Home

CoMind privacy notice

Last updated: 16 October 2026

Who we are and what this covers

CoMind keeps track of your life admin for you: it remembers what you tell it and forward to it, and each morning shows you a short list of what needs doing and why. This notice explains what we hold about you to do that, who else touches it, and what control you have. Our terms of use sit alongside it.

CoMind is run by Jupifrel Limited ("we", "us"), based in the UK. We decide what your information is used for, which makes us the data controller under UK data protection law. You can reach us at info@comind.life.

It covers the website at comind.life, your board, the emails you send to and receive from CoMind, and the conversation that sets your board up. It does not cover other websites a card links to.

What we collect

We hold only what you send us, what we work out from it, and a small record of how you use your board. We never ask for bank account numbers, card details, passport, National Insurance or NHS numbers, and you should not send them.

WhatWhere it comes fromExamples
Your email addressYou, when you first email usUsed to recognise you and send your board link
What you send usEmails you forward, thoughts you type, questions you ask on a cardA renewal letter, "MOT due in March?"
What we work out from itOur AI reads what you send and writes notes for youDates, prices, who a provider is, what to do next and why
Your boardBuilt from those notesCards, due dates, your replies, what you ticked or dropped
How you use itRecorded as you use the boardWhen you last opened it, which tabs, what you tapped
Running costsRecorded each time our AI works for youHow much reading your emails cost us
Feedback you send from your boardYou, using the "Feedback or an idea?" linkYour words, and whether you are happy for us to reply
Your money documentsStatements, payslips and account letters you sendEach payment (kept 13 months, then only monthly totals), your pay and its deductions, the accounts you hold or owe and their rates and fees. Never an account, card or National Insurance number

Health and other sensitive details. Life admin often touches health: "cancel the gym, my knee won't recover" is health information. We only keep the medical side of your care (a condition, a treatment, a medicine) with your explicit consent. The arrangements around it, such as when and where an appointment is and what kind, we keep as part of the service. We do not ask up front. The first time something you send looks like health information, we ask you to confirm you are happy for us to keep it. To spot it, our AI has to read it, so it does pass through our AI provider before you are asked. Until you do, we set that part aside: it is not on your board and our AI does not use it. If you say yes within 7 days, we add it. If not, we delete it and tell you. Everything else you sent carries on as normal. Our AI can miss one. Each night it looks again at anything new in your notes, and if it finds a health detail you have not agreed to, it sets it aside and asks you in the same way.

Other people. Your notes may mention family and friends - a birthday, an address, a partner's renewal, a parent's care. We hold these only as part of your own record. We never use them to build a picture of that person, never contact them, and delete them with your data. Where it is about someone else's health, we keep what the task needs rather than the medical detail - "help Mum apply for a blue badge", not why she needs one - unless the task cannot be done without it. If you send a partner's payslip, we keep its figures only - pay, pension, tax - as "your partner", never their name, and delete them with your data. If you tell us it is someone else's, we delete it. Please only send us other people's details they would be happy for you to share. Anyone who finds their details in someone's CoMind can ask us to remove them.

How we use it, and why we are allowed to

We use your information to run CoMind for you, and for nothing else. We do not sell it, show you adverts, or use it to train AI models.

What we doLawful basis
Read what you send, pull out dates and facts, and build your boardContract: it is the service you asked for
Re-read your notes each night and re-rank what mattersContract
Answer questions you ask on a cardContract
Email you replies, board links and messages about your accountContract
Hold health or other special-category detailsYour explicit consent, asked for when health details first arrive, and which you can withdraw at any time
Watch costs, spot failures and see who uses the service heavily, so we can keep it runningLegitimate interests: running a reliable, affordable service
Read your feedback, and reply if you said we mayLegitimate interests: improving CoMind
Keep a record that we deleted your data when askedLegal obligation: proving we met your request

What our AI does and does not do. It suggests; it never acts for you. It does not contact anyone, buy anything or change an account on your behalf. Replies are written by AI and can be wrong, so check facts before acting on them. Nothing it says is financial, medical, legal or insurance advice.

No automated decisions with legal effect. The ranking on your board is a suggestion about what to look at first. Nothing it decides affects your rights or your money without you.

Who else handles it

Three companies handle your information for us, only to run the service and only on our instructions. Each is bound by a data processing agreement.

CompanyWhat they doWhere
CloudflareHosts the website and your board, receives the emails you send us, and stores your notesYour notes are stored in the EU. Some processing may happen elsewhere under Cloudflare's legal safeguards for international transfers
AnthropicProvides the AI (Claude) that reads what you send and writes your notes and repliesBased in the US; processing happens worldwide through its cloud providers. It does not use your information to train AI, and deletes it within 30 days - except anything its safety systems flag, which it can keep for up to 2 years. Deleting your CoMind account cannot reach that copy
ResendSends the emails you get from CoMindBased in the US, and stores everything there. It keeps a copy of each email it sends you for 30 days, then deletes it. It does not use your information to train AI

Where a company handles data outside the UK, the transfer is covered by the UK's approved safeguards, such as the International Data Transfer Addendum. We do not share your information with anyone else unless the law requires it.

How long we keep it, and how it is protected

We keep your information while you use CoMind, and delete it within 21 days of you asking, and never later than 28 days.

