Privacy Policy

1. Introduction

MindFold ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mental health journaling application and related services (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address and authentication credentials when you create an account.
• Journal Entries: The content you write in your journal entries, including personal thoughts, feelings, and experiences.
• User Preferences: Settings and preferences you configure within the application.

2.2 Automatically Collected Information

• Usage Data: Information about how you interact with the Service, including access times and pages viewed.
• Device Information: Browser type, operating system, and device identifiers.

2.3 AI-Generated Content

We use artificial intelligence to analyze your journal entries and provide insights, reflections, and mental health metrics. This AI processing occurs to provide the core functionality of the Service.

3. How We Use Your Information

• To provide, maintain, and improve the Service
• To generate AI-powered insights and reflections from your journal entries
• To calculate mental health metrics and track patterns over time
• To send you notifications and updates about the Service
• To respond to your inquiries and provide customer support
• To detect, prevent, and address technical issues and security threats

4. Data Storage and Security

Your data is stored securely using Supabase, a trusted cloud infrastructure provider. We implement industry-standard security measures including:

• Encryption of data in transit (TLS/SSL) and at rest
• Row-level security policies ensuring you can only access your own data
• Regular security audits and updates
• Secure authentication through Supabase Auth

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: With third-party vendors who assist us in operating the Service (e.g., Supabase for database, Google for AI processing)
• Legal Requirements: When required by law or to respond to valid legal processes
• Protection of Rights: To protect our rights, privacy, safety, or property
• Business Transfers: In connection with a merger, acquisition, or sale of assets

6. Your Rights and Choices

You have the right to:

• Access: Request access to your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your account and associated data
• Export: Request a copy of your data in a portable format
• Withdraw Consent: Withdraw consent for data processing at any time

To exercise these rights, please contact us through the application settings or at the contact information provided below.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you the Service. You may delete your journal entries at any time. Upon account deletion, we will delete or anonymize your data within 30 days, except where we are required to retain it for legal or legitimate business purposes.

8. Children's Privacy

The Service is not intended for individuals under the age of 13 (or 16 in the European Union). We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws different from your country. By using the Service, you consent to the transfer of your information to these countries.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us through the application or by visiting our support channels.