At MindLogs we take your privacy very seriously. This Privacy Policy explains what personal data we process when you use the MindLogs app and the mindlogs.app website (the "Service"), for what purposes, on what legal basis and what rights you have, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
1. Data controller
Evergreen Projects S.L.
Tax ID (CIF): B67516815
Address: Avenida Roma 43, 08029 Barcelona, Spain
Privacy contact: hola@mindlogs.app/ contacto@evergreenprojects.net
2. Data we process
Depending on how you use the Service, we may process the following categories of data:
- Account data: your email address and the authentication data needed to create and access your account.
- Journal content: the emotions, sensations, thoughts, reflections and any other information you record in your entries. This information may reveal details about your mood and emotional well-being (see section 4).
- Subscription and payment data: information about your plan, subscription status and purchases. Payments are processed through the App Store or Google Play; we never receive or store your card details.
- Usage and technical data: information about how the app runs, device identifiers, diagnostic data and aggregated usage statistics that help us improve the Service.
- Communications: the data you give us when you contact support.
3. Where your journal is stored
Your journal content is stored encrypted on your device. When you use features that require a connection, such as syncing your account or AI-powered feedback and insights, only the data strictly necessary to provide those features is securely transmitted to our providers (see sections 5 and 6).
4. Special category data
The content you record in MindLogs may include sensitive information about your emotional or mental health, which the GDPR considers a "special category" of data. We process this information on the basis of your explicit consent, which you give when you use the Service to record your entries and, where applicable, when you turn on the AI features. You can withdraw your consent at any time by stopping using the Service and deleting your data.
5. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Creating and managing your account and providing the Service | Performance of a contract (these Terms of Use) |
| Recording and displaying your journal content | Explicit consent (special category data) |
| Generating AI-powered feedback and insights | Explicit consent |
| Managing subscriptions, payments and the referral program | Performance of a contract |
| Keeping the Service secure and improving it | Legitimate interest |
| Answering your support requests | Performance of a contract / Legitimate interest |
| Complying with legal obligations (for example, tax obligations) | Legal obligation |
6. Providers and recipients
We do not sell your personal data. To provide the Service we rely on providers that act as data processors, under contracts that guarantee the protection of your data:
- Supabase: infrastructure for authentication, account management, subscriptions and referrals.
- RevenueCat: technical management of subscription status.
- OpenAI: processing of the text needed to generate AI-powered feedback and insights, when you turn on these features.
- Apple App Store and Google Play: processing of payments and subscriptions.
- Web hosting provider: hosting of the mindlogs.app website.
We may also disclose data to public authorities when we are legally required to do so.
7. International transfers
Some of our providers may process data outside the European Economic Area. In those cases, we make sure the transfer is covered by mechanisms that are valid under the GDPR, such as adequacy decisions of the European Commission or Standard Contractual Clauses.
8. Retention period
We keep your data for as long as your account is active and you use the Service. When you delete your account or withdraw your consent, we will delete or anonymize your data, except for any data we must keep to comply with legal obligations or to handle possible liabilities, for the periods required by law.
9. Your rights
You can exercise the following rights at any time:
- Access to your personal data.
- Rectification of inaccurate or incomplete data.
- Erasure of your data (the "right to be forgotten").
- Restriction of processing.
- Objection to processing.
- Portability of your data.
- Withdrawal of consent you have given, without affecting the lawfulness of prior processing.
To exercise them, email us at hola@mindlogs.app. If you believe we have not handled your request properly, you have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
10. Security
We apply appropriate technical and organizational measures to protect your data, including encryption of your journal content on your device and the use of secure connections. No system is completely infallible, but we work to maintain a level of security that matches the sensitivity of the information we process.
11. Minors
The Service is intended for people aged 16 or older. We do not knowingly collect data from anyone under that age. If we become aware that we have processed data from someone under 16 without an appropriate legal basis, we will delete it.
12. Cookies and similar technologies
The mindlogs.app website only uses the technical cookies it needs to work. If we add analytics or third-party cookies in the future, we will let you know and, where required, ask for your consent first.
13. Changes to this Policy
We may update this Privacy Policy to reflect legal changes or changes to the Service. We will publish the current version on this page with the date of the last update and, when the changes are significant, we will notify you by reasonable means.
14. Contact
If you have any questions about this Privacy Policy or about how we process your data, contact us at hola@mindlogs.app.