Privacy Policy
Effective Date: January 1, 2026
Last Updated: July 10, 2026
THE CODDE GROUP LLC dba "RESTORED MINDS" (the "Company," "we," "us," or "our") respects the privacy of the users of its website at www.restoredminds.com, its mobile and web application, and the services provided therein (collectively, the "Service"). This Privacy Policy explains what information we collect, how we use and protect it, and the rights you have. Please also review our Terms of Use, which govern your use of the Service and are incorporated by reference.
By using the Service, you agree to this Privacy Policy and to the collection and use of information as described here. The Service is intended only for individuals 18 years of age or older (see Section 11). You always have the ability to opt out, as described below.
We collect as little information from you as possible, for specific and identifiable purposes, and we commit to using it only as described in this policy.
1. Who We Are
The Service is operated by The Codde Group LLC, a California limited liability company, doing business as Restored Minds. For privacy purposes, we act as the "controller" (under GDPR/UK-GDPR) or "business" (under California law) responsible for your information, except where we act as a processor or service provider.
Contact: support@restoredminds.com · The Codde Group LLC dba Restored Minds, 2973 Harbor Blvd. #237, Costa Mesa, CA 92626.
2. Information We Collect
We collect only the limited information needed to operate the Service and to make it better tailored to the people who use it:
Account information: your email address and the time zone you set.
Assessment data: your responses to our structured assessment (selected from defined options).
Check-in data: your self-reported, structured check-in responses as you use the app.
Subscription/billing information: processed by Stripe. We do not store full payment-card details; Stripe handles payment data under its own terms and privacy policy, with sensitive information transmitted using SSL encryption.
Information you submit on the website: such as your name and email when you contact us, comment, request information, sign up for the newsletter, or place an order.
Technical and usage data: standard server information such as browser type, operating system, and IP address, and analytics data on our website (see Section 8).
We do not collect or store free-form text within the app. The app does not ask you to type, and does not store, free-form descriptions of your experiences. Your in-app inputs are limited to structured, predefined responses.
As a general matter, no personally identifiable information is automatically collected simply by visiting the website; certain non-personal technical information is recorded by the standard operation of our servers to enhance your experience.
3. How We Use Your Information
We use your information to:
Provide, operate, and maintain the Service;
Generate personalized educational content, and surface the next meditation, emotional-release exercise, and daily plan that fit your self-reported inputs;
Send you sign-in codes and essential service messages (billing, security, and account notices);
Process your subscription and payments through Stripe;
Send newsletters and marketing communications, including content segmented by the theme you report experiencing, where you have consented (you may opt out at any time — see Section 10);
Contact you about changes to the Service, new offerings, and special offers, and to request occasional feedback;
Maintain the security and integrity of the Service, prevent fraud and abuse, resolve disputes, enforce our Terms, and comply with legal obligations.
Personally identifiable information is never sold or leased to third parties. We do not store credit-card information except as necessary to complete a transaction.
4. AI Processing and Anonymization
The Service uses third-party artificial-intelligence providers through OpenRouter, which may route requests to Anthropic models, to generate individualized educational prompts and content from your structured inputs.
Personalized content is produced using anonymized data only. Your name, email address, and any other personally identifying information are never included in the prompts sent to our AI providers. We design our AI requests to exclude direct identifiers and to send only the structured data needed to generate the requested educational output.
User data sent to our AI providers is not used to train future AI models.
We rely on contractual and policy commitments from Anthropic and OpenRouter regarding the handling of data submitted through their services.
5. How We Share Information
We do not sell, rent, or trade your personal information. We share information only with the service providers we rely on to operate the Service, and only to the extent needed to provide it. These include:
Stripe — payment processing;
OpenRouter (AI request routing) and, where requests are routed by OpenRouter, Anthropic (AI model provider) — AI content generation (anonymized data only, per Section 4);
Our email delivery provider — sign-in codes, service messages, and newsletters.
Our hosting and infrastructure providers;
Analytics and advertising providers (such as Google and Meta/Facebook) (see Section 8).
We restrict how our service providers may use your information; they are not permitted to sell it or share it with others. We may also disclose information where required by law, in response to a court order or legal process, to protect the rights, property, or safety of the Company or others, to investigate fraud or suspected illegal activity, or in connection with a merger, acquisition, or sale of assets (in which case your information may be among the transferred assets, and you will be notified by email and/or prominent notice on our website for 30 days).
6. International Data Transfers
We are based in the United States, and we and our service providers may process your information in the United States and other countries whose data-protection laws may differ from those in your country. For EU/EEA, UK, and Swiss residents, this means we may transmit your data across international borders in reliance on appropriate safeguards (such as the European Commission's Standard Contractual Clauses) or another lawful transfer mechanism.
7. Data Retention and Access
We retain your information for as long as your account is active or as needed to provide the Service, and as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. If your information changes, or you no longer want the Service, you may correct, amend, delete, or deactivate it by contacting support@restoredminds.com. We will respond to access and related requests within 30 days.
8. Cookies, Analytics, and Advertising
Cookies are small pieces of information stored on your device for record-keeping. Most browsers accept cookies by default; you can reset your browser to refuse cookies, though some parts of the Service may not function properly as a result.
