Privacy policy

Who takes care of your data

The MindFree app is developed by MindFree, the controller of your personal data under Brazil’s General Data Protection Law (LGPD, Law No. 13,709/2018). Privacy contact: contato@mindfree.com.br.

What stays on your phone

Your name, your preferences (colors, times and language), your tasks, your voice recordings and their text, and the photos you post on the wall. Without an account, all of this is stored only on your device.

On Android, MindFree is excluded from Google’s automatic backup: this data does not leave the device. On iPhone, if iCloud backup is on, it may be included in your account’s backup, under Apple’s rules.

If you create an account

Your email, your password (stored securely by Supabase, never in plain text), your name, your settings and your tasks and nights are stored on Supabase servers in the us-east-1 region, in the United States, so you don’t lose anything and can use the app on another phone. By creating an account, you agree to this international transfer of data.

If you sign in with Google, we receive your name, email and profile picture from Google to create the account. Your Google password never reaches us.

The app’s emails (the code that confirms sign-up, the new-password code and the welcome email) are sent by Resend, in the United States, which receives only your email address and the message content.

Voice recordings and the text of what you said stay only on your phone. The audio of each recording is deleted from the phone 7 days after it is organized; the text and the tasks remain. Wall photos leave it only when you post (see "If you join the network").

When you sign out, tasks are deleted from this phone and remain in the account. When you delete the account, everything in it is deleted from the server.

Every day the server keeps a backup copy of the database, only to recover data in case of failure; it is kept for 14 days, on the same server, without recordings or photos. After that, what you deleted is gone from the copy as well.

If you join the network (Friends’ sky)

The network only exists for people with an account who choose an @. When you join, Supabase servers (us-east-1 region, in the United States) store: your @, your name, your bio, whether your account is private, who you follow and who follows you, sparkles and nudges, and your invite code.

People you approve (private account) or who follow you (public account) see only the days you lit a star, how many stars you have this month and whether you lit one today. Never what you said, the text, your tasks or the time you recorded.

Anyone with an account can find you in search and see your @, your name and whether your account is private.

When you post on the wall, the photo (downsized), the task you chose and the caption go to Supabase servers. People who follow you see the post, how many sparkles it has and who sent them. After 7 days, the post and the photo are deleted from the server, and your copy stays on your phone, on your Profile. You can delete a post before then.

Before a post is published, its photo and text go through OpenAI’s moderation filter, which only answers whether the content breaks the rules (such as nudity, violence or hate). If it does, the post is not published and the photo is deleted. The MindFree team reviews reports and may delete a post or suspend an account from the network; whoever was moderated gets a notice in the app with the reason.

If you block someone, we keep a record of who blocked whom until you unblock. If you report a person or a post, we keep the reason, any text you write and, for a post, its task and caption, only for the MindFree team to review. The other person is not told.

Friends’ alerts: to tell you about a sparkle, a nudge, a sparkle on the wall or a follow request, we store this phone’s alert address, which alerts you want, your evening and morning times, your time zone and the app language. The alert goes through Expo (Expo Push) and Google (Firebase) or Apple, carrying the sender’s name and, for the wall, the post’s task. Each kind of alert can be turned off in Settings → Notifications, and when you sign out this phone stops receiving them.

To leave the network, unfollow people or delete your account (Settings → Privacy → Delete all my data): your network profile, followers, sparkles, wall posts and photos, blocks, the reports you made and your code are deleted with it.

When something leaves your phone

Only when AI organizing is on and you record or write. At that moment, the audio (or the text), the date, the time and the app language are sent over an encrypted connection to the MindFree server, hosted on Supabase, which passes them on to:

• OpenAI, which turns speech into text;
• Anthropic, which organizes the text into tasks with a day and time.

The result comes back to your phone. The MindFree server does not store the audio, the text or the tasks.

Even without an account, the app creates an anonymous identifier, with no name or email, only to count how many times a day AI is used and to prevent abuse.

On the network (Friends’ sky), what is shared and who sees it is in the section "If you join the network".

What OpenAI and Anthropic do with it

Under both companies’ current policies, data sent through their APIs is not used to train AI models and is deleted within 30 days. It may be kept longer only when required by law or to fight abuse.

Both companies are in the United States. By turning on AI organizing, you specifically consent to this international transfer of data.

Website and waitlist

The website mindfree.com.br is hosted by Cloudflare, in the United States. To deliver the pages and protect the site, Cloudflare processes technical access data, such as the IP address. The site does not use its own cookies, ads or visitor analytics tools; Cloudflare may use strictly technical security cookies.

If you join the waitlist, we keep your email, the page language and the date you agreed, only to let you know when MindFree reaches the stores and when MindFree Plus launches. The legal basis is your consent, and the data is kept in a Cloudflare database.

To prevent abuse of the form, we compute a code from your IP address, which does not allow the address to be recovered, and keep it for up to 2 days.

You can leave the list whenever you want, through the link in every email or by writing to contato@mindfree.com.br. The whole list is deleted within 30 days after the MindFree Plus launch notice.

Who helps us run the app

These companies process data on our behalf (they are our processors), each one only to provide its service to MindFree:

• Supabase (United States): server, database, sign-in and the wall photos;
• OpenAI (United States): turns speech into text;
• Anthropic (United States): organizes the text into tasks;
• Resend (United States): sends the confirmation and new-password emails;
• Cloudflare (United States): hosts the website mindfree.com.br and stores the waitlist;
• Expo (United States): delivers friends’ notifications (push) to Google and Apple, using your phone’s notification identifier.

If you write to contato@mindfree.com.br, the message goes through Cloudflare and reaches our mailbox at Google.

What we use your data for

Only to make the app work: organize your tasks, remind you at the times you chose and show your sky. We don’t sell your data, show ads or build profiles about you.

Sensitive data

What you say may include sensitive information, such as health data. It is processed only to become tasks and only with your consent. Avoid saying passwords, card numbers or ID numbers.

Your rights

Under the LGPD, you can learn what data we process and who we share it with, correct it, delete it, take it to another service and withdraw your consent at any time, free of charge.

In the app: Settings → Privacy, to export your data to a file ("Export my data"), turn off AI organizing or delete all your data (and your account, if you have one). For any other request, write to contato@mindfree.com.br.

Phone permissions

Microphone: only to record when you tap record. Camera: only when you take a photo to post. Notifications: for reminders. Alarms & reminders (Android): only so each reminder arrives at the exact minute. The gallery opens through the system’s own picker, which gives the app only the photo you choose.

Children

MindFree is not intended for children under 13. To create an account and join the network you must be 13 or older, and sign-up asks you to confirm it. We do not knowingly collect children’s data; if we learn of an account belonging to someone under 13, it is deleted. Parents and guardians can write to contato@mindfree.com.br.

Changes to this policy

If this policy changes in an important way, the app will let you know and, when needed, ask for your consent again.