Privacy policy

Privacy Policy

Last updated: June 19, 2026

Introduction

Sage Mind, Inc. ("Company," "we," "us," or "our") operates the Pith cognitive wellness platform, including the website trypith.com ("Website") and the Pith mobile application ("App"). Together with any related services, these are referred to as our "Services."

We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and disclose information when you access or use our Services. By using our Services, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy.

Information We Collect

We collect various types of information to provide and improve our Services:

Personal Information You Provide

  • Name, email address, phone number, mailing address
  • Payment information (processed securely by third-party providers; we do not store full payment card numbers)
  • Account credentials (e.g., email and a sign-in method)
  • Quiz responses (goals, lifestyle factors, and preferences used for product recommendations)

Cognitive Training Data

When you use the Pith App, we collect performance data generated by your use of the cognitive-training tasks:

  • Task scores, reaction times, accuracy, and consistency metrics
  • Training preferences (session times, program selections, notification preferences)

This is performance/usage data about how you interact with the App. The mathematical analysis of your performance happens on your device; the underlying results are stored to your account so your progress and insights persist across sessions.

Health and Wellness Data

If you use the Pith App's tracking features or purchase supplements, we may collect:

  • Supplement usage logs (self-reported intake tracking)
  • Subjective wellness responses (self-reported check-ins, e.g. mood, focus, or sleep ratings)

This data is health-adjacent but is not regulated under HIPAA. We treat it with heightened privacy protections because we understand its sensitivity. We do not use HealthKit (iOS) or Health Connect (Android), and we do not read data from your device's health frameworks.

Automatically Collected Information

  • IP address, browser type, and operating system
  • Cookies and similar technologies to enhance and analyze your experience
  • Website usage data (pages visited, time on site, interactions with content)
  • App usage patterns (session frequency, duration, features used, screens viewed)
  • App diagnostics (crash reports and performance data)
  • Device information (model, OS version, screen size, and device-derived identifiers)

Third-Party Information

  • Data from payment processors and fulfillment partners necessary to complete and ship your orders
  • Information obtained through social media platforms if you engage with us there

How We Use Your Information

We use collected data for the following purposes:

  • To Provide and Manage Services: Process transactions, ship supplement products, manage subscriptions, deliver cognitive training experiences, and maintain your account.
  • To Generate Personalized Insights: Create personalized supplement-and-performance insights from your cognitive training data and supplement logs. These insights are generated for your personal use.
  • To Personalize Your Experience: Use quiz responses and training data to recommend supplements and adapt training difficulty to your level.
  • To Communicate with You: Send transactional emails (order confirmations, shipping updates), respond to inquiries, and provide customer support.
  • To Improve Our Services: Analyze usage patterns, diagnose crashes, develop new features, and enhance the experience. We may use de-identified, aggregated data for product improvement. Individual data is never sold or published in identifiable form.
  • For Marketing and Promotions: Send promotional emails and newsletters (opt-out available at any time). We do not use your data for cross-app or cross-site advertising.
  • To Ensure Security and Compliance: Detect fraud, enforce our Terms & Conditions, and comply with legal obligations.

Cookies, Analytics, and Tracking Technologies

We use cookies and similar technologies to operate, personalize, and analyze our Services. The providers we use are:

  • PostHog (product analytics): collects app and website usage events, a user identifier, device-derived information, and diagnostics, to help us understand and improve how the Services are used. PostHog processes this data on our behalf as our service provider. We do not use it for cross-app advertising.
  • Shopify (commerce): cookies for shopping-cart functionality, checkout, and the storefront, plus Shopify's built-in store analytics.
  • Session cookies / sign-in state: for authentication and keeping you logged in.

We do not use advertising or cross-app tracking SDKs in the App. The App does not ask for permission to track you across other companies' apps or websites, and we do not share identifiers with advertising networks or data brokers. You can manage cookie preferences through your browser settings.

How We Share Your Information

We do not sell your personal information.

We share data only with trusted service providers (processors) who handle it on our behalf, under contract, and only as necessary to operate the Services:

  • Commerce and order processing — Shopify: your name, email, address, and order details, to process and manage your orders.
  • Payment processing: your payment information is processed directly by our payment processor (via Shopify Payments). We do not store full credit card numbers.
  • Supplement fulfillment and shipping — Supliful: your name, shipping address, and order details, to fulfill and ship your supplements.
  • Subscription management — Appstle: your subscription and order details, to manage recurring orders and the subscription portal.
  • App infrastructure — Supabase: your account data, cognitive training data, supplement logs, and subjective responses are stored on our backend infrastructure provider (hosted in the United States).
  • Analytics — PostHog: usage, diagnostics, and identifier data as described above.
  • Email and marketing — Klaviyo: your name and email, to send transactional and (with your consent) marketing messages. Klaviyo is integrated with our website and commerce platform.