Google Analytics. We use Google Analytics, including Advertiser Features such as Remarketing, Google Display Network Impression Reporting, and Demographics and Interest Reporting. We and third-party vendors use first-party cookies (such as the Google Analytics cookie) and third-party cookies together to gather data about activity on our Service — for example, to remind you to complete a checkout you abandoned, and to reach prior visitors with relevant messaging. You can opt out via Google's Ad Settings or the Network Advertising Initiative opt-out page.
Facebook/Instagram (Meta). As advertisers on Facebook and Instagram, we (not Meta) may collect content or information from users and use it as described in this policy. We abide by Meta's data-use restrictions, including not transferring ad data to ad networks or data brokers and not using ad data to build user profiles.
9. Security
The security of your personal information is important to us. We follow generally accepted industry standards to protect information both during transmission and once received, including SSL encryption for sensitive data entered on order forms hosted by our payment provider. However, no method of transmission over the Internet, or method of electronic storage, is 100% secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials and sign-in codes confidential.
10. Marketing Communications and Your Choices
You consent to marketing communications by checking the consent box when you provide your email at the assessment opt-in or account sign-up, and you can opt out at any time by clicking "unsubscribe" in the footer of our emails or by contacting support@restoredminds.com. Even if you opt out of marketing, we will still send essential service messages (such as sign-in codes and billing notices), which are not promotional.
11. Your Privacy Rights (General)
You own your personal information and have rights to it, including the right to: withdraw consent for marketing; request a copy of the information we hold about you; be forgotten (have your data deleted or ask us to stop using it); correct inaccurate information; and object to direct marketing and profiling. To exercise any right, contact support@restoredminds.com. We will comply within 30 days and may need to verify your identity first.
12. California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have the right to: know what personal information we collect, use, and disclose; access a copy of it; correct inaccuracies; delete it (subject to legal exceptions); opt out of the "sale" or "sharing" of personal information (we do not sell or share your personal information as defined under California law); limit the use of sensitive personal information; and non-discrimination for exercising your rights. To exercise these rights, contact support@restoredminds.com. You may use an authorized agent, subject to verification. We will not discriminate against you for exercising any right.
13. EU/UK Privacy Rights (GDPR / UK-GDPR)
We strive to fully comply with the EU General Data Protection Regulation (EU 2016/679) and the UK-GDPR. If you are located in the EEA, UK, or Switzerland, you have the rights of: access; rectification; erasure ("right to be forgotten"); restriction of processing; data portability; objection to processing; and withdrawal of consent at any time (without affecting prior processing). You also have the right to lodge a complaint with your local supervisory authority.
Legal bases for processing. We process your personal data on the following lawful bases:
Performance of a contract — to provide the Service you subscribe to (account, assessment, personalized content, billing);
Consent — for marketing communications and non-essential cookies (you may withdraw consent at any time);
Legitimate interests — to operate, secure, and improve the Service, prevent fraud, and run analytics, balanced against your rights;
Legal obligation — to comply with applicable laws.
To exercise GDPR rights, email support@restoredminds.com with the subject line: "I hereby [withdraw my consent / request erasure / object] to my data being processed under the GDPR," and include your name in the body. Upon receipt, we will follow the procedures set forth in GDPR Articles 12, 15, 17, 18, and/or 21. Note that exercising these rights does not entitle you to refunds beyond any applicable deadline. Pursuant to GDPR Articles 12 and 15, upon request we will provide information regarding the personal data we process, including the purposes of processing; the categories of data; the recipients; the storage period; your rights to rectification, erasure, restriction, and objection; the right to lodge a complaint with a supervisory authority; the source of the data where not collected from you; and the existence of any automated decision-making.
We do not process special-category data (such as data revealing racial or ethnic origin, political opinions, religious beliefs, genetic or biometric data, health, or sexual orientation) unless you have given explicit consent or volunteered it without solicitation.
14. Children's Privacy
The Service is intended only for individuals 18 years of age or older, and we do not provide services or sell products to children. We do not knowingly collect personal information from anyone under 18. If you are 13 or younger, we request that you not submit any personal information to us. If we learn that we have collected information from a person under 18, we will delete it. If you believe a minor has provided us information, contact support@restoredminds.com.
15. Links to External Sites
We are not responsible for the content or privacy practices of third-party websites linked to or from the Service, or for information you share with them. Review each site's privacy policy before disclosing information.
16. Changes to This Privacy Policy
We may revise this Privacy Policy from time to time. If we make material changes — particularly any that reduce your privacy rights — we will update the Last Updated date and notify you using your contact information and/or by prominent notice on our website. Your continued use of the Service after changes take effect constitutes acceptance.
17. Your Acceptance of These Terms
By using the Service, you accept the policies and practices described in this Privacy Policy. If you do not agree, please do not use the Service. For any questions, complaints, or concerns, contact us at support@restoredminds.com or by mail at The Codde Group LLC dba Restored Minds, 2973 Harbor Blvd. #237, Costa Mesa, CA 92626.