Privacy Policy

What data BareMind stores

All of the following is stored locally on your device using the browser's IndexedDB and localStorage. It never leaves your device. On both Android and iOS, sensitive entries are encrypted at rest (AES-256-GCM) using a key kept in the device's secure hardware storage (Android Keystore / iOS Keychain). Some structured numeric values (e.g. step counts, sleep duration) are stored unencrypted inside the app's private, OS-sandboxed storage.

• Mood logs — mood rating, emotions, context tags, optional text note
• Sleep — you can log sleep by hand (duration and a quality rating), or optionally record the night on Android or iPhone: microphone audio is processed on-device to detect movement and snoring and to estimate sleep stages. Raw audio is never stored; only derived metrics (stage timeline, per-minute sound levels, score) are saved.
• Voice journal entries (Android only) — audio is transcribed on-device using a locally downloaded speech model. The recording and its transcript are both saved, encrypted, on the device so you can play the entry back; deleting the entry deletes both. There is no microphone feature on iOS.
• Health & activity data — if you enable it, BareMind reads step count and sleep, read-only, from Apple Health (HealthKit) on iOS or Health Connect on Android. This data is stored locally and never shared or written back.
• Written journal entries — anything you type in the journal, and the weekly and monthly reflections.
• Thought records — CBT reframes (the situation, the thought, the pattern you picked, the kinder version) and worry-tree entries.
• Gratitude, goals and values — gratitude notes, your three active goals and their logs, the values bullseye, earned badges.
• Safety plan and coping cards — if you write one. This is treated as sensitive and encrypted like the rest.
• Exposure ladder — the items you list and how each attempt went, if you use it.
• Practice sessions — which breathing, meditation, grounding or stretch practice you ran, and for how long.
• Day factors — the tags you attach to a day (sleep, exercise, caffeine, alcohol, connection and so on), plus water and step counts.
• Screen time (Android, optional) — if you turn it on, daily app-usage totals read on-device.
• Settings and preferences — sleep window, daily goals, reminder times, theme, language. Stored in localStorage.
• Cycle data — menstrual cycle entries, if logged.
• Pain and headache logs — if logged.

What BareMind does not do

• Does not transmit any personal data to any server
• Does not require an account or email address
• Does not use analytics, crash reporting, or advertising SDKs
• Does not share data with third parties
• Does not use cloud backup or sync of its own — see the note on your phone's own backup below
• Does not sell data

Device permissions

BareMind requests the following permissions. Each is used only for the stated purpose and data stays on-device.

• Microphone — used for optional overnight sleep tracking (movement and snoring detection via ambient sound analysis) on Android and iOS, and for voice journal transcription on Android. Audio is processed locally; sleep audio is never stored, and voice-journal recordings are stored only on the device, encrypted.
• Notifications — used to send bedtime reminders and mood check-in prompts. Notification content is generated locally.
• Apple Health / Health Connect — used to read step count and sleep, read-only, if you choose to enable it (HealthKit on iOS, Health Connect on Android). BareMind only reads; it never writes back.
• Activity recognition (Android) — used to count your daily steps on-device.
• Usage access (Android, optional) — if you enable screen-time tracking, BareMind reads app-usage stats on-device only.
• Alarms & reminders (Android) — exact-alarm and start-on-boot permissions, used only so a reminder or the smart wake-up fires at the time you set, and survives a restart. Scheduled on-device.
• Foreground service (Android) — keeps overnight sleep analysis and voice recording running while the screen is off, with the standing notification Android requires. On-device only.
• Background audio (iOS) — keeps overnight sleep analysis running while the phone is locked; iOS shows its microphone indicator while it runs. On-device only.
• Internet (Android) — declared for exactly one thing: downloading the speech model described below. Nothing else in the app opens a connection.
• Biometric unlock (optional) — Face ID / Touch ID (iOS) or fingerprint / face (Android) used only to unlock the app; the biometric is handled by the OS and never seen, stored, or transmitted by BareMind.

