Privacy Policy

Who we are

My Easy Therapy is operated by Michaela Dunbar Wellness Consultancy, a company based in Dubai, United Arab Emirates ("we", "us", "our"). We are the data controller for the personal information you provide to us.

If you have any questions about this policy or how we handle your data, please contact us at support@myeasytherapy.com.

What data we collect

Account information: your display name, email address, and optional profile photo, provided when you sign up.

Sign in with Apple and Google sign-in (optional): if you choose one, we receive from Apple or Google only what you allow: your name and email address, and a sign-in identifier for your account with them. With Sign in with Apple you can choose Hide My Email, in which case we receive a private relay address that forwards to your inbox, and Apple shares your name only the first time you sign in. We never receive your Apple or Google password. You can connect or disconnect these sign-in methods in Settings, under Account.

Wellbeing data: your responses to daily check-ins (mood, body, mind, sleep), Neurosensitivity Profile results, and patterns derived from these over time. This is the core data that makes the app work for you.

Iris conversation history: messages you exchange with Iris are stored so she can provide continuity within and across sessions. You can delete your chat history at any time from Settings.

Health data (optional, phone app only): if you turn on health sharing for Iris and allow access to Apple Health (iPhone) or Health Connect (Android), the app reads a short daily summary: last night's sleep (including sleep stages and how regular your bedtimes are), steps today, resting heart rate, heart rate variability, time in daylight and whether you worked out, compared with your own recent averages. This summary is read and worked out on your phone. It is used to suggest your check-in's sleep answer (you can change it), to offer a shorter Regulate practice on a day you may have less energy, and to help Iris pace her replies. It never decides how you are feeling: what you tell the app always comes first. With the same switch on, the app also writes two things back to your phone's health app: your completed Regulate, Daily Calm and breathing sessions as mindful minutes, and (on iPhone) your check-in mood as State of Mind. Nothing else is written. Your raw health readings (such as hours of sleep, step counts, heart rate or heart rate variability) are not stored on our servers. Iris receives only a few plain-language hints worked out on your phone, with no numbers in them, such as that last night's sleep was shorter than usual for you. If you keep the sleep answer your phone suggested, it is saved as part of your check-in and marked as coming from your health app. If you also turn on gentle support moments, our servers receive one simple label a day worked out on your phone: whether today may be a lower-energy day for you, how sure that is, and whether you worked out recently. It contains no readings, and it is used only to decide whether and when to offer you a moment of support. With gentle support on, the phone app can also check new sleep, resting heart rate and heart rate variability readings in the background, at most once an hour, and send that same label, so a moment of support can reach you on a harder day without you opening the app. Turning off health sharing or gentle support stops this straight away. You can turn it off at any time in Settings or in your phone's health settings. Health data is never used for advertising and never sold.

Payment information: handled entirely by Stripe, our payment processor. We receive your subscription status but never see or store your card details. When you start a checkout, we also record the link or campaign that brought you, if there was one, with the purchase, so we know which channels work.

Technical data: your device type, operating system, and browser version, collected automatically by Firebase to ensure the app works correctly and to diagnose issues.

Error monitoring: if the app encounters a fault, we send diagnostic data to Sentry (our error monitoring service). This includes stack traces, route names, and a masked session replay on errors only. It is linked to your account id, not your name or email. We configure Sentry not to collect journal entries, check-in answers, Iris messages, health readings, or other wellbeing text.

App integrity: Firebase App Check helps confirm requests come from our genuine app rather than automated abuse. It uses device attestation and, on the web, Google reCAPTCHA v3 in the background. It does not read your wellbeing content.

Push notifications (optional): if you turn on reminders, we store a push token from Firebase Cloud Messaging for that device so we can send them.

Usage data (only with your consent): if you agree to analytics, we record how you use the app, such as which screens and features you open, which sessions you complete, and the link or campaign that brought you. This data is pseudonymous, not anonymous: it is linked to your account (your account id, and in our own records your email address) so we can understand how the app is used over time. It is recorded in our own database and in Google Analytics 4 (through Firebase Analytics). We also use Microsoft Clarity for heatmaps and masked session replays; Clarity's masking is enabled so the text you type and sensitive on-screen content, including health readings and check-in answers, are not recorded. If you do not agree, none of this is collected.

Cookie-free membership link counts

On our private coaching page, the membership link passes through a server redirect that counts eligible clicks in daily totals to help us improve the website. This counter does not use cookies, browser storage or visitor identifiers. Its database stores only the link name, UTC date and total clicks, not IP addresses, email addresses, individual click records or browsing histories. Standard hosting and security logs are separate from this counter.

