Join the Alpha

Join the Alpha

Effective Date: July 10, 2026

Effective Date: July 10, 2026

Privacy policy

This Privacy Policy explains how The Mindfull Company, Inc. collects, uses, discloses, and protects information through Formi, including the website at www.formiforward.com, the Formi chat service, account and profile screens, feedback prompts, recommendations, and related communications. In this Policy, "Formi," "we," "us," and "our" refer to The Mindfull Company, Inc. and the Formi service.

This Policy applies to the consumer-facing Formi service. If you receive access through a treatment provider, recovery program, employer-sponsored program, or other organization, that organization may have its own privacy notice. A separate written agreement or notice may control how information is handled in that setting.

This Privacy Policy explains how The Mindfull Company, Inc. collects, uses, discloses, and protects information through Formi, including the website at www.formiforward.com, the Formi chat service, account and profile screens, feedback prompts, recommendations, and related communications. In this Policy, "Formi," "we," "us," and "our" refer to The Mindfull Company, Inc. and the Formi service.

This Policy applies to the consumer-facing Formi service. If you receive access through a treatment provider, recovery program, employer-sponsored program, or other organization, that organization may have its own privacy notice. A separate written agreement or notice may control how information is handled in that setting.

Formi and Health Information

Formi is designed for personal reflection and support, so conversations may include sensitive information about mental health, substance use, recovery, treatment, relationships, medications, symptoms, or other personal circumstances.

The consumer version of Formi is not a health care provider, health plan, or health care clearinghouse. Information you enter directly into that version generally is not protected health information under HIPAA. If Formi is provided on behalf of a health care provider or treatment program under a separate arrangement, HIPAA, federal substance use disorder confidentiality rules, state law, or the provider's privacy notice may apply to some information.

Formi is designed for personal reflection and support, so conversations may include sensitive information about mental health, substance use, recovery, treatment, relationships, medications, symptoms, or other personal circumstances.

The consumer version of Formi is not a health care provider, health plan, or health care clearinghouse. Information you enter directly into that version generally is not protected health information under HIPAA. If Formi is provided on behalf of a health care provider or treatment program under a separate arrangement, HIPAA, federal substance use disorder confidentiality rules, state law, or the provider's privacy notice may apply to some information.

Information We Collect

Account and profile information. We may collect your name, email address, state of residence, age confirmation, login information, preferences, program affiliation, and other information used to create or manage your account.

Conversation content. We collect the messages and other content you submit in Formi, along with Formi's responses. This may include information about your emotional state, recovery, treatment history, goals, challenges, routines, relationships, health, or safety.

Feedback and survey responses. We may collect ratings, answers to short feedback questions, usability selections, comments, feature requests, and research or pilot feedback.

Program information. If another organization gives you access to Formi, we may receive limited information from that organization, such as your name, email address, enrollment status, program identifier, or access dates. We collect only the information needed for the agreed service.

Device and usage information. We may collect IP address, browser or device type, operating system, app version, language, approximate location derived from IP address, pages or screens viewed, dates and times of use, feature interactions, error logs, and security events.

Website and communications information. We may collect information you submit through signup forms or emails, and information generated by cookies, analytics tools, or similar technologies when you visit the website.

Account and profile information. We may collect your name, email address, state of residence, age confirmation, login information, preferences, program affiliation, and other information used to create or manage your account.

Conversation content. We collect the messages and other content you submit in Formi, along with Formi's responses. This may include information about your emotional state, recovery, treatment history, goals, challenges, routines, relationships, health, or safety.

Feedback and survey responses. We may collect ratings, answers to short feedback questions, usability selections, comments, feature requests, and research or pilot feedback.

Program information. If another organization gives you access to Formi, we may receive limited information from that organization, such as your name, email address, enrollment status, program identifier, or access dates. We collect only the information needed for the agreed service.

Device and usage information. We may collect IP address, browser or device type, operating system, app version, language, approximate location derived from IP address, pages or screens viewed, dates and times of use, feature interactions, error logs, and security events.