Data deletion

All data is stored on your device. You can delete it at any time:

• In-app — Settings → Clear all data removes all entries and resets the app.
• Via Android — Settings → Apps → BareMind → Storage → Clear Data removes everything including the app's local database.
• Via iOS — offloading or deleting the app from Settings → General → iPhone Storage (or long-press → Delete App) removes all locally stored data.
• Uninstalling the app removes all locally stored data.

Your phone's own backup

BareMind runs no backup or sync of its own, and it keeps its data out of your phone's system backup as well:

• Android: BareMind opts out of Android and Google backup entirely, so its data is never copied into a Google account backup.
• iOS: BareMind marks its storage as excluded from iCloud and computer backups, so a backup of your iPhone carries none of your BareMind data.

The encryption key is stored device-only and is never placed in iCloud Keychain. The one way to move your data to a new phone is the app's own export in Settings → Data. That file is yours to place where you like.

Voice model download (Android only)

On Android, the voice journal feature uses whisper.cpp, an open-source on-device speech recognition engine, running the open Whisper model. When you first open Voice Journal, the app downloads one speech model file (about 875 MB, shared by every language) from Hugging Face (huggingface.co), a public model repository, and checks it against a fixed checksum. This model download is the only outbound network request BareMind makes, and no personal data is sent during it — Hugging Face sees only what any file download produces (your IP address and the file name). The speech model is the same for everyone and contains nothing about you. On iOS there is no voice journal and no model download — the iOS app makes no outbound network requests at all.

Age & eligibility (children's privacy)

BareMind is intended for users aged 13 and older and is not directed at children under 13. I do not knowingly collect personal information from children under 13; if you are under 13, please do not use this app. If you believe a child under 13 has used the app, contact privacy@baremind.health.

This website (baremind.health)

The site loads nothing from a third party and sets no cookies. There is no analytics script, no pixel, no embedded font or CDN, and no account. The only form is the optional launch waitlist.

• Launch waitlist: if you join, the server stores your email address and the date you joined. It is used for one thing, a single email on launch day with the store links. It is never used for marketing, never shared with anyone, and never linked to the app, which does not talk to this server.
• Lawful basis for the waitlist: your consent, given with the checkbox when you join. You can withdraw it at any time.
• How long it is kept: the whole list is deleted within 30 days of launch day, once the launch email has gone out. Sooner for your address if you ask.
• Leaving the list: email privacy@baremind.health from the address you signed up with, or tell me which one it is, and I delete it.
• Server logs: to serve you a page at all, the web server has to see your request. Like any web server, mine records the IP address, timestamp, requested page and browser user-agent of each request. These are used only to keep the site running and to block automated abuse, are never linked to anything else (including the waitlist), are never shared, and are deleted automatically after 14 days. Lawful basis: legitimate interest in keeping the site online and defending it against attack.
• Where: a server I rent in Germany (Hetzner). No third-party analytics, hosting-side tracking or CRM is involved.

An earlier waitlist ran here until 13 August 2026. Every address it held was deleted from the live file and from every backup; the current list started empty.

Your rights

These rights apply to the waitlist addresses and server logs described above, which are the entirety of the personal data I hold. They do not apply to anything inside the app, because that never reaches me and I have no way to retrieve it.

• Access — ask for a copy of what is held about you.
• Rectification — ask for it to be corrected.
• Erasure — ask for it to be deleted.
• Restriction and objection — ask me to stop using it while a question is resolved.
• Portability — ask for it in a machine-readable form.

In practice a log line is only linkable to you if you tell me the IP address and rough time to look for, and after 14 days it is gone regardless. Email privacy@baremind.health for any of these and I answer within 30 days. If you are in the UK, the EU or the EEA and you think your data has been handled badly, you also have the right to complain to your national data protection authority — you do not have to come to me first.

Changes to this policy

If this policy changes materially, the updated version will be posted at this URL with a revised date. Because BareMind has no accounts, I cannot notify you directly — check this page if you want to see the latest version.

Contact & data controller