Privacy Policy

1. Who is responsible

Operator: JINYANG LI (trading as Caffrey Studio). The operator is the controller of your personal information. Contact: support@mindrivo.com. The operator’s address is given promptly on request.

2. What we collect

• Account information: email address; the identifier we receive from Apple or Google (if you hide your email with Apple, the relay address Apple gives).
• Password and signed-in devices: your password is stored only as a one-way hash that we cannot read. To recognise devices that sign in with a password, we keep a number the app makes for each device (only a converted value of it), the kind of device (iPhone, browser name), and when it was confirmed and last used.
• Birth month: to check your age (when you correct it, we keep the old and new month and the time).
• A parent’s or guardian’s email address: to confirm consent for users aged 13 to 15, and to check with the parent when someone tries to change the birth month to under 13.
• Records of consent: when you agreed to the Terms and this policy, to sending data to the AI provider, and when a parent consented.
• What you enter: notes (diary), conversations, records, areas, to-dos, reviews, what the AI remembers, and settings (nickname, tone, reminder time, language, time zone and so on).
• Your voice when you speak to write: used only to turn it into text; the sound is not kept (see section 6).
• Photos and recordings: photos and recordings in your notes (recordings with Mindrivo Plus), your profile picture, and photos you send in AI conversations (encrypted like your other records).
• Usage: the days you used the Service, how much you used the AI, error logs (without diary content), the kind of device and operating system, and your country or region (the App Store’s region and the country estimated from the connection, to count users by country).
• Messages to us: what you send through “Feedback and questions” or by email, its category, the app version, device type and how you sign in (to reply and to improve the Service).
• Purchases: your Mindrivo Plus plan, period, and renewal or cancellation status (card details are handled by Apple; we never receive them).

3. Sensitive information

A diary may contain information about your health or state of mind, which the law treats as special or sensitive information. We handle it only to provide the Service, on the basis of your explicit consent at sign-up (for users aged 13 to 15, the consent of a parent or guardian), and never for advertising or any other purpose. You can withdraw that consent at any time by deleting the records or your account. When you write about other people, please respect their privacy too.

4. Why we use it, and on what basis

• To provide the Service (storing and showing your records, and making AI conversations, organizing and reviews) — to perform our contract with you; for sensitive information and sending to the AI provider, your consent.
• Sign-in, identity checks, age checks, parental consent and preventing misuse — to perform the contract, to meet legal obligations, and our legitimate interest in keeping the Service safe.
• Notices and messages about the Service (such as review reminders and emails to parents; emails never contain diary content) — to perform the contract.
• Answering your messages — to perform the contract and our legitimate interest in helping you.
• Improving the Service from usage that contains no diary content — our legitimate interest. You can object to this at any time.

5. Never used to train AI

We never use the content of your diary or conversations to train AI models, and we send it to AI providers only on the condition that they do not train on it either. We do not sell or share your personal information for advertising, and we do not use it for profiling that has legal or similarly significant effects on you.

6. Service providers

• Cloud services: Supabase, Inc. (database and sign-in), Vercel Inc. (website and servers), Amazon Web Services, Inc. (management of encryption keys; no record content is sent). All are US companies. Records are stored in the Tokyo region, encrypted with a key for each user.
• Providers that receive personal data: Anthropic, PBC (the AI “Claude”), Resend, Inc. (sending email), RevenueCat, Inc. (purchase status). All are US companies (see section 8).
• Sign-in and purchases: Apple Inc. and Google LLC (sign-in), Apple Inc. (App Store purchases and payment).
• Error logs stay within the cloud services above and contain no diary content.
• Speaking to write: on iPhone, Apple’s speech recognition turns your voice into text — on the device itself where supported, otherwise on Apple’s servers (under Apple’s policies). On the web version, your browser’s speech recognition is used (Google’s servers in Chrome, Apple’s in Safari). We keep only the text you choose to save; a recording you add to a note is stored encrypted as part of the note and is not sent for speech recognition. The microphone is used only when you allow it.