WhatHow long
Your notes and boardUntil you ask us to delete them, or after a year without using CoMind - we email you a warning first, then delete them [In development]
The original emails you send us7 days, then deleted
Payments read from your statements13 months, then only monthly totals
Copies of the emails we send you, kept by our email provider30 days, then deleted
Working copies made while your board is updated, which include your notesDeleted when the update finishes, or within two days if it is interrupted
Earlier versions of a note, so a mistake can be undone30 days
Usage figures for checking the service is healthy16 days. Counts and costs, never anything you sent; some are tied to your account by an internal number, not your email address
Costs and usage per personUntil you are deleted, then added into anonymous monthly totals with nothing linking them to you
Feedback you sendUntil you are deleted
A record that we deleted your dataKept, so we can show we did it. It holds an internal reference number, the date and how many items were removed - not your email, name or anything you sent us

What "deleted" means. When you ask, we remove your notes, their earlier versions, your board, your taps, your usage history and the link between your email address and your account. For a while afterwards copies can still exist that we cannot reach for everyday use. Cloudflare can restore some of our records, such as the link between your email address and your account, to how they were at any point in the last 30 days; after 30 days that is no longer possible. For your notes themselves, it keeps extra copies to protect against loss and is bound by its contract to delete them, but it does not say how long that takes. Copies of the emails we sent you stay with our email provider until their 30 days are up, because it gives us no way to delete them sooner. We will not tell you your data is unrecoverable the moment we delete it, because for a while it is not.

How it is protected.

If something goes wrong and your information is exposed, we will tell the Information Commissioner's Office within 72 hours where the law requires, and tell you without delay if it puts you at real risk.

People we contact about CoMind

If we contact you about CoMind - to ask you to try it, or because you write, post or run a newsletter about things like it - we keep a short record so we don't ask twice: your name, how we reached you (an email address or a social media handle), what we sent you and when, and anything you told us about CoMind. We use it only to keep track of those conversations. We never add you to a mailing list and never pass it on. If you gave us an email address and you start using CoMind, we can see that you have, so we know whether it helped; we never use the list of people who use CoMind to contact anyone. It is stored with Cloudflare in the EU. We keep it until we have not been in touch for two years, then delete it. You can ask us to delete it at any time at info@comind.life, and if you delete your CoMind account it goes too. We keep it because we have a legitimate interest in telling people about CoMind and remembering who we have asked.

Your rights

You can ask us at any time to see, correct, export or delete what we hold about you, and we will answer within one month. Email info@comind.life from the address you use with CoMind, so we know the request is really from you.

You can ask us toWhat happens
Show you what we holdWe send you a copy
Correct somethingWe fix it. Where a note records a past decision, we mark the correction beside it rather than rewriting history
Give you your data to take elsewhereWe send your notes as plain text files you can open anywhere
Delete everythingWe delete it within 21 days, as described above, and email you when it is done
Stop using health detailsReply "stop keeping my health details" to any CoMind email, or write to info@comind.life. We remove them from your notes and board within a day and stop using them. The original emails they came in are deleted after 7 days, and Cloudflare's recovery copies last a while longer, as described under "What deleted means"
Stop or limit some usesWe stop, unless we need to keep something to run the service you are still using
Object to a use based on our legitimate interestsWe stop unless we have a strong reason that outweighs yours

We will only ask for more proof of identity if we genuinely cannot tell the request is from you. It is free, unless a request is clearly unfounded or excessive.

If you live in the United States

Everything above applies to you too: the same information, the same three companies, the same deletion. This section adds what is different in the US.

Your health information. Some states, including Washington, Connecticut and Nevada, have their own laws on health information held by apps like CoMind. Our Consumer Health Data Privacy Policy explains what health information we hold, why, who handles it, and how to use your rights. It applies wherever in the US you live.

We never sell your information and never share it for advertising. It goes only to the three companies above, who handle it for us under contract.

What you can ask us. You can ask us to:

Email info@comind.life from the address you use with CoMind. A person reads it, not our AI. We answer within one month, and never later than 45 days. If we need longer because a request is complicated, we will tell you within those 45 days, and we will never take more than 45 days more. It is free. We will not treat you differently for asking.

If we say no. If we refuse any part of a request, we will tell you why. You can appeal by replying to that email with the word "appeal", or by writing to info@comind.life. We will tell you in writing what we decided, and why, within 45 days. If we still say no, we will tell you how to complain to your state's Attorney General.

Where your information is kept. Your notes are stored in the European Union, and our AI provider and email provider are US companies, as described above.

If something goes wrong. If your information is exposed, we will tell you, and the authorities US law requires us to tell, within the time that law sets.

Cookies, contact and complaints

No advertising or tracking cookies. The website loads nothing from other companies, including its fonts, so a visit is reported to nobody. Your board remembers a few things in your own browser, and never sends them to us: which cards you have already seen, which sections you opened or closed, whether descriptions are shown, and whether you have dismissed the tip about bookmarking your board. If you tap a button or send a reply while you have no connection, your browser also holds it, including anything you typed, until it can be sent. Cloudflare may set a cookie needed to protect the site from attacks.

Contact. Questions about this notice or your information: info@comind.life.

Complaints. Please tell us first and we will try to put it right. You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

Changes. If we change this notice in a way that matters, we will email you before it takes effect. The date at the top shows when it last changed.

Children. CoMind is for people aged 18 and over. We do not knowingly hold information from anyone younger.