Legal
Privacy Policy
Effective: 10 April 2026 · MYNDAI (myndai.in)
The short version: MYNDAI stores only what you give us to power the product. We don't sell your data, don't train AI on it, and don't share it with advertisers. Ever.
1. What we collect
We collect only what's necessary to run MYNDAI:
- Account data — your email address and, if you sign in with Google, your name and profile picture.
- Narrative data — the identity, expertise, communication style, and other sections you write in your MY Narrative.
- Thread data — thread names, descriptions, decisions, reasons, and tier assignments you create.
- Usage data — server logs (IP address, browser type, timestamps) retained for up to 30 days for security and debugging. We do not use analytics tools.
We do not collect payment card details directly — payments are processed by Lemon Squeezy, who is the Merchant of Record.
2. How we use your data
- To provide the service — store and return your Narrative and Threads so you can generate Briefings.
- To send transactional emails — account confirmation, password reset, waitlist updates. No marketing without explicit opt-in.
- To improve the product — aggregate, anonymised usage patterns (e.g. average decisions per thread). Never individual content.
- To enforce our Terms — detect abuse or violations.
We do not use your Narrative or Thread content to train any AI model, our own or anyone else's.
3. Storage & third parties
Your data is stored with the following sub-processors, each bound by their own privacy commitments:
- Supabase (supabase.com) — authentication and managed PostgreSQL database. Data hosted on AWS in the US.
- Railway (railway.app) — backend API hosting.
- Vercel (vercel.com) — frontend hosting and CDN.
- Resend (resend.com) — transactional email delivery.
- Lemon Squeezy (lemonsqueezy.com) — payment processing (Pro plan). Acts as Merchant of Record; handles billing data independently.
We do not sell, rent, or share your personal data with any third party for advertising, marketing, or profiling purposes.
4. Cookies
MYNDAI uses one cookie:
- myndai-session — a strictly necessary session flag that keeps you signed in. It contains no personal data. It expires after 7 days or when you sign out.
Because this cookie is strictly necessary for the service to function, it does not require your consent under GDPR or ePrivacy regulations. We do not use advertising cookies, tracking pixels, or analytics cookies.
5. Your rights
Under GDPR and applicable privacy laws, you have the right to:
- Access — request a copy of all personal data we hold about you.
- Correction — update inaccurate data (most data is editable directly in the app).
- Deletion — request permanent deletion of your account and all associated data.
- Portability — export your Narrative and Thread data as plain text at any time from within the app.
- Restriction — ask us to stop processing your data in certain circumstances.
- Objection — object to processing based on legitimate interest.
To exercise any of these rights, email us at privacy@myndai.in. We will respond within 30 days.
6. Data retention
We retain your data for as long as your account is active. If you delete your account, all personal data (Narrative, Threads, decisions) is permanently deleted within 30 days. Server logs are deleted after 30 days regardless.
7. Children
MYNDAI is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe a minor has created an account, contact us and we will delete it promptly.
8. Changes to this policy
If we make material changes, we will notify active users by email at least 14 days before the change takes effect. The effective date at the top of this page always reflects the current version.