Privacy Policy

Who we are

Everwell Minds operates everwellminds.com, a paid online membership community for Law of Assumption wellness practice. This policy explains what personal information we collect, why we collect it, and what you can do about it.

Information you give us

When you create an account we collect your email address, a display name, and a password (which is stored only as a secure one-way hash — we can never see it).

As you use the community you may add a username, profile photo, cover image, bio, and privacy preferences, and you create content such as posts, comments, messages, challenge check-ins, and course progress.

If you contact us through a form on the site, we keep what you send — your name, email, and message — so we can reply.

Information collected automatically

We store essential cookies to keep you signed in. These are required for the site to work and are not used for advertising.

Our hosting and database providers keep standard technical logs, such as IP address, browser type, and timestamps, for security and reliability.

We do not sell your personal information, and we do not use it for third-party advertising.

Payments

Membership payments are processed by Stripe. Your card details go directly to Stripe and are never sent to or stored on our servers.

We keep a record of your subscription status, tier, and billing period so we know what access your account should have. Stripe's own handling of your data is governed by their privacy policy.

Service providers we use

We deliberately rely on established providers with dedicated security teams rather than building these things ourselves. Your card details are the clearest example: they go straight to Stripe and never touch our servers, so there is nothing for us to lose.

Supabase — database, authentication, and file storage for your account and content.

Vercel — hosting and delivery of the website.

Stripe — payment processing and subscription billing.

Resend — sending transactional email such as verification codes and password resets.

These providers process data on our behalf and only for the purposes described here. We name them because you have a right to know who handles your information, and because we would rather you be able to check them than take our word for it.

How we use your information

To create and run your account, show you the community, and deliver what your membership includes.

To send transactional email you need — verification codes, password resets, and important account notices.

To keep the community safe: enforcing our guidelines, reviewing reports, and preventing abuse.

To fix problems, improve the platform, and meet our legal and tax obligations.

What other members can see

Your display name, username, profile photo, bio, and the content you post are visible to other members. Your email address and your membership tier are never shown to other members.

You control additional visibility from your profile settings, including whether your profile is private, whether you appear in the member directory, and who may message you.

Coaching conversations

Your 1:1 conversations with a coach are private between you and that coach. Other coaches cannot read them, and other members never can.

An administrator can access coaching conversations in limited circumstances — to cover for a coach who is away, to hand your care over to a new coach, or to investigate a safety concern or report. Every time an administrator opens or replies in a coaching conversation, we record who did so and when.

If an administrator replies while covering for your coach, that message is clearly labelled with the name of the person who actually wrote it. We will never present a message to you as coming from your coach when it did not.

You can ask us at any time for a record of who has accessed your coaching conversations, and we will provide it.

Keeping your information

We keep your account information for as long as your account exists. If you delete your account, we remove your profile and personal content, though some records may be retained where we are legally required to keep them, such as payment and tax records.

Backups and logs are kept for a limited period and then overwritten in the normal course of operation.

Your rights and choices

You can view and update most of your information directly in your profile settings at any time.

You can ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete your account and data. Contact us and we'll help.

Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA, including the right to object to certain processing or to lodge a complaint with your local regulator.

Children

Everwell Minds is not intended for children. You must be at least 18 years old to create an account. If we learn that we have collected information from a child, we will delete it.

Security

Everything you send travels over an encrypted connection, and our providers encrypt data at rest. Passwords are stored only as one-way hashes — we cannot read yours, and neither can anyone who obtained a copy of our database.

Access is enforced at the database itself, not just in the app. Every table carries rules that decide what each account may read or change, so a member can only ever reach their own data even if a page or link were tampered with.

Private uploads, including anything shared in direct messages, are stored in non-public storage and served through short-lived links, so a file's address alone is not enough to open it.

Administrative tools are restricted to staff accounts and checked on the server on every request. Members cannot backdate posts, alter engagement counts, or change their own permissions — those fields are protected by the database rather than only hidden in the interface.

No system is perfectly secure, and we would rather say so plainly than promise otherwise. We review our security regularly, fix issues promptly, and if a breach ever affected your personal information we would tell you and the relevant regulator without undue delay.

Changes to this policy

If we make meaningful changes to this policy, we'll update the date below and, where the change is significant, let members know inside the platform.