MindymPrivacy policy
Last updated: October 3, 2026
Who we are
Mindym (“we”, “us”) is an independent app. This policy covers the Mindym website, web app and mobile apps. Contact us at support@mindym.app.
What we collect, and why
| Data | Why we use it |
|---|---|
| An account ID, and your email address or Google account if you choose to save your progress | To sign you in and keep your progress safe. You can play as a guest without giving either. |
| Your display name and @username, if you set them | So friends can find you and see you on invites and boards. |
| Your device’s time zone | So daily puzzles, streaks and reminders follow your local midnight. We also use it to estimate which country you’re in, only as totals. |
| Your game, puzzle and quiz results | To score games, adapt difficulty, show your scorecard and keep your streak. |
| Your goals, interests and quiz level, if you set them | To personalise your daily workout and home screen. |
| Age range, gender and education, only if you choose to answer and agree | To compare your results with similar players and to understand who uses Mindym, only as totals. You can delete these answers at any time. |
| How you first found us: campaign tags in the link, the referring website’s domain, and the first page you opened | To learn which of our posts and channels bring players who enjoy Mindym. We never store the full address of the referring page. |
| A push notification token, if you turn on notifications | To send the reminders and alerts you’ve switched on. |
| Friends, invites, challenges and shares | To run friends, challenges and invite rewards, and to count how often Mindym is shared. |
| Purchase records (when subscriptions launch) | To give you Premium. Payments are handled by Apple, Google or Stripe; we never see your card details. |
We don’t collect your precise location, contacts, photos, advertising identifiers or your birth date. We don’t use your data to build advertising profiles, and Mindym doesn’t infer or record health conditions.
Who helps us run Mindym
We use a small number of service providers, who process data only on our instructions:
- Supabase: database, sign-in and server functions. Data is stored in Singapore.
- Cloudflare: hosting and delivery of the website and web app.
- Google: only if you choose “Continue with Google” to sign in.
- Push services run by your browser or phone maker (for example Google, Apple, Mozilla or Microsoft), and Expo for our mobile apps: only if you turn on notifications, to deliver them.
- Apple, Google and Stripe: only if you buy a subscription, to take payment.
We don’t sell or rent personal data, and we don’t share it for cross-context behavioural advertising. We may disclose data if the law requires it, or to protect the safety of our players or service.
What other players can see
Friends can see your display name, @username, streak and daily puzzle times. If you allow it (on the Friends screen, “Let people find me by username”), other players can find you by username. Your scores, scorecard, level, quiz results and any answers about you are never shown to other players.
How long we keep data
We keep your data while your account exists. When you delete your account, we delete its data straight away; encrypted backups are overwritten on a rolling schedule, normally within 30 days. Totals that can’t identify anyone (for example, how many players joined in a week) may be kept.
Your choices and rights
- Delete your account in the app (Profile → Delete account), or email us. How deletion works.
- Change or delete optional answers in Profile → About you.
- Turn notifications off in Profile → Notifications, or in your device settings.
- Ask for a copy of your data, or a correction, by emailing support@mindym.app.
Depending on where you live (for example California, other US states, the UK or the EU), you may have further rights, such as to know, access, correct or delete your data, and to object to or restrict some uses. We won’t treat you differently for using them. To make a request, email us; we may need to confirm the request comes from you.
Children
Mindym is for people aged 13 and over. We don’t knowingly collect personal data from children under 13. If someone tells us in the app that they’re under 13, we don’t store their answer and offer to delete the account. If you believe a child under 13 is using Mindym, email us and we’ll delete the account.
Security
Data is encrypted in transit and at rest. Access is limited by strict database rules, so each player can only reach their own data, and scores are checked on our servers. No system is perfectly secure, but we work hard to protect yours.
International transfers
Mindym is run from more than one country, and our data is stored in Singapore. When data moves between countries, we rely on our providers’ standard safeguards.
Changes to this policy
If we make important changes, we’ll tell you in the app or on this page before they take effect. The date at the top shows the latest version.
Contact
Questions or requests: support@mindym.app.