Privacy Policy

Last updated: April 7, 2026

1. Introduction
At Mind Partner AI (“we,” “us,” or “our”), we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Mind Partner AI application and related services (collectively, the “Service”). Our Service uses third-party artificial intelligence providers, including OpenAI, to power core features. By using the Service you consent to the data practices described in this policy.

2. Information We Collect
2.1 Information You Provide

  • Account information (email address, display name)
  • User profile, preferences, and personalization context
  • Conversation content, including text messages, reflections, and goals you share
  • Audio recordings when you use voice features (speech-to-text, voice chat)
  • Images you upload for AI vision analysis
  • Files you import (e.g., ChatGPT export data)

2.2 Automatically Collected Information

  • Device information (device type, operating system, unique device identifiers)
  • Usage data (features used, session duration, interactions, product engagement)
  • Log and diagnostic data (access times, error logs, crash reports, performance metrics)

3. How We Use Your Information

We use the information we collect to:

  • Provide and maintain the Service, including generating AI-powered responses, insights, and personalizations
  • Process your text, audio, and image data through third-party AI providers (see Section 6) to deliver core features such as chat, voice interaction, transcription, text-to-speech, and image analysis
  • Build and update your personalization profile and memory graph so the
  • Service improves over time
  • Process subscription payments through our payment partners
  • Send service-related notifications
  • Analyze usage patterns to improve and develop new features
  • Detect, prevent, and address technical issues, fraud, and security threats

4. Data Storage and Security

Your data is stored securely using industry-standard encryption in transit (TLS) and at rest. We use Supabase (backed by Amazon Web Services) for our primary database and authentication infrastructure, with data centers located in the United States. We implement appropriate technical and organizational measures — including access controls, audit logging, and regular security reviews — to protect your personal information.

5. Data Sharing

We do not sell your personal information. We do not share your data with data brokers or for third-party advertising purposes. We may share data with the following categories of recipients:

  • Third-party AI providers — to process your content and deliver AI-powered features (see Section 6 for full details)
  • Infrastructure and hosting providers — Supabase and Vercel for application hosting, database, and authentication
  • Payment processors — Stripe and RevenueCat for subscription billing and in-app purchases
  • Error monitoring — Sentry for crash reporting and performance diagnostics
  • Legal authorities — when required by law, subpoena, or court order
  • Business transfers — in connection with a merger, acquisition, or sale of assets, with notice to you

6. Third-Party AI Processing

Our Service relies on third-party AI providers to power its core features. In accordance with Apple App Store Guideline 5.1.2(i), we disclose the following details about how your personal data is shared with these providers.

6.1 OpenAI

We use OpenAI’s API services as our primary AI provider. The following data may be sent to OpenAI depending on which features you use:

  • Text content — Your conversation messages, reflections, goals, and contextual profile data are sent to OpenAI’s chat completion and embedding APIs to generate responses, insights, and personalization.
  • Audio data — When you use voice features, your audio recordings are sent to OpenAI’s Whisper API for speech-to-text transcription. Text you request to be spoken aloud is sent to OpenAI’s text-to-speech API.
  • Image data — When you use the image analysis feature, images are sent to OpenAI’s vision API for processing.
  • Real-time data — When you use voice chat, audio and text are transmitted to OpenAI’s Realtime API via WebRTC for live conversational interaction.

Purpose: All data sent to OpenAI is used solely to perform the specific feature you requested (e.g., generating a reply, transcribing audio, analyzing an image). We use OpenAI’s API with the zero-data-retention option where available, and under OpenAI’s data processing terms, content sent via the API is not used by OpenAI to train or improve their models.
Data location: OpenAI processes data in the United States.
OpenAI’s privacy policy: https://openai.com/policies/privacy-policy

6.2 Additional AI Providers
We may also use Anthropic and Google as supplementary or fallback AI providers for certain processing tasks. When used, these providers receive the same categories of text data described above. Data is processed under each provider’s respective API terms, which prohibit use of API inputs for model training.

  • Anthropic privacy policy: https://www.anthropic.com/privacy
  • Google privacy policy: https://policies.google.com/privacy

6.3 Your Controls
You can manage how your data interacts with AI providers through the following controls:

  • Voice features are opt-in — audio data is only sent to AI providers when you actively initiate a voice interaction.
  • Image analysis is opt-in — images are only processed when you explicitly upload and request analysis.
  • You may delete your conversation history and associated data at any time through your account settings.
  • You may request complete deletion of your account and all associated data by contacting us at privacy@mindpartner.ai.

7. Third-Party Services
In addition to the AI providers described in Section 6, our Service integrates with the following third-party services:

  • Supabase — Database hosting, user authentication, and file storage. Privacy policy: https://supabase.com/privacy
  • Vercel — Application hosting and edge network. Privacy policy: https://vercel.com/legal/privacy-policy
  • Stripe — Payment processing. We do not store your payment card details; these are handled directly by Stripe. Privacy policy: https://stripe.com/privacy
  • RevenueCat — In-app subscription management. Privacy policy: https://www.revenuecat.com/privacy
  • Sentry — Error monitoring and crash reporting. Privacy policy: https://sentry.io/privacy/

Our Service may also include links to third-party websites. We are not responsible for the privacy practices of external sites and encourage you to review their privacy policies.

8. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with the Service. Conversation data and personalization profiles are retained to maintain continuity of your experience. When you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law.
Data sent to third-party AI providers for processing is handled according to their respective data retention policies. Under our API agreements, OpenAI does not retain API input or output data beyond the time needed to process each request, except as required to monitor for abuse and misuse.

9. Your Rights

Depending on your location, you may have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate or incomplete data
  • Delete your data (“right to be forgotten”)
  • Export your data in a portable, machine-readable format
  • Object to or restrict certain processing activities
  • Withdraw consent for AI processing at any time by discontinuing use of specific features
  • Opt out of the “sale” or “sharing” of personal information (we do not sell or share your data for advertising, but you may exercise this right as a precaution)

9.1 California Residents (CCPA/CPRA)

If you are a California resident, you have the right to: (a) know what personal information we collect and how it is used, (b) request deletion of your personal information, (c) opt out of the sale or sharing of personal information, and (d) not be discriminated against for exercising your rights. We do not sell personal information or share it for cross-context behavioral advertising. To exercise your rights, contact us at privacy@mindpartner.ai.

10. Children’s Privacy

Our Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately at privacy@mindpartner.ai and we will promptly delete such data.

11. International Data Transfers

Your information may be transferred to and processed in the United States, where our servers and third-party providers (including OpenAI) are located. By using the Service, you consent to the transfer of your information to the United States, which may have different data protection laws than your jurisdiction.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through an in-app notification. The “Last updated” date at the top of this page reflects the most recent revision. Continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how your data is processed by third-party AI providers, please contact us at:
Email: privacy@mindpartner.ai