Privacy Policy

Who we are

Mirror Mindset Performance (“we”) provides mental performance training for young athletes, parents, and coaches through this app. We are based in the United States. Questions or requests about this policy — including to review or delete a child's information — can be sent through the contact form on the Resources page or to coach@mirrormindsetperformance.com.

What we collect

Account information (email address, password, the role you choose, and a first name or nickname), any facility or team you join, and the content you create: check-ins, journal entries, program answers, identity statements, notes, at-bat logs, visualization scripts, team messages, and settings. We do not collect precise location, contacts, or advertising identifiers, and we do not track you across other apps or websites.

Mirror Score research (only if you opt in)

On the Mirror Score, a parent (or an athlete 13 or older taking it on their own) can tick a separate box to share the athlete's answers anonymously. If you do, we keep only the answer choices, the athlete's age and sport, and the date. We don't keep a name, email, IP address or anything that links those answers to you, your athlete or an account. We use them only to test and improve the Mirror Score's questions (for example, checking that each skill's questions agree and seeing average scores by age), and we may share overall results, never individual answers. The box is unticked unless you tick it, and not ticking it changes nothing about your results.

How we use it

Only to run the app: saving your progress to your account, syncing it across your devices, powering the team and family features you choose to join, and generating AI coaching responses. We do not sell or “share” personal information, and we do not use it for targeted or third-party advertising.

AI features

Journal entries, questions to the AI coach, and related context are processed by Anthropic's Claude API to generate coaching responses. This content is sent for processing only, handled under Anthropic's commercial data terms, and is not used to train AI models.

Children's privacy (COPPA)

Mirror Mindset is designed to be used by young athletes with adult involvement. A child under 13 may use the app only through an account created and managed by a parent, legal guardian, or a facility acting with the parent's authorization, who provides consent to our collection of the child's information. We collect from a child only what is needed to provide the app, never require more than is necessary to participate, and never use a child's information for advertising or sell it. At any time, a parent or guardian may review the personal information we have collected from their child, ask us to delete it, and refuse further collection (which may mean the child can no longer use the app) by contacting us. If we learn we collected a child's information without the required consent, we delete it.

Facilities & teams

If an athlete joins a facility edition or a team code, that facility, its coaches, and linked parents can see limited activity signals for their athletes — check-in dates, streaks, consistency, and completion marks — to support the athlete. Coaches of a team the athlete joined also see the mood the athlete picks when they check in (for example “Steady” or “Nervous”); the check-in screen tells the athlete this. Parents and facilities do not see mood. No one but the athlete sees journal entries, reflections, or AI coaching responses. Facilities that offer the app to their athletes are responsible for obtaining any parental permissions their program requires.

Journals stay private

Journal entries and AI reflections are visible only to the account that wrote them. Team and family features share activity signals only — never journal contents. The same is true of the at-bat log and the visualization scripts an athlete writes: only the athlete sees them. Visualizations are read aloud by the device's own voice; the text is not sent to a voice service. We do not monitor what you write. As a safety feature, the app checks writing for language that suggests self-harm and, if found, shows that athlete crisis resources (such as the 988 Suicide & Crisis Lifeline). This is an automated prompt shown only to the athlete — it does not notify anyone else, is not surveillance, and is not an emergency-response service.

Where data lives & our service providers

Account and app data are stored and processed in the United States by the following service providers, each engaged only to help us run the app: Supabase (database and authentication), Vercel (hosting and privacy-focused, cookieless analytics), Stripe (payment processing — card numbers are entered on Stripe's systems and never touch ours), Resend (transactional email, such as welcome and parental-consent emails), and Anthropic (AI coaching responses, processed under commercial terms that prohibit using the content to train AI models). Some data is also cached on your own device so the app works offline.

Cookies & analytics

We use privacy-focused, cookieless analytics (Vercel Analytics) to understand anonymous, aggregate usage — which features are used and whether things are working — so we can improve the app. The app also stores small amounts of data on your device to keep you signed in and to work offline. We do not use advertising cookies and do not track you across other apps or websites. You can limit storage in your browser settings, though some features may not work as well.

Security

We use reasonable measures to protect your information, including encryption in transit and access controls that limit who can see what — for example, coaches and parents can never access journal contents. No system is perfectly secure, but we work to protect this sensitive information and will notify affected users and authorities of a data breach as required by law.

How long we keep it (retention policy)

We keep personal information only as long as it serves the athlete, and never indefinitely:

• Account and training data (check-ins, journal entries, program answers, streaks): kept while the account is active, so the athlete's history and progress work. Deleted when the account is deleted — in-app or by email — and inactive accounts are deleted after 24 months of no sign-ins, with a warning email first where we have an address.
• Under-13 consent requests: if a parent doesn't respond, the child's username and the parent's email are deleted after 14 days. If a parent declines, deletion is immediate.
• Consent records (method, notice version, parent name, timestamps): kept while the account exists plus 3 years, as the legally required record that consent was obtained.
• Team chat: messages auto-prune on a rolling window; nothing in chat is kept long-term.
• Payment records: subscription status and Stripe customer IDs kept as required for tax, billing, and dispute obligations. Card numbers never touch our systems.
• Emails and support threads: retained up to 24 months, then deleted.

Deletion means deletion: the account's cloud record, push registrations, and auth identity are removed together, and backups age out on our infrastructure providers' standard cycles.

Sharing

We share data only with the service providers named above as needed to run the app, or if the law requires it. Team and family codes share the limited activity signals described above with the people you give the code to. We do not sell personal information.

Business transfers

If Mirror Mindset is ever involved in a merger, acquisition, or sale of its assets, your information may transfer to the successor as part of that transaction. We will require the successor to honor this Privacy Policy, or we will notify you of any material change.

Links to other apps & sites

The app may link to apps and websites we don't control — for example, a facility's own app, a book retailer, or our social media. We are not responsible for their content or privacy practices; review their policies before using them.

Posting to our own social accounts

We use the official tools of YouTube (YouTube API Services), Instagram, Facebook and TikTok to publish our own videos to our own accounts on a schedule. Only Mirror Mindset Performance uses this; it does not connect to app users' accounts or read their data. Our use of YouTube API Services is subject to the YouTube Terms of Service and the Google Privacy Policy.

Your privacy rights

You can access, correct, or delete your information, disconnect team or family links, and sign out at any time. Depending on where you live (for example, California under the CCPA/CPRA), you may have rights to know what we collect, to delete or correct it, to opt out of any sale or sharing (we do none), and not to be treated differently for exercising those rights. We do not sell or share the personal information of anyone, including minors under 16. To exercise a right, use the contact form.

Not medical care

The app supports mental performance and is not medical or mental-health treatment, diagnosis, or a crisis service. If something feels heavier than sports stress, contact a doctor, school counselor, or licensed professional. If you or your athlete may be in danger, call or text 988 (Suicide & Crisis Lifeline), or 911 for an immediate emergency.

Changes

If this policy changes in ways that matter, we will update the date above and note the change in the app.

Questions: coach@mirrormindsetperformance.com · Privacy Policy · Terms of Use · Delete your account