Privacy Policy

This Privacy Policy explains how Millionaire Mindware collects, uses, and protects your personal information when you use our website at millionairemindware.com and our members platform at members.millionairemindware.com (together, "the Platform"). Please read it carefully.

This policy is written to meet the requirements of the General Data Protection Regulation (GDPR) for users in the European Union and United Kingdom, the California Consumer Privacy Act (CCPA) for California residents, the Australian Privacy Act 1988 for Australian users, and applicable privacy laws in other jurisdictions. By using the most protective standard throughout, your rights are covered wherever you are located.

1. Who we are

Millionaire Mindware operates this Platform and acts as the data controller for personal data collected through it. For any privacy questions, contact us at admin@millionairemindware.com.

For all privacy enquiries and data requests, contact: admin@millionairemindware.com

2. Information we collect

Information you provide directly

• Email address — required to create an account, receive login links, and access the members platform.
• Name — optionally provided when completing the Money Code quiz.
• Quiz responses — answers to the Money Code quiz, including optional financial context such as approximate net worth, savings rate, and financial goals. Collected only with your explicit consent and used solely to personalise your quiz results and learning experience.
• Feedback and forum posts — anything you submit via the platform feedback form or community forum.
• Aha moments and notes — personal insights and notes you choose to capture while watching content.

Wealth Building Wallet data

The Wealth Building Wallet is an optional self-tracking tool. When you choose to use it, we store the entries and settings you enter, including:

• Money and attention entries — amounts you log as spent, kept, or multiplied (or, in attention mode, redirected), together with the category, the emotional driver you attach, the frequency, and any note you add.
• Investment intentions — the assets or vehicles you select for a multiplication and the intentions you mark and confirm. These are your own records only — we do not execute trades, hold or transfer funds, connect to your brokerage, or provide personalised financial advice.
• Real hourly wage inputs — the net worth, years worked, and hours-per-week figures you enter to calculate your attention rate, stored so the tool remembers them.
• Custom categories and preferences — categories, emotional drivers, vehicles, currency, and other settings you create, edit, or reorder.

This is personal financial and behavioural information. It is used only to power your own dashboard, projections, and insights, and — in aggregated, de-identified form — to improve the tool. You can delete this data at any time by clearing it from within the wallet or by requesting deletion (see "Your rights").

Information collected automatically

• Watch progress — which videos you have watched, how far through each, and your genuine watch percentage.
• Search queries — text you enter into the platform search, retained for up to 90 days for analytics then anonymised.
• AI chat messages — conversations with the Ask Paul AI feature, stored so you can resume conversations.
• Device and usage data — IP address (stored in hashed form), browser type, referring URL, and pages visited, used for rate limiting and security.
• Marketing attribution — referral source and UTM parameters if you arrive via a referral or campaign link, used to understand how members find us.

Payment information

Payments are processed by Stripe. We do not store your card number or full payment details. We receive and store your Stripe customer ID, subscription ID, plan type, and payment status.

3. Lawful basis for processing (GDPR)

For users in the European Union and United Kingdom, we process your personal data on the following lawful bases:

4. How we use your information

• To provide access to the Platform and deliver the learning experience.
• To personalise your content recommendations, learning pathway, and AI briefings based on your watch history and quiz results.
• To send transactional emails — login links, purchase confirmations, and password setup instructions.
• To send educational and marketing emails where you have explicitly opted in. You can unsubscribe at any time via the link in any email.
• To improve the Platform — understanding which content is most valuable, how search is used, and where the learning experience can be better.
• To prevent abuse — rate limiting, fraud detection, and security monitoring.
• To manage affiliate commissions where applicable.

We do not sell, rent, or trade your personal information to any third party. Ever.

5. AI processing

The Platform uses AI features including the Ask Paul chat assistant and semantic search. When you use these features:

• Your search queries and chat messages are transmitted to OpenAI for processing. OpenAI acts as a data processor on our behalf under a Data Processing Agreement. OpenAI's privacy policy applies to data processed by their systems.
• Search queries are also converted into numerical vectors and stored in Pinecone for search and retrieval under a Data Processing Agreement.
• No AI feature makes automated decisions with legal or similarly significant effects on you.
• AI-generated responses are based on educational content and do not constitute financial advice.

6. Third parties who receive your data

All third-party processors operate under Data Processing Agreements where required by GDPR. Data transferred to US-based providers is covered by Standard Contractual Clauses or equivalent transfer mechanisms.

7. Cookies and local storage

• Session cookie — a secure, httpOnly cookie set by Supabase to maintain your login session. Strictly necessary; cannot be disabled without breaking authentication.
• localStorage — stores your preferences (last-watched video, library view) and local watch progress. Cleared when you clear your browser data.

We do not use advertising cookies or third-party tracking pixels. The session cookie is strictly necessary and does not require consent. Analytics and attribution tracking uses first-party data only.

8. Data retention

• Account and profile data — retained while your account is active and for up to 2 years after cancellation, then deleted or anonymised.
• Watch progress and aha moments — retained while your account is active.
• Search queries — retained for up to 90 days for analytics, then anonymised.
• Chat conversations — retained until you delete them. You can delete any conversation from within the platform at any time.
• Payment records — retained for 7 years as required by tax law.
• Quiz and lead data — retained for up to 3 years from collection, or until you request deletion.
• Marketing emails — your email remains on our list until you unsubscribe or request deletion.

9. Your rights

You have the following rights regarding your personal data. These rights apply to all users; jurisdiction-specific rights are called out where they differ.

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to correct inaccurate or incomplete data.
• Deletion — request deletion of your personal data. Email admin@millionairemindware.com with the subject line "Delete my account" and we will action the request within 30 days, subject to legal retention obligations such as payment records.
• Portability — receive your data in a machine-readable format (GDPR / UK GDPR).
• Restriction — ask us to restrict processing in certain circumstances (GDPR / UK GDPR).
• Objection — object to processing based on legitimate interests (GDPR / UK GDPR).
• Opt out of marketing — unsubscribe at any time via the link in any email, or email us directly.
• Withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior processing.

California residents (CCPA)

California residents have the right to know what personal information we collect, the right to delete it, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your rights, email admin@millionairemindware.com. We will not discriminate against you for exercising these rights.

How to submit a request

Email admin@millionairemindware.com from the email address associated with your account. We will respond within 30 days. We may ask you to verify your identity before acting on the request.

10. International data transfers

Our third-party service providers are primarily based in the United States. If you are located in the European Economic Area or United Kingdom, your data is transferred internationally. These transfers are covered by Standard Contractual Clauses approved by the European Commission, or equivalent safeguards, as part of our Data Processing Agreements with each provider.

11. Data security

We implement appropriate technical and organisational measures to protect your data: HTTPS encryption in transit, database-level row security policies, hashed storage of IP addresses, and access controls limiting who can access personal data. No method of transmission over the internet is 100% secure and we cannot guarantee absolute security.

12. Children's privacy

The Platform is not directed at anyone under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, contact us and we will delete it promptly.

13. Changes to this policy

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top. For material changes, we will notify members by email at least 30 days before the change takes effect. Your continued use of the Platform after changes take effect constitutes acceptance of the updated policy.

14. Contact and complaints

For any questions about this Privacy Policy or to exercise your rights: admin@millionairemindware.com

If you are located in the UK or EU and are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority. In the UK this is the Information Commissioner's Office (ico.org.uk). EU residents may complain to their national data protection authority.