Privacy Policy
MindVault is a study app. You save things you want to remember, and it quizzes you on them over time. This policy explains what that requires us to store, who else sees it, and how to get rid of it.
What we collect
Account information
Your email address, and the display name and handle you choose. If you sign in with Google, we receive your email address and name from Google. We never receive your Google password.
What you save
The text you capture, whether pasted, dictated, scanned, or shared from another app. Also the concepts and quiz questions generated from it, and your answers to those questions. This is the substance of the product: without it there is nothing to review.
Your progress
XP, level, streak, review history, scheduling data, trophies, friends, and any items you have unlocked.
What we do not collect
We do not use advertising identifiers, we do not track you across other companies’ apps or websites, and we do not sell personal information. The mobile app ships no analytics SDK.
Photos and camera images are read on your device to extract their text. The images themselves are never uploaded. Only the text you choose to save leaves the device. Dictation is transcribed on your device wherever your language supports it.
The Chrome extension
The extension reads a page only when you ask it to, and sends nothing until you press a button. Pressing Savein its toolbar menu sends the page’s text, or just the text you selected. Pressing Vaulton a YouTube video sends the video’s captions. Pressing Vault under a ChatGPT, Claude or Gemini response sends that response. What you send is handled exactly like anything else you save, as described above. Opening the toolbar menu reads the current page to show you a preview, and that preview stays in your browser.
One check happens without a click. While you are signed in, on a YouTube video or a ChatGPT, Claude or Gemini conversation, the extension asks MindVault whether that video or response is already in your vault, so its button can say In Vault. That check sends the page’s address and, for a chat response, its first 500 characters. They are compared against your vault and not stored.
The extension does not sign you in on its own. When you sign in at mindvaultrecall.com, it copies your session from that site so it can save to your account. The session is kept in the browser’s storage for the extension and removed when you sign out. The extension runs on YouTube, ChatGPT, Claude, Gemini and mindvaultrecall.com, and on any other page only when you open its menu there. It does not read your browsing history.
MindVault’s use of information received from the extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. We use it only to save what you ask to save and to quiz you on it. We do not sell it, use it for advertising, or use it to determine creditworthiness.
Who else sees it
Turning saved text into concepts and quiz questions requires sending that text to a third-party language model. This is the most important disclosure on this page, so we will put it plainly: text you capture is transmitted to the providers listed below for processing. Do not save anything you are not willing to have processed this way.
- Google Firebase: Authentication, database hosting, and crash reporting for the mobile app.
- OpenRouter: Turns captured text into concepts and quiz questions, grades typed answers, and generates the embeddings used to group related concepts. It routes each request to the model provider serving that model.
- Vercel: Hosts the website.
- Render: Hosts the API and the live battle server the mobile app talks to.
We share personal information with no one else, except where the law requires it.
How other people can find you
Other signed-in users can find you by your handle, or by typing your email address in full. Partial email searches return nothing, so nobody can discover your address by guessing at it. A search result shows your display name, handle, trophy count and avatar. It never shows your email address, and it never shows anything in your vault.
How long we keep it
For as long as your account exists. Delete your account and it goes with it.
Deleting your account
You can delete your account and everything in it from inside the app: You → Account → Delete account, or the equivalent control on your profile on the web. It is immediate and permanent. Your vault, your progress, your friendships and your handle are erased, and your handle becomes available for someone else to claim. There is no recovery period and no backup we can restore from.
If you cannot reach the app, email support@mindvaultrecall.com from your account’s email address and we will do it for you.
One exception, and it is about somebody else. If you reported another user for abuse, the report stays with us so we can still act on it. Your name comes off it and anything you wrote in it is removed. What is kept is the part about the person you reported, not the part about you. Reports made about you are deleted along with everything else.
Your rights
Depending on where you live, you may have the right to access, correct, export, or delete the personal information we hold about you, and to object to some of our processing. The deletion control above exercises the strongest of these directly. For anything else, write to support@mindvaultrecall.com.
Children
MindVault is not directed at children under 13, and we do not knowingly collect their personal information. If you believe a child has created an account, contact us and we will delete it.
Security
Data is transmitted over encrypted connections and stored on Google Cloud infrastructure. No system is perfectly secure, and we do not claim otherwise.
Changes
If this policy changes in a way that affects what we collect or who we share it with, we will update the effective date above and, for material changes, tell you in the app.