Privacy Policy

1. What we collect

When you use MindPad AI, we collect the minimum information needed to operate the service:

• Account data — your email address and, if you choose, your name.
• Content you create — brain dumps, tasks, focus sessions, and notes you save inside the app.
• Usage data — feature interactions (e.g., sessions started, tasks completed) used to provide analytics within your own account.
• Authentication data — a hashed password (never stored in plain text), or a Google account identifier if you use Google sign-in.
• Billing identifiers — a Stripe customer ID linked to your account if you subscribe. We never store your card number or payment details.

2. How we use your data

Your data is used solely to provide and improve MindPad AI:

• Authenticate your account and keep your session secure.
• Store and retrieve your brain dumps, tasks, and focus history.
• Send your content to an AI service to extract tasks and generate planning suggestions when you request it.
• Process subscription payments through Stripe.
• Send transactional emails (password reset, email verification) through a secure email delivery service.

We do not sell, rent, or share your personal data with third parties for advertising or marketing purposes.

3. AI features and third-party processing

When you use AI features (brain dump organization, task extraction, planning suggestions), the text you submit is sent to an AI API provider for processing. This provider processes your content only to generate a response and does not use it to train AI models under our agreement.

You should avoid entering sensitive personal information (medical, financial, legal, or third-party credentials) into AI-powered fields.

4. Google Calendar integration

Google Calendar integration is optional and only activated when you choose to connect it from the Settings page.

• MindPad AI requests permission to create calendar events on your behalf. This permission is used only to add focus sessions you schedule from within the app.
• MindPad AI does not read your existing calendar events, contacts, or any other data from your Google account.
• Calendar access tokens are encrypted before storage and are never exposed to the frontend or logged.
• You can disconnect Google Calendar at any time from Settings. Disconnecting removes the integration immediately.

6. Payment processing

All payment transactions are handled by Stripe, a PCI-compliant payment processor. MindPad AI never receives or stores your full card number, CVV, or bank account details. Stripe's privacy policy governs how your payment data is handled.

7. Data retention

Your account and content are retained for as long as your account is active. If you delete your account, your data will be removed from our systems within 30 days, except where retention is required by law or to resolve disputes.

8. Your rights

You can export your data, update your account information, or request account deletion at any time through the Settings page or by contacting us. Depending on your jurisdiction, you may have additional rights under applicable data protection law.

9. Cookies and local storage

MindPad AI stores your session token in browser local storage to keep you logged in. We do not use third-party advertising cookies. Basic, session-level data may be stored in cookies for authentication purposes.

10. Contact

If you have questions about this policy or your data, contact us at the email address listed in your account settings or on the MindPad AI website.