Privacy Policy
MindVault is a study app. You save things you want to remember, and it quizzes you on them over time. This policy explains what that requires us to store, who else sees it, and how to get rid of it.
What we collect
Account information
Your email address, and the display name and handle you choose. If you sign in with Google, we receive your email address and name from Google — we never receive your Google password.
What you save
The text you capture — pasted, dictated, scanned, or shared from another app — along with the concepts and quiz questions generated from it, and your answers to those questions. This is the substance of the product: without it there is nothing to review.
Your progress
XP, level, streak, review history, scheduling data, trophies, friends, and any items you have unlocked.
What we do not collect
We do not use advertising identifiers, we do not track you across other companies’ apps or websites, and we do not sell personal information. The mobile app ships no analytics SDK.
Photos and camera images are read on your device to extract their text. The images themselves are never uploaded — only the text you choose to save. Dictation is transcribed on your device wherever your language supports it.
Who else sees it
Turning saved text into concepts and quiz questions requires sending that text to a third-party language model. This is the most important disclosure on this page, so we will put it plainly: text you capture is transmitted to the providers listed below for processing. Do not save anything you are not willing to have processed this way.
- Google Firebase — Authentication, database hosting, and app infrastructure.
- Google Gemini — Turns captured text into concepts and quiz questions, and generates the embeddings used to group related concepts.
- OpenRouter — Fallback provider for generating concepts and quiz questions when Gemini is unavailable.
- Vercel — Hosts the website and API.
We share personal information with no one else, except where the law requires it.
How long we keep it
For as long as your account exists. Delete your account and it goes with it.
Deleting your account
You can delete your account and everything in it from inside the app: You → Account → Delete account, or the equivalent control on your profile on the web. It is immediate and permanent — your vault, your progress, your friendships and your handle are erased, and your handle becomes available for someone else to claim. There is no recovery period and no backup we can restore from.
If you cannot reach the app, email support@mindvault.example from your account’s email address and we will do it for you.
Your rights
Depending on where you live, you may have the right to access, correct, export, or delete the personal information we hold about you, and to object to some of our processing. The deletion control above exercises the strongest of these directly. For anything else, write to support@mindvault.example.
Children
MindVault is not directed at children under 13, and we do not knowingly collect their personal information. If you believe a child has created an account, contact us and we will delete it.
Security
Data is transmitted over encrypted connections and stored on Google Cloud infrastructure. No system is perfectly secure, and we do not claim otherwise.
Changes
If this policy changes in a way that affects what we collect or who we share it with, we will update the effective date above and, for material changes, tell you in the app.