Privacy Policy

MinTour LLC ("MinTour," "we," "us," or "our") operates the MinTour mobile application and related services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our Service. MinTour is a personal development and wellness platform designed for athletes, students, professionals, and veterans.

This Privacy Policy applies to all users of the MinTour Service, including individual users, students enrolled through institutional partnerships, and members of organizations that have entered into agreements with MinTour. If you are a student at a partnering educational institution, additional protections under the Family Educational Rights and Privacy Act (FERPA) apply to your data as described in Section 5 of this Policy.

2.1 Information You Provide

• • Account information: name, email address, phone number
• • Profile information: role, sport, career category, focus areas, core values
• • Schedule information: wake time, sleep time, blocked times
• • Mission completion data, reflections, and missed mission explanations
• • Appointment booking information when using the provider search feature
• • Payment information processed securely through Stripe

2.2 Information Collected Automatically

• • Device identifiers and push notification tokens
• • App usage data, session duration, and feature interactions
• • Login timestamps and streak data
• • XP points earned and redeemed

2.3 Health and Wellness Information (PHI Notice)

When you use MinTour's provider search feature or book appointments with licensed psychologists or psychiatrists through the Service, certain information you provide may constitute Protected Health Information (PHI) under the Health Insurance Portability and Accountability Act (HIPAA). MinTour handles all PHI in accordance with HIPAA requirements. Our infrastructure provider (Supabase) has executed a Business Associate Agreement (BAA) with MinTour. MinTour does not sell PHI under any circumstances.

• • To provide, personalize, and improve the MinTour Service
• • To generate AI-powered daily missions tailored to your profile and schedule
• • To track your progress, focus scores, XP, and identity growth
• • To send push notifications and accountability partner updates
• • To facilitate provider search and appointment booking
• • To process payments and XP redemption transactions
• • To communicate service updates and respond to support requests
• • To comply with legal obligations and enforce our Terms of Service

MinTour does not use your personal information, student records, or PHI for advertising purposes. MinTour products are ad-free.

4.1 Service Providers

We share information with trusted third-party service providers who assist in operating the Service. All providers are bound by confidentiality obligations and, where applicable, have executed BAAs with MinTour:

4.2 Institutional Partners

If you access MinTour through an educational institution or organization partnership, MinTour may share aggregate, de-identified engagement data with that institution for program administration purposes. MinTour will not share individual student records with institutions without the student's explicit consent, except as required by FERPA or other applicable law.

5.1 FERPA Compliance

MinTour complies with the Family Educational Rights and Privacy Act (FERPA), 20 U.S.C. § 1232g, and its implementing regulations, 34 C.F.R. Part 99. When MinTour operates as a school official under FERPA with a legitimate educational interest, it will handle student education records in accordance with FERPA requirements.

5.2 Student Rights Under FERPA

• • The right to inspect and review education records maintained by MinTour
• • The right to request amendment of records believed to be inaccurate
• • The right to consent to disclosure of personally identifiable information
• • The right to file a complaint with the U.S. Department of Education

5.3 Data Ownership

Student data collected through institutional partnerships is owned by the educational institution and/or the student, not by MinTour. MinTour serves as a data processor only. Upon termination of an institutional agreement, all student data will be returned to the institution or deleted within 30 days, as directed by the institution.

MinTour implements industry-standard security measures including encryption of data in transit (TLS 1.2+) and at rest, access controls limiting data access to authorized personnel only, regular security reviews, and HIPAA-compliant infrastructure for PHI. In the event of a data breach, MinTour will notify affected users and applicable regulators within the timeframes required by law.

• • Access: Request a copy of your personal data
• • Correction: Request correction of inaccurate data
• • Deletion: Request deletion of your account and associated data
• • Portability: Request your data in a portable format
• • Opt-out: Opt out of non-essential communications at any time
• • PHI Rights: For PHI, you have additional rights under HIPAA including the right to restrict certain uses and disclosures

To exercise any of these rights, contact us at legal@mintour.app.

MinTour LLC
legal@mintour.app
mintour.app