Privacy Policy

Effective date: March 26, 2026

MindLink ("we", "our", "the App") respects your privacy. This policy explains what data we collect, why, and how we protect it.

1. Data We Collect

Data	Purpose	Stored Where
Email address	Account creation & login	Supabase Auth
Display name	Personalization	Supabase DB
Tasks, notes, ideas	Core app functionality	Device + Supabase DB
Conversation history	Luna AI context	Device + Supabase DB
Subscription status	Feature access	RevenueCat
Anonymous usage signals	App improvement	TelemetryDeck

2. Data We Do NOT Collect

We do not sell your data to third parties.
We do not collect precise location data.
We do not use advertising trackers or ad SDKs.
We do not access your contacts without explicit permission.

3. Third-Party Services

Supabase (Backend & Auth)

Your account data and synced content are stored in Supabase's infrastructure (AWS, EU/US regions). Row Level Security ensures only you can access your data. Supabase Privacy Policy.

RevenueCat (Subscriptions)

Manages subscription status. Receives your anonymous app user ID and purchase receipts. Does not receive your name or email. RevenueCat Privacy Policy.

TelemetryDeck (Analytics)

Collects anonymous, aggregated usage signals (e.g., "a task was created"). TelemetryDeck is privacy-first: no personal data, no IP addresses, no device fingerprinting. TelemetryDeck Privacy Policy.

xAI (AI Assistant)

When you use Luna, your messages are sent to xAI's Grok API to generate responses. Messages are transmitted through our secure server proxy; your identity is not shared with xAI. xAI Privacy Policy.

4. Data Storage & Security

All data is stored locally on your device (SwiftData) and synced to Supabase over HTTPS/TLS.
Database access is protected by Row Level Security (RLS) — only your authenticated session can access your rows.
API keys for third-party AI services are stored server-side only and never included in the app binary.
Authentication tokens are stored in the iOS Keychain.

5. Data Retention

Your data is retained as long as your account is active. When you delete your account (Settings > Delete Account), all your data is permanently removed from our servers within 30 days.

6. Your Rights

You have the right to:

Access your data (it's all visible in the app)
Export your data (contact us)
Delete your data (Settings > Delete Account)
Withdraw consent at any time by deleting your account

7. Children's Privacy

MindLink is not intended for children under 13. We do not knowingly collect data from children under 13. If you believe we have, contact us and we will delete it.

8. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated through the App. The "Effective date" above reflects the latest revision.

9. Contact

For privacy questions or data requests, contact us via our privacy request form.