You can avoid this count by visiting https://myeasytherapy.com/join directly. We also skip counting when your browser sends Do Not Track or Global Privacy Control. These totals do not identify unique people or show whether someone purchases a membership. Our separate visitor analytics still require analytics consent.

Why we process your data

To provide the service: we process your account and wellbeing data to deliver the features you have signed up for. The legal basis is performance of a contract with you.

To run and improve the platform: we use aggregated patterns and error reports to improve content, fix bugs, and develop new features. The legal basis is our legitimate interest in maintaining a working product.

Analytics (with consent): if you agree, we use our own analytics, Google Analytics 4 (through Firebase Analytics) and Microsoft Clarity to understand how the app is used. The legal basis is your consent, and you can withdraw it at any time in Settings → Privacy & data → Cookie preferences.

Marketing emails (with consent): if you opt in, we may send you updates about new features or wellbeing content. You can opt out at any time in Settings → Notifications.

Who we share data with

We do not sell your personal data. We share it only with the third-party services needed to run the platform:

Apple and Google (sign-in only, if you use them): they confirm who you are when you choose Sign in with Apple or Google sign-in. We send them nothing about your wellbeing or your use of the app.

Google Firebase: provides our authentication, database, file storage, app integrity checks (App Check) and push notifications (Firebase Cloud Messaging). Data is processed in the United States under Google's standard contractual clauses.

Google Analytics 4 (through Firebase Analytics): used only with your consent. It receives usage events linked to your account id. Advertising features are switched off, and it is never used for advertising.

Stripe: processes subscription payments on our behalf. Their privacy policy governs the billing data they hold.

Google (Gemini API): powers Iris, our AI assistant. Your messages to Iris, with the context you have chosen to share (such as recent check-ins and, if you turned health sharing on, a few non-numeric hints worked out on your phone, never your health readings), are sent to Google's Gemini API to generate her replies. Data is processed under Google's API terms and standard contractual clauses.

ElevenLabs: turns text into speech for Iris's spoken replies and guided audio. Only the text being spoken is sent; it is not linked to your name or email.

Resend: sends our emails, such as account, sign-in and membership messages and, if you opted in, updates. It receives your name and email address.

Sentry: provides error monitoring and performance diagnostics. Events are linked to your account id and configured to exclude wellbeing content, health readings and personal journal text. Data is processed in the United States under Sentry's standard contractual clauses.

Meta: with separate marketing cookie consent, receives browser information and page or paid membership events from our sales pages and the payment return screen to measure Facebook and Instagram advertising. Purchase events include the amount and currency. We do not intentionally send your name, email, quiz answers, journal entries or therapy conversations. You can withdraw marketing consent in Cookie preferences on the same website.

Microsoft Clarity: provides aggregated usage analytics and masked session replays, used only with your consent. Clarity's masking is enabled so the text you type and sensitive content are not captured. Data is processed by Microsoft under standard contractual clauses, and you can withdraw consent at any time in Settings → Privacy & data → Cookie preferences.

We may also share data if required by law or to protect the rights and safety of our users.

International data transfers

Some of our service providers are based in the United States. Where your data is transferred outside the UK or European Economic Area, we ensure appropriate safeguards are in place, including standard contractual clauses approved by the relevant authorities.

How long we keep your data

We keep your account and wellbeing data for as long as your account is active.

When you delete your account, we remove your personal data within 30 days. Some anonymised or aggregated records may be retained for statistical purposes.

If you use Sign in with Apple, deleting your account also revokes the app's access to your Apple ID, so My Easy Therapy no longer appears under the apps using Sign in with Apple in your Apple ID settings. You may be asked to confirm with Apple once to do this.

Stripe retains payment records for the periods required by law and their own policies.

Your rights

Under UK GDPR and applicable data protection law, you have the right to:

• Access the personal data we hold about you (you can download a copy in Settings → Privacy & data → Download my data)

• Correct inaccurate data (you can update your profile in Settings)

• Delete your account and its data, at any time, in the app: Settings → Delete my account (at the bottom of Settings)

• Restrict or object to certain processing

• Data portability: receive your data in a machine-readable format

• Withdraw consent where processing is based on your consent

To exercise any of these rights, contact us at support@myeasytherapy.com. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you are based in the UK.

Cookies and local storage

We use browser storage (cookies, localStorage, and IndexedDB) to keep you signed in, remember your preferences, and store app data for offline use. See our Cookie Policy for full details.

Analytics cookies are only used with your consent.

Children

My Easy Therapy is intended for adults aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, please contact us and we will delete their data.

Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you in the app. The "last updated" date at the top of this page will always reflect the most recent version.