Privacy Policy

General Privacy Policy

Privacy Policy Last updated: 2025 

Mental Muscle Coaching (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This policy explains how we collect, use, and protect any personal information you provide to us through this website.

  1. Who We Are:
    This website is operated by Paul Miller, trading as Mental Muscle Coaching, based in the United Kingdom. For data protection enquiries, please contact us via the contact form on this website.

  2. What Information We Collect:
    We may collect the following personal information when you use our contact form or communicate with us:
  • Your name 
  • Your email address 
  • Your organisation name (if provided) 
  • The content of any message you send us 


We do not collect sensitive personal data, payment information, or data from minors. We do not use cookies beyond those strictly necessary for website functionality.

  1. How We Use Your Information:
    We use the information you provide solely to:
  • Respond to your enquiry 
  • Arrange and manage coaching engagements 
  • Send relevant information you have requested 


We will never sell, rent, or share your personal data with third parties for marketing purposes.

  1. Legal Basis for Processing:
    We process your data on the basis of legitimate interest (responding to your enquiry) and, where applicable, with your explicit consent.

  2. How Long We Keep Your Data:
    Enquiry data is retained for up to 12 months. Data relating to active or completed coaching engagements is retained for up to 6 years in line with standard UK business practice, after which it is securely deleted.

  3. Your Rights Under UK GDPR:
    You have the right to:
  • Access the personal data we hold about you 
  • Request correction of inaccurate data 
  • Request deletion of your data 
  • Object to or restrict how we process your data 
  • Lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk 


To exercise any of these rights, please contact us via the contact form.

  1. Data Security:
    We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Our website uses HTTPS encryption.

  2. Third-Party Services:
    This website may use third-party tools such as a contact form provider or analytics service. Where this is the case, those providers are bound by their own privacy policies and GDPR compliance obligations. We do not use advertising trackers.

  3. Changes to This Policy:
    We may update this policy from time to time. The most current version will always be available on this page, with the date of last update shown at the top.

  4. Contact:
    For any privacy-related questions, please use the contact form on our website.

Myles AI Coach Privacy Policy

Effective Date: 29 April 2026
Replaces version dated: 02 July 2025

Data Controller: The Mental Muscle Company Ltd (Company No. 08449580)
ICO Registration: ZB026467

Service URL: https://thementalmusclecompany.co.uk/myles-ai-coach/
Contact: support@thementalmusclecompany.co.uk

  1. Who We Are
    The Mental Muscle Company Ltd owns and operates Myles. We are the data controller for all personal data collected through the Service.

  2. About the Myles Service
    Myles is an AI-powered reflective companion designed to support emotional awareness, journalling, and decision clarity.
    Important: Myles is not a clinical tool and does not provide medical advice or crisis support.

  3. Personal Data We Collect
    1. Account and Registration Data
      • Name and email address
      • Password (hashed and encrypted)
      • Account type
      • Registration and activity data
    2. Subscription and Payment Data
      • Subscription tier and billing cycle
      • Payment details (processed by third parties)
      • Transaction history
    3. Wellness and Emotional Content (Special Category Data)
      • Mood check-ins
      • Journal entries
      • Conversation inputs/outputs
      • Any additional personal content shared
    4. Usage and Technical Data
      • Session data and usage patterns
      • Device and browser info
      • IP address (approximate location only)
    5. Human Review Data
      Only where explicit consent is provided.

  4. How We Use Your Data
    Account management: Account data – Legal Basis: Contract
    Service delivery: Wellness + account data – Legal Basis: Consent + Contract
    Payments: Payment data – Legal Basis: Contract
    Service improvement: Usage data – Legal Basis: Legitimate interests

    We do not sell your data or use it to train AI models.

  5. Consent
    You must provide explicit consent for processing sensitive data.
    • AI processing consent
    • Optional human review consent

  6. AI Processing and OpenAI
    Myles uses OpenAI’s API for generating responses. Data shared is processed under strict agreements and not used for model training.

  7. Data Sharing
    • Service providers (OpenAI, payment processors, hosting)
    • Organisation clients (aggregated data only)
    • Legal obligations

  8. International Transfers
    Data may be transferred outside the UK with appropriate safeguards (SCCs, IDTAs).

  9. Data Retention
    Account data: Account duration + 6 years
    Wellness content: Active + 90 days
    Payment data: 7 years

  10. Your Rights
    • Access your data
    • Correct inaccuracies
    • Request deletion
    • Withdraw consent

  11. Security
    • Encryption (TLS/HTTPS)
    • Secure password storage
    • Access controls

  12. Children’s Privacy
    Myles is for users aged 18+ only.

  13. Cookies
    We use essential and analytics cookies only.

  14. Support
    Contact support if any interaction causes distress.

  15. Changes to This Policy
    We will notify users of material changes at least 14 days in advance.

  16. Governing Law
    England and Wales.

  17. Contact
    The Mental Muscle Company Ltd
    Fareham, UK
    Email: support@thementalmusclecompany.co.uk