Last Updated: January 19, 2026
Shift is built for mental health. We take your privacy seriously. Your data is encrypted, never sold, and used only to help you regulate your nervous system.
All data is encrypted in transit (TLS 1.3) and at rest (AES-256).
We're HIPAA compliant for enterprise customers.
We use industry-standard security practices including regular security audits and penetration testing.
We share your data with:
We NEVER sell your data to advertisers or third parties.
Email support@themindshiftapp.com to exercise these rights.
Shift is designed for users 13+. We don't knowingly collect data from children under 13.
For users 13-17, we require parental consent for data collection.
Shift is based in the USA. If you're outside the USA, your data may be transferred to and processed in the USA.
We comply with GDPR for EU users and provide the same privacy protections globally.
We'll notify you of major changes via email and in-app notification.
Continued use of Shift after changes means you accept the new policy.
Questions about privacy? Email privacy@themindshiftapp.com