ℹ️

Privacy Commitment: MindBook does not sell your personal data, track your activity across third-party websites, or display targeted third-party advertising. All personal reflections are encrypted and governed by strict audience boundaries.

1. Overview & Scope

MindBook ("we", "our", or "the App") is committed to protecting your privacy and digital wellbeing. This Privacy Policy describes how we collect, handle, protect, and delete your information across our mobile applications and related web services.

This policy adheres strictly to the Google Play Developer Distribution Agreement, Apple App Store Review Guidelines (Guideline 5.1.1), the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and India's Digital Personal Data Protection (DPDP) Act 2023.

2. Information We Collect

We collect only the minimum information necessary to provide our mindful community services:

  • Account Credentials: Email address, display name, username, and encrypted password hash (managed securely via Supabase Auth).
  • Profile Information: Optional bio text, profile avatar, and banner images you choose to upload.
  • Authored Content: Personal journal entries, mood reflections, daily challenge logs, photos, and posts you submit.
  • Social Connections: Your friend list, follower status, comments, and post reactions.
  • Technical Diagnostics: App version, operating system release, and crash logs to maintain stability. We do not harvest unique device IMEI or advertising identifiers.

3. Device Permissions & Why They Are Requested

MindBook requests device permissions only when explicitly activated by you:

  • Camera (CAMERA): Required only if you choose to take a photo directly inside the app to attach to a post or avatar.
  • Photos & Storage (READ_MEDIA_IMAGES): Required only when you select an image or media from your device gallery to share.
  • Notifications (POST_NOTIFICATIONS): Optional permission for daily mindful reflection reminders and connection alerts. You can disable this anytime in your device settings.

4. How We Use Information

Your information is used strictly to:

  • Authenticate your account and safeguard against unauthorized access.
  • Deliver your chronological feed according to your chosen audience visibility (Public, Friends Only, or Only Me).
  • Calculate your mindful habits, streak counts, and wellness badges.
  • Send essential transactional notifications (such as password resets and account security notices).

5. Data Security & Storage Architecture

We implement enterprise-grade security controls to protect your data:

  • PostgreSQL Row-Level Security (RLS): Every database row is governed by cryptographic policies at the database layer. Unauthorized users cannot query or mutate private entries.
  • End-to-End Encryption: All communications between the app and our servers use TLS 1.3 encryption with 256-bit certificates. Storage media and database backups are encrypted at rest with AES-256.

6. Third-Party Disclosures & Zero-Ad Guarantee

Zero Advertising Tracking: We do not monetize your attention, sell behavioral profiles to data brokers, or include third-party advertising SDKs.

We share data only with essential cloud infrastructure providers under strict confidentiality agreements:

  • Supabase: Cloud database, authentication, and secure media storage.
  • Transactional SMTP Providers: For delivering system verification and password reset emails.
  • Cloudflare / Global CDN: Edge caching for compliance documentation and DDoS mitigation.

7. Your Privacy Rights (GDPR & CCPA)

Under international data protection frameworks, you have full ownership of your data:

  • Right to Access: View all personal data stored in your profile at any time.
  • Right to Rectification: Edit or update any profile details directly within the app.
  • Right to Erasure: Permanently delete your account and all associated records at any time.

8. Children's Privacy (Under 13 Policy)

MindBook is designed for users aged 13 and older. We do not knowingly collect personal information from children under 13. If we discover an account created by a child under 13, it will be immediately terminated and its records purged.

9. Data Retention & Deletion Protocol

We retain your data only while your account is active. When you request account deletion, all personal data is permanently wiped within 48 hours.

To submit an immediate deletion request, visit our Account & Data Deletion Portal or navigate to Settings → Account Settings → Delete Account inside the app.

10. Contacting the Privacy Team

For questions or requests regarding this Privacy Policy, please contact our Data Protection Officer:

MindBook Privacy & Compliance
Email: privacy@mindbook.in
Help Center: mindbook.in/support

Was this article helpful?