Last updated: July 5, 2026
For questions, privacy requests, or support, contact: info@lumosignite.com
Mindivate is a mobile wellness app provided by Lumos Ignite AB, Sweden ("Mindivate", "we", "us", or "our").
Mindivate helps users work with anxiety-related avoidance, habits, self-reflection, and gradual challenge exercises. The app includes CBT-inspired exercises, mood and anxiety logging, LSAS self-assessments, progress tracking, subscriptions, local reminders, and an optional AI coach called Lumi.
We are the controller of the personal data we decide to collect and use through Mindivate. Some third-party providers process data for us as service providers or processors.
Contact:
This Privacy Policy applies when you use the Mindivate mobile app, visit our Mindivate web pages, contact us, or interact with Mindivate support.
This policy does not apply to third-party websites or services that we do not control, such as Apple App Store, Google Play, Google, RevenueCat, Expo, or Findahelpline. Those services have their own privacy policies.
Mindivate is a wellness and self-help app. It is not a medical device, healthcare provider, emergency service, therapist, psychologist, doctor, or clinical mental health service.
Mindivate does not diagnose, treat, cure, or prevent any disease or mental health condition. The app's exercises, assessments, AI responses, and progress insights are for general wellness support and reflection only.
If you may harm yourself or someone else, feel unsafe, or are in crisis, do not rely on Mindivate. Contact emergency services, a crisis line, a qualified healthcare professional, or someone you trust immediately.
We collect the data needed to provide Mindivate, keep accounts secure, personalize the experience, manage subscriptions, improve the app, and comply with legal obligations.
When you create an account or sign in, we may collect:
If you use email/password sign-in, Firebase Authentication handles authentication. We do not store your password directly.
During onboarding, you may provide:
Mindivate may store wellness data that you choose to enter or generate through use of the app, including:
This information can be sensitive because it may relate to mental wellbeing. You should only enter information you are comfortable processing through the app.
Mindivate includes an optional AI coach called Lumi. Lumi is available only if you have access to the feature and explicitly accept the AI notice in the app.
When you use Lumi, the following information may be sent to Google's AI service through Firebase AI Logic to generate a response:
Mindivate does not store Lumi chat messages in our Firestore database in the current app implementation. The conversation is held in app memory during the session and is gone when the chat is cleared, the app session ends, or the app state is reset. Your device may store a local consent flag and a local daily usage counter.
Mindivate does not use your Lumi messages or wellbeing context to train Mindivate-owned AI models. Google's processing of prompts and responses is governed by the applicable Google, Firebase AI Logic, Gemini API, and Google Cloud terms. Google may process and temporarily log prompts, responses, and technical metadata for purposes such as providing the service, safety, abuse prevention, reliability, and legal compliance.
Do not use Lumi for emergencies. Do not include information about other people unless you have the right to do so.
If you purchase or restore a subscription, payment and billing are handled by Apple App Store or Google Play. RevenueCat helps us verify your subscription status.
We may receive or process:
We do not receive or store your full payment card details.
We use Firebase Analytics, Firebase Crashlytics, Firebase App Check, Remote Config, and related Firebase services. These may process:
We intentionally avoid logging free-text notes, chat contents, raw anxiety scores, or LSAS scores into analytics events.
Mindivate uses local scheduled reminders through Expo Notifications. The current app implementation does not collect remote push notification tokens for our server.
The app may store local-only values on your device, such as:
Local device data may remain on your device until you clear app data, delete the app, or the app removes it.
If you contact us, we may process:
Mindivate does not intentionally collect:
Mindivate does not show third-party ads and does not use your data to build advertising profiles.
We use personal data for the following purposes:
| Purpose | Examples of data used |
|---|---|
| Create and secure your account | Account data, authentication status, App Check |
| Provide core app features | Profile, challenges, completions, stats, local preferences |
| Personalize exercises and recommendations | Focus areas, avoidance patterns, experience level, completions, mood logs, LSAS category |
| Save progress | Points, streaks, weekly activity, achievements |
| Provide mood logging and self-reflection | Mood logs, notes, problem areas |
| Provide LSAS self-assessment history | LSAS answers, total score, sub-scores, timestamps |
| Provide Lumi AI coach | Chat message, current session history, selected profile and wellbeing context |
| Manage subscriptions | Store purchase data, RevenueCat entitlement status |
| Send local reminders | Device notification permission and local schedules |
| Improve stability and performance | Crash reports, technical logs, diagnostics |
| Understand app usage | Analytics events and aggregate usage patterns |
| Respond to support requests | Email address, message content, account/support context |
| Prevent abuse and protect systems | Authentication data, App Check, rate limits, security logs |
| Comply with law | Records required for legal, tax, accounting, consumer, or regulatory obligations |
Where the GDPR or UK GDPR applies, we rely on the following legal bases:
You may withdraw consent at any time by disabling the relevant feature, deleting data, deleting your account, or contacting us at info@lumosignite.com. Withdrawal does not affect processing that occurred before withdrawal.
