the modules you have completed cannot be recovered afterward. Download anything you want to keep first.

Children

This is a product for people running a business, and it is not intended for anyone under 18. We do not knowingly collect information from children. If you believe a child has an account here, email us and we will remove it.

Changes to this policy

If we change how we handle your information, we will update this page and move the date at the top. A change that materially affects you will also be sent to you by email rather than left here to be discovered.

Contact

Black Bird Ventures Inc., trading as All About Mindset. Questions about this policy, or about the information we hold on you, go to [email protected].