Website and communications information. We may collect information you submit through signup forms or emails, and information generated by cookies, analytics tools, or similar technologies when you visit the website.

Sources of Information

We collect information directly from you, automatically from your browser or device, from an organization that gives you access to Formi, and from vendors that help us operate the service. We may also receive information when you contact support, participate in a pilot, or respond to a survey.

We collect information directly from you, automatically from your browser or device, from an organization that gives you access to Formi, and from vendors that help us operate the service. We may also receive information when you contact support, participate in a pilot, or respond to a survey.

How We Use Information

We use information to create and manage accounts; provide and personalize conversations; remember preferences and prior interactions; generate recommendations and educational content; operate safety features; respond to support requests; send service notices; protect accounts and systems; diagnose errors; measure use; evaluate usability; improve Formi; develop and test features; enforce our Terms; comply with law; and establish, exercise, or defend legal claims.

We may use automated systems to analyze conversation content and other information for personalization, quality, product improvement, abuse prevention, and safety. Automated systems may look for language suggesting self-harm, harm to others, overdose, abuse, or another urgent concern so that Formi can display resources or take another step described to you. These systems are not a substitute for professional review and may make mistakes.

We may use aggregated or deidentified information for analytics, product improvement, safety evaluation, research, and business planning. We will not attempt to reidentify information that we maintain as deidentified except to test whether our deidentification methods work or as required by law.

We use information to create and manage accounts; provide and personalize conversations; remember preferences and prior interactions; generate recommendations and educational content; operate safety features; respond to support requests; send service notices; protect accounts and systems; diagnose errors; measure use; evaluate usability; improve Formi; develop and test features; enforce our Terms; comply with law; and establish, exercise, or defend legal claims.

We may use automated systems to analyze conversation content and other information for personalization, quality, product improvement, abuse prevention, and safety. Automated systems may look for language suggesting self-harm, harm to others, overdose, abuse, or another urgent concern so that Formi can display resources or take another step described to you. These systems are not a substitute for professional review and may make mistakes.

We may use aggregated or deidentified information for analytics, product improvement, safety evaluation, research, and business planning. We will not attempt to reidentify information that we maintain as deidentified except to test whether our deidentification methods work or as required by law.

AI Service Providers and Product Improvement

Formi uses third-party technology, which may include cloud hosting and artificial intelligence service providers, to process conversations and generate responses. Those providers process information for us under contract and are not permitted to use it for their own advertising.

We take steps to limit the information sent to providers and to use business or enterprise configurations when reasonably available. Identifiable conversation content will not be used to train a third party's general-purpose AI model unless we clearly tell you and obtain any consent required by law.

We may use conversations to evaluate and improve Formi's own prompts, safety controls, recommendations, and product features. Access is limited to authorized personnel and service providers who need it for those purposes. Where practical, we remove or reduce direct identifiers before human review.

Formi uses third-party technology, which may include cloud hosting and artificial intelligence service providers, to process conversations and generate responses. Those providers process information for us under contract and are not permitted to use it for their own advertising.

We take steps to limit the information sent to providers and to use business or enterprise configurations when reasonably available. Identifiable conversation content will not be used to train a third party's general-purpose AI model unless we clearly tell you and obtain any consent required by law.

We may use conversations to evaluate and improve Formi's own prompts, safety controls, recommendations, and product features. Access is limited to authorized personnel and service providers who need it for those purposes. Where practical, we remove or reduce direct identifiers before human review.

When We Disclose Information

Service providers. We disclose information to vendors that provide hosting, AI processing, analytics, communications, customer support, security, data storage, form collection, and similar services. They may use the information only to provide services to us or as otherwise allowed by law.

Organizations that provide access. If a treatment provider, recovery program, or other organization gives you access, we may disclose limited account, enrollment, engagement, or technical information needed to provide the service and administer the relationship. We will not disclose the substance of your conversations to that organization unless this is clearly described to you, you authorize it, or the disclosure is otherwise permitted or required by law.