Each provider receives only the data necessary for its function and is contractually required to protect it and use it only for the services it performs for us.

What We Do and Do Not Share

We do not sell your personal information, and we do not share your cognitive training performance data, supplement logs, or subjective wellness responses with advertisers, data brokers, or for cross-app or cross-site advertising. We do rely on the first-party service providers named above (notably Supabase for storage and PostHog for analytics and diagnostics) to operate and improve the App; these providers process data on our behalf and not for their own purposes.

Other Sharing

  • Legal Compliance: When required by law, court order, or to protect our rights and the safety of our users.
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of the transaction. We will notify you of any such change.

Data Security

We implement industry-standard security measures to protect your data, including encryption in transit, access controls, and secure data storage. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy:

  • Account data: Retained while your account is active. When you delete your account, your personal account data and associated app data (cognitive training data, supplement logs, subjective responses) are deleted; limited records may be retained where required by law.
  • Cognitive training, supplement, and wellness data: Retained while your account is active; exportable and deletable as described below.
  • Transaction data: Retained as required by tax and accounting regulations (typically up to 7 years).
  • Analytics data: Used to understand and improve the Services; individual session data is not retained long-term in identifiable form.

Once data is no longer required, we securely delete or anonymize it.

International Data Transfers

Our servers are located in the United States. If you access our Services from outside the U.S., your personal data may be transferred to, processed, and stored in the U.S. By using our Services, you consent to this transfer. We take reasonable measures to ensure data protection in compliance with applicable laws.

Your Rights & Choices

Depending on your location, you may have the following rights regarding your personal data:

  • Access & Correction: Request access to the personal data we hold about you and correct any inaccuracies.
  • Data Deletion: Delete your account and associated personal data directly in the App (Settings → Account → Delete Account), request deletion through our web deletion page, or email us (see "Data Access & Deletion Requests" below).
  • Data Export: Request a copy of your cognitive training data by emailing support@trypith.com. (In-app export is planned for a future release.)
  • Opt-Out of Marketing: Unsubscribe from promotional communications at any time using the link in any marketing email.
  • California Residents (CCPA/CPRA): See "California Privacy Rights" section below for your specific rights.
  • EU Residents (GDPR): You have the right to access, correct, delete, or restrict the processing of your personal data. You may also have the right to data portability and to object to processing based on legitimate interests.

California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act and California Privacy Rights Act provide you with specific rights regarding your personal information.

Categories of personal information we collect: Identifiers (name, email, address, phone, device identifiers); commercial information (purchase history, subscription details); internet or network activity (browsing and app-usage activity, interactions with our Services); geolocation data (approximate, from IP address); health-adjacent information (supplement logs, subjective wellness responses); inferences drawn from your data (cognitive training patterns, supplement insights).

How we use personal information: To fulfill orders and subscriptions; to provide the Pith App and cognitive training services; to communicate about your account; to improve our products and services; to comply with legal obligations.

Your rights:

  • Right to know: You may request the categories and specific pieces of personal information we have collected about you.
  • Right to delete: You may request deletion of your personal information, subject to certain exceptions (e.g., completing a transaction, legal obligations).
  • Right to opt-out of sale/sharing: We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.
  • Right to non-discrimination: We will not discriminate against you for exercising your privacy rights.
  • Authorized agent: You may designate an authorized agent to make a request on your behalf.

To exercise your rights: Email support@trypith.com with the subject line "California Privacy Request." We will verify your identity before processing. We will respond within 45 days, with a possible 45-day extension if needed.

Data Breach Notification

In the event of a data breach affecting your personal information, we will notify you and applicable regulatory authorities as required by law, including Massachusetts data breach notification requirements (201 CMR 17.00), as soon as practicable and without unreasonable delay.

Children's Privacy

Our Services are intended for adults aged 18 and older. We do not knowingly collect personal data from minors. If we learn that we have collected personal data from a child under 13 without parental consent, we will delete such information as quickly as possible. If you believe that we may have collected a child's data, please contact us immediately.

Data Access & Deletion Requests

You can delete your account and associated personal data at any time, directly in the App: Settings → Account → Delete Account. This permanently deletes your account and associated app data (subject to limited legal retention, such as transaction records).

If you cannot access the App, or prefer to request deletion another way, you can use our web deletion page at trypith.com/pages/account-delete (no app reinstall required) or email us at support@trypith.com with the subject line "Privacy Request." For access, correction, or export requests, email the same address. We will verify your identity before processing and respond within 45 days, with a possible 45-day extension (we will notify you if an extension is required).

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last Updated" date. For material changes, we will notify active subscribers by email at least 30 days before the changes take effect. Your continued use of our Services after such changes constitutes acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at:

Sage Mind, Inc.

Email: support@trypith.com

Address: 28 Church St, Ste 14 #5473, Winchester, Massachusetts 01890