Privacy Notice

The Mystic's Path is operated by Alida McDaniel (trading as The Mystic's Path). We are the data controller for the personal data described in this notice, which means we decide why and how it is processed.

• Account data — email address, login credentials (stored hashed by our authentication provider), display name and time zone. Used to create and secure your account and to deliver the Service. Legal basis: performance of our contract with you.
• Journey content — daily check-ins, mood and intuitive clarity ratings, journal reflections, weekly reviews and quest progress. Used to provide your personalised path, progress tracking and exports. Legal basis: performance of our contract.
• Communication preferences — reminder settings and any support messages you send us. Used to send the reminders you ask for and to answer your questions. Legal basis: contract and consent for optional emails.
• Technical data — IP address, device and browser information, and basic usage or error telemetry. Used for security, fraud prevention, debugging and improving the product. Legal basis: our legitimate interest in a secure, reliable service.

Payment card details are collected and processed directly by Paddle; we never see or store them.

• Service providers / subprocessors — hosting, database, authentication, email delivery and error monitoring providers, acting on our instructions.
• Merchant of Record — Paddle.com, for the sale of the membership, subscription management, payments, tax compliance and invoicing.
• Professional advisers — legal and accounting advisers where necessary.
• Authorities — where we are required to disclose by law or to protect legal rights.

We do not sell your personal data.

Our providers may process data in the United States and other countries. Where data leaves the UK or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

We keep account and journey data for as long as your account is active. If you delete your account, your profile, check-ins, journal entries and progress are deleted from our systems. Limited records we must keep for legal, tax or fraud-prevention reasons are retained for as long as the law requires, then deleted or anonymised.

Depending on where you live, you may have the right to access your data, correct it, delete it, restrict or object to processing, receive it in a portable format, and withdraw consent at any time. You can export your journal data and delete your account yourself from your account page, or contact us through the support link there. We respond within one month. If you are in the UK or EEA you also have the right to complain to your local supervisory authority.

We use appropriate technical and organisational measures, including encryption in transit, encrypted storage, row-level access controls in our database and restricted administrative access, to protect your data.

We use strictly necessary cookies and local storage to keep you signed in and to keep the site secure; these cannot be switched off without breaking the Service. Paddle sets cookies during checkout to process your order. We do not use advertising cookies. You can clear or block cookies in your browser settings, though sign-in will stop working.

For any privacy question, or to exercise your rights, contact Alida McDaniel through the support link on your account page.