We do not sell your personal data. We do not share personal data for targeted advertising.
We may share personal data with:
Mindivate uses the following services:
| Service | Provider | Purpose |
|---|---|---|
| Firebase Authentication | Google LLC | Account sign-in and authentication |
| Google Sign-In | Google LLC | Optional sign-in with Google |
| Sign in with Apple | Apple Inc. | Optional sign-in with Apple |
| Cloud Firestore | Google LLC | User profile, wellness logs, progress, and app data |
| Firebase Analytics | Google LLC | Usage analytics and aggregate product improvement |
| Firebase Crashlytics | Google LLC | Crash reports and diagnostics |
| Firebase App Check | Google LLC | App integrity and abuse prevention |
| Firebase Remote Config | Google LLC | Runtime configuration and feature control |
| Firebase AI Logic / Gemini | Google LLC | Optional AI coach responses |
| RevenueCat | RevenueCat, Inc. | Subscription entitlement management |
| Apple App Store | Apple Inc. | iOS subscriptions, payments, refunds, and account billing |
| Google Play | Google LLC | Android subscriptions, payments, refunds, and account billing |
| Expo / EAS Update | Expo / Infinite Red, Inc. | Over-the-air app updates and update delivery metadata |
| Expo Notifications | Expo / platform notification services | Local notification functionality |
| Findahelpline | Third-party website | External crisis/support resource link |
Third-party privacy policies:
We are based in Sweden and aim to store Firestore app data in the European region, currently europe-west1 where configured for the Firebase project.
Some service providers, including Google, Apple, RevenueCat, and Expo, may process data in the United States or other countries. Where required, we rely on appropriate safeguards such as data processing agreements, standard contractual clauses, adequacy decisions, or equivalent legal transfer mechanisms.
We use reasonable technical and organizational measures to protect personal data, including:
No system is perfectly secure. We cannot guarantee absolute security.
If a personal data breach is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority, where required, without undue delay and where feasible within 72 hours after becoming aware of it. If the breach is likely to result in a high risk to you, we will also notify you directly where required by law.
We keep personal data only for as long as needed for the purposes described in this policy, unless a longer period is required or permitted by law.
Typical retention:
When you delete your Mindivate account in the app, the app deletes your user document and known user subcollections in Firestore, including stats, completions, custom challenges, mood logs, coach message documents if any exist, LSAS results, and achievements, and then deletes your Firebase Authentication account. Some local-only device settings or caches may remain until you clear app data or delete the app.
Backups, logs, and third-party records may persist for a limited period as required for security, legal, disaster recovery, or compliance purposes.
Depending on where you live, you may have rights to:
To exercise your rights, contact info@lumosignite.com.
If you are in the EU/EEA, you may contact your local data protection authority. In Sweden, the authority is Integritetsskyddsmyndigheten (IMY): https://www.imy.se
We will respond within the time required by applicable law. For GDPR requests, this is normally within 30 days. For certain US state requests, response periods may differ.
For ordinary support requests, we aim to respond within 48 hours, but response times may vary depending on request volume and complexity.
Some US state laws provide additional rights for personal data and consumer health data.
Mindivate may process wellness information that could be considered "consumer health data" under certain laws, including:
Sources of consumer health data:
Purposes:
Sharing:
You may request access, deletion, correction, or withdrawal of consent by contacting info@lumosignite.com. If we deny a request, you may appeal by replying to our decision email and stating that you want to appeal.
If California privacy law applies, the categories of personal information we may collect include:
We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We do not use sensitive personal information to infer characteristics for purposes other than providing and improving Mindivate.
Mindivate is not intended for children under 13. We do not knowingly collect personal data from children under 13.
If you are under the age of majority where you live, you may use Mindivate only with permission from a parent or legal guardian.
If you believe a child under 13 has used Mindivate or provided personal data, contact info@lumosignite.com and we will take appropriate steps to delete the data.
Mindivate uses automated processing to personalize recommendations, show progress, calculate stats, and generate optional AI coach responses. These features do not make legal decisions about you or decisions that produce similarly significant effects.
AI-generated responses may be incomplete, inaccurate, or inappropriate for your situation. Use your own judgment and seek professional help where needed.
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date. For material changes, we may provide notice in the app or by other reasonable means.
Continued use of Mindivate after an updated policy becomes effective means you acknowledge the updated policy.
For privacy questions or requests:
Email: info@lumosignite.com