Privacy Policy

This policy applies to all users of the Mindley website, web application, and related services. It covers information collected when you register an account, upload study material, generate content, subscribe to a paid plan, or contact our support team. It does not apply to third-party websites or services that may be linked from within Mindley.

We collect only the information needed to operate and improve the Service. This falls into a few categories.

• Account information: your name, email address, password (stored in encrypted form), and authentication identifiers if you sign in with Google.
• User Content: the documents, PDFs, slides, images, audio, text, and links you upload so the Service can generate study material.
• Generated Content: the notes, flashcards, quizzes, and mind maps we create for you, stored so you can access them later.
• Usage data: pages viewed, features used, generation counts, device and browser type, and approximate location derived from your IP address.
• Billing information: subscription status and payment metadata processed by our payment provider. We do not store full card numbers on our servers.
• Communications: messages you send us for support, feedback, or enquiries.

We use the information we collect to deliver, maintain, and improve the Service. Specifically, we use it to generate your study material, personalize your experience, process payments, provide customer support, secure our systems, detect misuse, comply with legal obligations, and communicate important updates.

We may use aggregated and anonymized usage data to analyze trends and improve the quality of our features. We do not use the private content you upload to train foundational AI models.

Where applicable data-protection laws such as the GDPR apply, we rely on the following legal bases to process your personal data: performance of our contract with you (to provide the Service), your consent (for optional communications), our legitimate interests (to secure and improve the Service), and compliance with legal obligations.

To generate study material, your uploaded content is sent to trusted third-party AI providers for processing. These providers act as our sub-processors and are contractually required to handle data securely and only for the purpose of returning results to Mindley.

We select AI providers that offer appropriate data-protection commitments, and we do not sell your content to them. Content sent for generation is transmitted over encrypted connections.

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the Service is used. We use privacy-conscious analytics to measure feature adoption and improve usability. You can control cookies through your browser settings, although disabling some cookies may affect functionality.

We do not sell your personal data. We share information only in limited circumstances.

• With service providers (AI processing, cloud hosting, authentication, payment, analytics) who help us operate the Service under strict confidentiality.
• To comply with the law, a court order, or a valid governmental request.
• To protect the rights, safety, and property of Mindley, our users, or the public.
• In connection with a merger, acquisition, or sale of assets, in which case you will be notified of any change in ownership or data handling.

Your data is stored on secure cloud infrastructure with access controls, encryption in transit, and regular safeguards. While no system can be guaranteed completely secure, we take reasonable technical and organizational measures to protect your information from loss, misuse, and unauthorized access.

We retain your data for as long as your account is active or as needed to provide the Service. When you delete content or close your account, we remove the associated data within a reasonable period, except where retention is required for legal, accounting, or security purposes.

Because we rely on global cloud and AI providers, your information may be processed in countries other than your own. Where required, we use appropriate safeguards, such as standard contractual clauses, to ensure your data receives an adequate level of protection wherever it is processed.

Depending on your location, you may have the following rights over your personal data. To exercise any of them, contact us and we will respond within the timeframe required by law.

• Access: request a copy of the personal data we hold about you.
• Correction: ask us to fix inaccurate or incomplete information.
• Deletion: request that we delete your personal data and content.
• Portability: request your data in a portable, machine-readable format.
• Objection & restriction: object to or limit certain processing.
• Withdraw consent: opt out of optional communications at any time.

Mindley is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it promptly.

In the unlikely event of a data breach that affects your personal information, we will notify affected users and, where required, the relevant authorities without undue delay and in accordance with applicable law.

If you have questions, concerns, or complaints about this Privacy Policy or how your data is handled, please contact us through our Contact page. We take privacy matters seriously and will work to resolve any issue promptly.