Safety and legal reasons. We may disclose information when we reasonably believe disclosure is necessary to comply with law or legal process; protect the rights, safety, or property of you, another person, the Company, or the public; investigate fraud, abuse, or security incidents; or respond to an emergency. Formi is not continuously monitored, and this paragraph does not promise that we will identify or act on any situation.

Business transactions. Information may be transferred as part of a merger, financing, acquisition, reorganization, bankruptcy, or sale of all or part of the business. A recipient will remain subject to this Policy unless you are given notice of a different policy.

With your direction. We may disclose information when you ask us to or give permission.

Service providers. We disclose information to vendors that provide hosting, AI processing, analytics, communications, customer support, security, data storage, form collection, and similar services. They may use the information only to provide services to us or as otherwise allowed by law.

Organizations that provide access. If a treatment provider, recovery program, or other organization gives you access, we may disclose limited account, enrollment, engagement, or technical information needed to provide the service and administer the relationship. We will not disclose the substance of your conversations to that organization unless this is clearly described to you, you authorize it, or the disclosure is otherwise permitted or required by law.

Safety and legal reasons. We may disclose information when we reasonably believe disclosure is necessary to comply with law or legal process; protect the rights, safety, or property of you, another person, the Company, or the public; investigate fraud, abuse, or security incidents; or respond to an emergency. Formi is not continuously monitored, and this paragraph does not promise that we will identify or act on any situation.

Business transactions. Information may be transferred as part of a merger, financing, acquisition, reorganization, bankruptcy, or sale of all or part of the business. A recipient will remain subject to this Policy unless you are given notice of a different policy.

With your direction. We may disclose information when you ask us to or give permission.

What We Do Not Do

We do not sell personal information or consumer health data for money. We do not use conversation content or consumer health data for targeted advertising. We do not disclose consumer health data to data brokers. We do not use geofencing around health care or recovery service locations to identify or target people based on their visits.

We do not share identifiable conversation content with social media or advertising platforms for advertising, conversion tracking, or audience building.

We do not sell personal information or consumer health data for money. We do not use conversation content or consumer health data for targeted advertising. We do not disclose consumer health data to data brokers. We do not use geofencing around health care or recovery service locations to identify or target people based on their visits.

We do not share identifiable conversation content with social media or advertising platforms for advertising, conversion tracking, or audience building.

Cookies and Analytics

The Formi website may use cookies and similar technologies to keep the site working, remember preferences, understand traffic, prevent fraud, and measure performance. We currently may use Google Analytics and form services such as Tally for website analytics and signup submissions.

Analytics tools may collect device and usage information. We do not intentionally send the substance of Formi conversations to website analytics tools. You can limit cookies through your browser settings, although parts of the website may not work correctly. Where required, we will ask for consent before using nonessential cookies.

The Formi website may use cookies and similar technologies to keep the site working, remember preferences, understand traffic, prevent fraud, and measure performance. We currently may use Google Analytics and form services such as Tally for website analytics and signup submissions.

Analytics tools may collect device and usage information. We do not intentionally send the substance of Formi conversations to website analytics tools. You can limit cookies through your browser settings, although parts of the website may not work correctly. Where required, we will ask for consent before using nonessential cookies.

Consumer Health Data

Depending on where you live, information about mental health, substance use, recovery, treatment, symptoms, medication, or similar matters may be treated as consumer health data even when HIPAA does not apply.

The categories of consumer health data we may collect are conversation content, information about health or recovery goals, treatment or program participation, symptoms or emotional state, medication or care information you choose to share, safety-related statements, and inferences made from that information to personalize Formi or provide recommendations.

We collect consumer health data from you, from your use of Formi, and, when applicable, from an organization that gives you access. We use it to provide and personalize Formi, maintain continuity between sessions, generate recommendations, operate safety features, improve the service, secure the platform, and comply with law.

We may disclose consumer health data to contracted service providers that host or process Formi, including AI technology providers, and to an organization that gives you access only as described in this Policy or a separate notice. You may request a list of specific third parties or affiliates that received your consumer health data where applicable law gives you that right.

We will obtain consent when required before collecting or disclosing consumer health data for a purpose that is not necessary to provide the service you requested. We will obtain a separate authorization before selling consumer health data. As stated above, we do not currently sell it.

