Privacy Policy
This policy covers sensitive mental-health and wellness information. Skillcard does not sell personal information or consumer health data, does not use your diary for advertising and does not analyze your diary with artificial intelligence.
1. Scope and who we are
This Privacy Policy explains how Mental Fuel Inc., a Delaware corporation ("Mental Fuel", "we", "us" or "our"), collects, uses, discloses, retains and protects personal information through Skillcard: the Skillcard mobile application, its related webpages and support (the "Service" or "the App").
Skillcard is a self-tracking diary card for practicing skills. It is built so that your diary stays on your device unless you choose otherwise. Mental Fuel is the business or controller responsible for the personal information described here.
This Policy does not apply to the App Store, Google Play or other services that act under their own privacy policies.
2. Health information
What you record in Skillcard, such as moods, emotions, urges and the skills you practice, can reveal information about your mental health. We treat all diary content as sensitive personal and health-related information, whether or not a specific law classifies it that way. Section 13 is our Consumer Health Data Privacy Notice and forms part of this Policy.
3. Information we collect
Diary content you enter. Moods, emotions, urges, skills, practices, sleep, notes and the things you choose to track. By default this is stored only on your device.
Account information (optional). If you sign in with Apple or Google, we receive an account identifier, an email address (which may be a private relay address) and, if you share it, your name. Sign-in uses an account system shared with other apps from the same developer, so your email and name are also kept in that system's basic account record. You can use the diary without an account.
Backup (optional). If you turn on backup, a copy of your diary entries and your list of targets is stored in your account so you can restore it on another device.
Share links (optional). When you create a private link to share your diary card with someone you choose, we store a snapshot of the period and the fields you selected. Nothing else from your diary is included.
Purchases. If you subscribe, the App Store or Google Play processes the payment. We receive the subscription status (for example, trial, active, billing issue or expired), the product and renewal dates from the app store and our subscription provider, never your card details. If you pre-ordered on our website, we keep the email you paid with and the payment date so we can turn on your pre-order.
Notifications. If you allow notifications and have an account, we store a push token and your app language to deliver messages. Daily reminders are scheduled on your device.
App profile. To understand how the App is used and to improve it, we keep a profile for your installation: the name you enter in the App (optional), your app language, your answers to the onboarding questions (for example, what you want to track), your plan (free or Skillcard Pro) and simple usage counts, such as how many cards and practices you have completed, which skills you used most, how many days in a row you filled in your card, and whether reminders, backup or the app lock are on. It is linked to a random installation identifier and, if you sign in, to your account. It never includes your ratings, notes, targets, chain analyses or any other diary content.
Usage information. App events such as screens opened, onboarding steps, paywall views, purchases and the version of a screen you saw. These events are linked to a random installation identifier and, if you are signed in, to your account. They never include diary content. To measure which version of a screen works better, we also give our subscription provider your installation identifier and the versions of the screens you saw.
Technical information. Device platform, operating system, app version, language and time zone, and security events needed to keep the Service working and safe.
Support. Messages you send us and any information you choose to include. Please do not include diary content in support requests.
4. How we use information
We use personal information to:
- run the App and the features you choose to use: storing and restoring your diary, creating share links, delivering reminders and notifications;
- provide Skillcard Pro and manage subscriptions, trials, offers and restores;
- keep the Service secure and prevent abuse and fraud;
- respond to support, privacy and deletion requests;
- understand how the App is used so we can improve it, for example by comparing two versions of a screen, using limited events that never include diary content;
- comply with law and enforce our Terms.
5. Your diary is sensitive
We do not sell diary content, we do not use it for advertising, and we do not analyze it with artificial intelligence. It leaves your device only if you turn on backup or create a share link, and before either of these the App asks for your explicit consent. You can withdraw consent at any time by turning backup off and stopping your share links. Withdrawing consent applies from then on and may stop a feature that needs the information.
6. How we disclose information
We disclose personal information only as described here, as you direct, or as required by law:
- Service providers that host and operate the Service on our behalf: database, sign-in and server hosting; subscription management; push notification delivery; and Apple and Google for sign-in, app distribution, payments and notifications. They are contractually limited to providing their service and must protect the information;
- People you choose, when you create a share link;
- Legal and safety: when reasonably necessary to comply with law or legal process, or to protect the rights, safety and security of users, Mental Fuel or others;
- Corporate transactions: if Mental Fuel is involved in a financing, merger, sale or transfer of all or part of the Service, subject to this Policy and applicable law.
7. No sale, no advertising, no tracking
We do not sell personal information or consumer health data. The App shows no ads and contains no advertising or cross-app tracking tools. We do not track you across other companies' apps or websites, and we do not share personal information for targeted or cross-context behavioral advertising.