7. What is sent to the AI provider

• To Anthropic, PBC, to make AI conversations, organizing and reviews: the conversation, your recent notes (up to 10), recent records the AI organized (up to 60), your nickname, “Focus” and “What the AI remembers”, and photos you send in the conversation. For a review, that week’s records. For “Organize with AI”, the whole note. When importing diaries with “Let the AI choose”, the whole diaries being imported. When the AI searches the web, search words the AI makes are sent through Anthropic to a search service (not your diary text). Your email address and account identifier are not sent.
• Anthropic processes the data under its contract with us only to provide the Service, does not train on it, and protects it. As a rule it deletes it within 30 days; if it is automatically flagged as possibly breaking Anthropic’s usage policy, it may be kept for up to 2 years (the flag for up to 7 years), or longer where the law requires, and Anthropic staff may review it to that extent.
• Without consenting, you can still write and read your notes. You can withdraw consent at any time under Settings → “Use AI features”; data sent before may remain with the provider for the periods above.

8. International transfers

Your records are stored in Japan (Tokyo region). Japan has an adequacy decision from the European Commission and from the United Kingdom. Some providers in section 6 are in the United States. When personal data from the European Economic Area, the United Kingdom or Switzerland goes to them, we rely on the EU–US Data Privacy Framework (and its UK and Swiss extensions) where the provider is certified, or on the European Commission’s Standard Contractual Clauses (with the UK addendum), together with our contracts with the providers. US federal law has no general privacy law like Japan’s or the GDPR, and US authorities may request data from companies under US law. You can ask us for a copy of the safeguards we use.

9. Security

• All communication is encrypted (HTTPS). Notes, conversations, records, photos and recordings are encrypted on the server with a key for each user before they are stored. That key is protected by the Amazon Web Services key management service (Tokyo region), from which the master key cannot be taken out. The admin console is protected with two-step authentication.
• Only the operator can access personal data. The devices used for development and operation use screen locks and disk encryption.
• We never read your diary. Except where the law requires it, if we ever need to look into a problem, we ask for your consent first and keep a record of what was done.

10. How long we keep it, and deletion

• When you delete your account, you can no longer sign in, and your records disappear from the app.
• In case of a mistake we keep them for 30 days; during that time you can restore the account by signing in the same way as before and choosing “Restore my account”. After 30 days we delete the account, the records and that user’s key for good. Once the key is deleted, encrypted copies left in backups can never be read again.
• Records in the trash are deleted for good after 30 days.
• Messages to us are deleted one year after we finish answering (or with your account, if you delete it).
• Accounts of users aged 13 to 15 who are waiting for parental consent are deleted if no consent arrives within 30 days.
• Data sent to the AI provider is kept as described in section 7.

11. Your rights

• You can ask to see your personal information and receive a copy (including records of what we provided to others), to correct, add to or delete it, to stop or limit its use, to stop providing it to others, to receive it in a machine-readable form and have it sent to another service (portability), and to object to its use based on our legitimate interests. Where we rely on your consent, you can withdraw it at any time; this does not affect what was done before.
• Many of these you can do directly in the app (editing and deleting records, exporting your data, deleting your account). For the rest, write to the contact below from your registered email address (a parent, from the address registered for consent). We may ask for more information to confirm it is you. We answer within one month, free of charge.
• California and other US states: you have the right to know, delete and correct your personal information, and to opt out of its sale or sharing for targeted advertising and of the use of sensitive information beyond what is needed. We do not sell or share personal information, and we use sensitive information only to provide the Service. We will not treat you differently for using these rights. An authorised agent may make a request on your behalf.
• If you are in the EU or the UK, you can complain to your local data protection authority (in the UK, the Information Commissioner’s Office). In Japan, the Personal Information Protection Commission handles complaints. We would be glad if you contacted us first.

12. If there is a leak

If personal information leaks (or may have leaked), we report it to the authorities as the law requires and tell you (and, for users aged 13 to 15, their parent or guardian) by email or in the app.

13. Children

• The Service is for people aged 13 and over. We do not accept sign-ups from children under 13; if we learn an account belongs to a child under 13, we suspend it and delete the records.
• We handle the personal information of users aged 13 to 15 only after a parent or guardian consents (or from the higher age of consent your country sets). Parents can withdraw consent and ask us to delete the records at any time.
• AI conversations with users under 18 follow extra rules suited to their age. We put the best interests of children first and never use the information of users under 18 for advertising.

14. Changes to this policy

We announce changes in the app or on the website. For important changes, such as a new purpose of use, we ask for your consent again.

Contact (questions, complaints and requests)

Operator: JINYANG LI (trading as Caffrey Studio)

Contact: support@mindrivo.com

The operator’s address is given promptly on request.