LAST UPDATED NOVEMBER 11, 2026
Privacy notice
CBF Mindset is provided by CBF Performance Systems. This notice describes the information used by the current preview application.
What you provide
We store your account email, display name, password hash, age group, preferences, and the entries and training records you choose to save. We no longer collect a parent or guardian email for users ages 13 and up. Older accounts may retain parent contact and permission records collected under the previous signup process. These are not required for access. We do not ask for an exact birth date, profile photo, or location.
What your account stores
Your saved information may include journal text, ideas, goals, habits, intentions, custom routines, program progress, session reflections, and training dates. These records are associated with your account so you can use them across devices.
How information is used
We use account details to provide sign-in, verification, password recovery, and your chosen training preferences. Saved records support your private workspace and progress history. Essential session cookies keep you signed in. Security controls store hashed rate-limit identifiers and expiring verification codes.
Who can access it
The application does not share your private entries with other users, or coaches. Parents of children under 13 can review and download their child’s records, including journal entries. Parents do not receive access to accounts ages 13 and up. There are no public profiles, social features, or coach messaging in this release. Private entries are not end-to-end encrypted: the service operator and hosting provider may have technical access to stored data for operating, securing, and maintaining the service. Do not use the app to store information you would not want held by an online service.
Service providers
GoDaddy provides managed application hosting and the database. Account emails are delivered through Resend or the GoDaddy transactional email gateway. The current app includes no advertising trackers, third-party behavioral analytics, or active payment processing.
Teen accounts
Users ages 13–17 verify their own account email and can sign in without parent permission. Parents do not receive access to these teen accounts’ private entries.
Children under 13 and parent controls
CBF Mindset is operated by CBF Performance Systems (bill@cbfperformancesystems.com). A parent or legal guardian must approve accounts for children under 13. We collect the parent email, child sign-in email, first name or nickname, password hash, age group, preferences, and any journal entries, goals, ideas, routines, exercise notes and training history the child chooses to save. These are used only to provide and secure the app. GoDaddy hosts the app and database; account emails are delivered through our transactional email provider (Resend or GoDaddy). There are no public profiles, messaging, uploads, advertising trackers or sale of child information. Information is not shared with coaches or other users. As the approving parent you can review and download all of your child's saved information, reset their password, and withdraw permission and delete their account through the Parent account page. This includes journal entries: child accounts are not private from their approving parent. Approval lasts one year and can be renewed. Access stops when approval expires; unrenewed accounts are deleted from the live database after a further 30 days during maintenance. Withdrawing permission deletes the account and linked records immediately from the live database; hosting backups expire under the provider's retention policy. Only the parent's email is collected before approval. Verification codes expire after 30 minutes. CBF Mindset provides mental performance practice, not medical care. Contact us at the email above with privacy questions.
Approve or manage a child account. A child cannot create their own under-13 account. Verification and approval are separate steps. A confirmation email is sent for approval and renewal. Do not share parent verification codes with children.
Your choices
You can edit or delete your entries, download your account records as a JSON file, or permanently delete your account in Account. Deleting the account removes its linked entries, sessions, and training records from the live application database. Hosting backups and operational records, if retained by the service provider, may remain until their applicable retention period ends.
Security and retention
Passwords are stored as salted hashes. Session identifiers and verification codes are stored in hashed form. Records are retained while your account remains active unless you delete them. Internet services cannot guarantee absolute security. Keep your password private and sign out on shared devices.
Contact and changes
For privacy questions, account assistance, or to report an account created with an incorrect age group, contact bill@cbfperformancesystems.com. This notice may be updated as the service changes. Material changes will be described before new functionality asks you to provide additional information.