8. Security
Data sent between the App and our servers is encrypted in transit, and access to stored data is restricted to authorized personnel who need it. Your diary on your device is stored encrypted, with the key kept in your device's secure keychain. On iPhone, this encrypted data can be included in your device backups; on Android, device backups of the App are turned off, so use the in-app backup if you change phones. You can also lock the App with Face ID, Touch ID or your device's biometrics. No system is perfectly secure; protect your device and tell us promptly if you suspect unauthorized access. We investigate incidents and give notice where the law requires.
9. Retention and deletion
Diary content on your device stays until you delete it or remove the App. Backup data is kept while backup is on and your account exists. Share links stop working when they expire (after at most 14 days) or when you stop sharing. Raw usage events are kept for up to 180 days and then deleted; statistics derived from them may be kept in aggregated form. Your app profile is kept until you delete your data in the App or ask us to delete it.
When you delete your account, we delete your backup, share links, notification tokens, subscription status, Skillcard profile and app profile, and disconnect usage events from your account. When you delete all data in the App (Settings), we also delete your app profile. If you also use the same sign-in for another app from the same developer, that sign-in account remains for that app. Purchase records held by Apple, Google and our subscription provider are kept under their own policies and legal obligations. Deleting your account does not cancel a subscription; manage it in your app store account.
10. Your choices and rights
- Export: create a PDF of your recent diary card at any time (the last 7 days for free; longer periods and a CSV file of all entries with Skillcard Pro).
- Delete: delete all data on your device in Settings, and delete your account in the App (Settings, Delete account).
- Control sharing: turn backup on or off, and stop any share link at any time.
- Notifications: turn them off in the App or in your device settings.
Depending on where you live, you may also have rights to know what personal information we process, to access it and receive a portable copy, to correct it, to delete it, to withdraw consent, to object to or restrict certain processing, to opt out of sale, targeted advertising or profiling (we do none of these), and to appeal our decision on a request. We will not treat you differently for exercising a right.
To make a request, email us at the address below and say which right you are using and which account or email it concerns. We verify requests proportionately and respond within the period the law requires.
11. If you are in the EEA, the UK or Switzerland
We process personal information to perform our contract with you (to provide the App and Skillcard Pro), with your explicit consent (for diary content you back up or share, which you can withdraw at any time), for our legitimate interests in keeping the Service secure and improving it with limited usage events, and to meet legal obligations. You have the rights described in Section 10 and the right to complain to your local data protection authority.
12. California privacy notice
If you live in California, the categories in Section 3 correspond to identifiers, customer records, commercial information (subscriptions), internet or other electronic activity, inferences used to personalize the App, and sensitive personal information, including information concerning your health that you choose to record. We collect them from the sources in Sections 3 and 13 and use them for the purposes in Section 4. We disclose them only as described in Section 6, and retain them as described in Section 9. We do not sell them or share them for cross-context behavioral advertising, and we use sensitive personal information only to provide the Service you request. You may request to know, access, correct or delete your information and obtain a portable copy.
13. Consumer Health Data Privacy Notice
This Section is our consumer health data privacy policy under the Washington My Health My Data Act, Nevada law and other applicable U.S. state laws. "Consumer health data" generally means personal information that is linked or reasonably linkable to you and identifies or permits an inference about your past, present or future physical or mental health.
Categories and purposes. Diary content (moods, emotions, urges, skills, practices, sleep, notes and targets), only if you turn on backup or create a share link, used to provide those features; onboarding answers and usage counts in your app profile, used to personalize the App and understand how it is used; subscription status, which may reveal that you use a wellness app, used to provide Skillcard Pro; and health-related information you include in a support request, used to answer it.
Sources. Directly from you, from your use of the App, and from Apple, Google and our subscription provider for sign-in and purchases.
Sharing. With the service providers listed in Section 6 to operate the Service, with the people you choose through a share link, and as required by law. We do not sell consumer health data and we do not share it with affiliates for their own purposes.
Consent. We collect and share consumer health data only with your consent or as necessary to provide a feature you requested. Before backup or a share link, the App asks for your explicit consent. We will not collect a new category of consumer health data or use it for a materially different purpose without updating this Section and asking for your consent first.
Your rights. You may confirm whether we collect, share or sell your consumer health data, access it and receive a list of the third parties or affiliates it was shared with, withdraw consent, request deletion, and appeal a refusal. Email us with "Consumer Health Data Request" in the subject line; to appeal, use "Health Data Appeal".
Geofencing. We do not use geofences around health-care locations and we do not use precise device location.
14. Children
Skillcard is intended for adults aged 18 and over. We do not knowingly collect information from children. If you believe a child has provided us with information, contact us and we will delete it.
15. International processing
Skillcard is available in many countries. Mental Fuel is based in the United States, and our service providers may process information in the United States and other countries. Where this happens, we use the safeguards required by applicable law.
16. Changes to this Privacy Policy
We may update this Privacy Policy. We will show the date of the latest version at the top and, for significant changes, let you know in the App. If a change materially affects how we use or share consumer health data, we will ask for your consent where the law requires.
17. Contact
Mental Fuel Inc., 1012 12th Street, Cody, Wyoming 82414, USA
Questions or requests: team@calmerry.com