Depending on where you live, information about mental health, substance use, recovery, treatment, symptoms, medication, or similar matters may be treated as consumer health data even when HIPAA does not apply.

The categories of consumer health data we may collect are conversation content, information about health or recovery goals, treatment or program participation, symptoms or emotional state, medication or care information you choose to share, safety-related statements, and inferences made from that information to personalize Formi or provide recommendations.

We collect consumer health data from you, from your use of Formi, and, when applicable, from an organization that gives you access. We use it to provide and personalize Formi, maintain continuity between sessions, generate recommendations, operate safety features, improve the service, secure the platform, and comply with law.

We may disclose consumer health data to contracted service providers that host or process Formi, including AI technology providers, and to an organization that gives you access only as described in this Policy or a separate notice. You may request a list of specific third parties or affiliates that received your consumer health data where applicable law gives you that right.

We will obtain consent when required before collecting or disclosing consumer health data for a purpose that is not necessary to provide the service you requested. We will obtain a separate authorization before selling consumer health data. As stated above, we do not currently sell it.

Data Retention

We keep information only for as long as reasonably needed for the purposes described in this Policy. The retention period depends on the type of information, the reason it was collected, account status, contractual requirements, safety and security needs, and legal obligations.

Conversation content and account information may be kept while your account is active and for a reasonable period after it is closed so we can provide the service, honor deletion and appeal processes, investigate security issues, resolve disputes, and meet legal obligations. Backup copies may remain for a limited period before they are overwritten or deleted through ordinary system processes.

We may keep aggregated or deidentified information that does not reasonably identify you. We may also retain information when the law requires it or when it is reasonably necessary to establish, exercise, or defend legal claims.

We keep information only for as long as reasonably needed for the purposes described in this Policy. The retention period depends on the type of information, the reason it was collected, account status, contractual requirements, safety and security needs, and legal obligations.

Conversation content and account information may be kept while your account is active and for a reasonable period after it is closed so we can provide the service, honor deletion and appeal processes, investigate security issues, resolve disputes, and meet legal obligations. Backup copies may remain for a limited period before they are overwritten or deleted through ordinary system processes.

We may keep aggregated or deidentified information that does not reasonably identify you. We may also retain information when the law requires it or when it is reasonably necessary to establish, exercise, or defend legal claims.

Security

We use administrative, technical, and physical safeguards designed to protect information. These may include access controls, encryption in transit, vendor review, logging, secure development practices, and limits on employee and contractor access.

No online service can guarantee complete security. You are responsible for protecting your account credentials and for using Formi on a device and network you trust. Contact us promptly if you believe your account or information has been compromised.

If a security incident requires notice under applicable law, we will provide the required notice.

We use administrative, technical, and physical safeguards designed to protect information. These may include access controls, encryption in transit, vendor review, logging, secure development practices, and limits on employee and contractor access.

No online service can guarantee complete security. You are responsible for protecting your account credentials and for using Formi on a device and network you trust. Contact us promptly if you believe your account or information has been compromised.

If a security incident requires notice under applicable law, we will provide the required notice.

Your Choices and Privacy Rights

You may ask to access, correct, delete, or obtain a copy of personal information we maintain about you. You may also ask us to withdraw consent, restrict or object to certain processing, or provide information about third parties that received your data, where applicable law provides those rights.

You may update some information through your profile or account settings. You may unsubscribe from nonessential emails by using the link in the message or contacting us. Service and security notices may continue while your account remains active.

To make a request, email mili@formiforward.com from the address associated with your account. Describe the right you want to exercise. We may need to verify your identity before completing the request. You may use an authorized agent where permitted by law, but we may require proof of the agent's authority and verification of your identity.

We will respond within the time required by applicable law. We may deny or limit a request when the law permits, such as when we cannot verify the request, the information is needed for security or legal reasons, or fulfilling the request would affect another person's rights.

If we deny your request, you may appeal by replying to our decision and stating that you want an appeal. We will review the appeal and provide a written response. You may also contact the privacy or consumer protection authority in your state.

