MindActionsOpen WebApp

TRUST & SAFETY

Your reflections deserve strict data autonomy.

MindActions is built on strict data autonomy, transparent security controls, and zero compromise on personal privacy. We never sell your personal data, nor do we use your private journal entries to train public AI models.

Here is an easy-to-understand summary of how we protect your account, run our services, and safeguard your emotional reflections.

01

You Control Your Data & AI Features

  • Unbundled AI Consent

    Using AI features such as the AI Coach, CBT Deep Analysis, or Voice Journaling is completely optional. You can track habits, maintain streaks, and write manual journals without ever turning on AI data processing. See Privacy Policy and Terms of Use.

  • Permanent Data Purging

    You own your content. If you delete your account, an automated database purge (ON DELETE CASCADE) permanently wipes your credentials, mood logs, journal entries, and chat histories from our servers within 30 days. See Privacy Policy.

02

Sensitive Data Encrypted & Scrubbed

  • At-Rest Encryption

    Your socio-emotional logs, Spotify/Google OAuth tokens, and AI Coach conversations are encrypted at rest in our database using Fernet symmetric multi-key cryptography. Passwords are protected using bcrypt. See Security Contact.

  • Automated PII Scrubber

    Before any text snippet or voice transcript reaches Google Gemini AI models, our backend runs an automated PII Scrubber (scrub_pii) to detect and redact names, email addresses, and personal identifiers. See Subprocessors.

03

Health Privacy & Ad Isolation

  • Consumer Health Safeguards

    Emotional logs, CBT distortion tags, and mood records are processed strictly to generate your personal reflection metrics. We comply with state health privacy laws, including WA MHMDA and NV SB 370, and never sell health data to third parties. See Consumer Health Data.

  • Isolated Advertising

    Google AdMob is used for rewarded-ad interactions on Free and Paid Android tiers, while Propeller Ads Ltd serves the corresponding WebApp interactions. The services track basic rewarded-ad interaction counters. See Privacy Policy.

04

Privacy-First Analytics & Storage

  • Zero Cookie Web Analytics

    We use Cloudflare Web Analytics strictly on our public marketing site (mindactions.app) to monitor aggregate page views. It sets no tracking cookies, performs no cross-site profiling, and collects no personal data. See Cookies & Local Storage.

  • Essential Storage Only

    Web session tokens (JWTs) and mobile preferences (SharedPreferences) are used solely to keep you logged in and save your local display settings. See Cookies & Local Storage.

05

Clear Product Boundaries

  • Self-Improvement (18+)

    MindActions is restricted to adults aged 18+ and is designed for self-reflection, not clinical diagnosis, therapy, or medical emergency intervention. See Terms of Use.

  • Platform Provider Info

    MindActions operates as an independent software service prior to corporate entity formation. See Imprint.

06

Financial Information

  • Paddle Billing & Renewals

    Paddle is the Merchant of Record for premium transactions, checkout, and subscription status. Subscriptions renew monthly or annually unless cancelled through the user portal or subscription-management endpoint. See Terms of Use.

  • 14-Day Trial

    Paid and Pro plans include a 14-day free trial. You can cancel before the trial ends to prevent the first subscription charge. See Refunds & Cancellation.

  • Refunds

    No refunds are available except where required by applicable law. See Refunds & Cancellation.

COMPLETE DOCUMENTS

Read every policy in full.

Open any official policy section below for the complete, unabridged document.