You may ask to access, correct, delete, or obtain a copy of personal information we maintain about you. You may also ask us to withdraw consent, restrict or object to certain processing, or provide information about third parties that received your data, where applicable law provides those rights.

You may update some information through your profile or account settings. You may unsubscribe from nonessential emails by using the link in the message or contacting us. Service and security notices may continue while your account remains active.

To make a request, email mili@formiforward.com from the address associated with your account. Describe the right you want to exercise. We may need to verify your identity before completing the request. You may use an authorized agent where permitted by law, but we may require proof of the agent's authority and verification of your identity.

We will respond within the time required by applicable law. We may deny or limit a request when the law permits, such as when we cannot verify the request, the information is needed for security or legal reasons, or fulfilling the request would affect another person's rights.

If we deny your request, you may appeal by replying to our decision and stating that you want an appeal. We will review the appeal and provide a written response. You may also contact the privacy or consumer protection authority in your state.

California Privacy Information

California residents may have rights to know, access, correct, delete, and obtain information about certain disclosures of personal information, and to opt out of sale or sharing for cross-context behavioral advertising. We do not sell personal information and do not share personal information for cross-context behavioral advertising as those terms are commonly used under California law.

We do not discriminate against you for exercising a privacy right. California's "Shine the Light" law may allow residents to request information about certain disclosures for direct marketing. We do not disclose personal information to third parties for their own direct marketing.

California residents may have rights to know, access, correct, delete, and obtain information about certain disclosures of personal information, and to opt out of sale or sharing for cross-context behavioral advertising. We do not sell personal information and do not share personal information for cross-context behavioral advertising as those terms are commonly used under California law.

We do not discriminate against you for exercising a privacy right. California's "Shine the Light" law may allow residents to request information about certain disclosures for direct marketing. We do not disclose personal information to third parties for their own direct marketing.

Children

Formi is not intended for anyone under age 18. We do not knowingly collect personal information from children. If you believe a person under 18 has used Formi or provided information, contact us at mili@formiforward.com so we can review and delete the information as appropriate.

Formi is not intended for anyone under age 18. We do not knowingly collect personal information from children. If you believe a person under 18 has used Formi or provided information, contact us at mili@formiforward.com so we can review and delete the information as appropriate.

United States Service

Formi is intended for use in the United States. Information may be stored and processed in the United States and in other countries where our service providers operate. Those countries may have different privacy laws. Where required, we use contractual or other safeguards for cross-border transfers.

Formi is intended for use in the United States. Information may be stored and processed in the United States and in other countries where our service providers operate. Those countries may have different privacy laws. Where required, we use contractual or other safeguards for cross-border transfers.

Third-Party Sites and Services

Formi may link to outside resources or services. This Policy does not apply to information collected by a third party that operates under its own privacy policy. Review the privacy terms of any outside service before providing information.

Formi may link to outside resources or services. This Policy does not apply to information collected by a third party that operates under its own privacy policy. Review the privacy terms of any outside service before providing information.

Changes to This Policy

We may update this Policy as Formi develops or legal requirements change. We will post the revised Policy and update the effective date. If a change materially affects how we use information already collected, we will provide additional notice and seek consent when required.

We may update this Policy as Formi develops or legal requirements change. We will post the revised Policy and update the effective date. If a change materially affects how we use information already collected, we will provide additional notice and seek consent when required.

Contact Us

Questions, privacy requests, and complaints may be sent to:

The Mindfull Company, Inc.
mili@formiforward.com
www.formiforward.com

Questions, privacy requests, and complaints may be sent to:

The Mindfull Company, Inc.
mili@formiforward.com
www.formiforward.com

You've taken hard steps before. This one's simple.

Join the Alpha and help shape a new kind of support — built around real life, not perfect days.

Get early access

You've taken hard steps before. This one's simple.

Join the Alpha and help shape a new kind of support — built around real life, not perfect days.

Get early access

You've taken hard steps before. This one's simple.

Join the Alpha and help shape a new kind of support — built around real life, not perfect days.

Get early access