Privacy Policy
Last updated 28 September 2026
MindChart is a personal organiser: you capture things — typed notes, pasted messages, photos, documents, voice notes — and MindChart files them into your calendar, to-dos, money, grocery list and notes. This policy explains what we store, why, who helps us process it, and how you stay in control. MindChart is operated by Omar Abdelbaki (“we”, “us”). Contact: [email protected].
In short: we keep what you put into MindChart so we can show it back to you; we send content to AI providers only to understand what you captured or asked; we do not sell your data, show ads, or track you across other apps; you can export or delete everything at any time.
1. What we collect
- Account: your name, email address, password (stored only as a secure hash), language, timezone, profile picture, and — if you sign in with Google or Apple — the basic profile they share (name, email, picture).
- What you put in: events, to-dos, money entries, grocery lines, notes, custom sections and their fields, tags, reminders, and the sections you create and how you arrange them.
- Files: photos, receipts, PDFs, voice recordings and profile pictures you upload, and the text we read from them.
- Assistant: your conversations with the assistant, and the facts it remembers about you if you let it (see section 4).
- “About you”: the optional answers you give during onboarding (for example your role, household and currencies), used to suggest sections and tools.
- Sharing: who you invite to a section, their role, section chat messages, and who added or ticked what.
- Devices and notifications: a push-notification token per device if you allow notifications, and your notification settings.
- Connections you choose: if you connect Google Calendar, an access token (stored encrypted) so we can sync events both ways; if you subscribe to a calendar link, that link.
- Technical data: server logs (IP address, time, request, errors) kept for security and to fix problems, and a record of AI and storage usage per account.
- Subscriptions: if you subscribe, the App Store or Google Play handles payment. We receive whether your subscription is active and its renewal dates — never your card details.
We do not collect your contacts, location, advertising identifiers or browsing activity, and we do not use analytics or advertising SDKs.
2. How we use it
- To run MindChart: store your entries, sync them across your devices, show them to the people you share with, and send the reminders and summaries you turn on (daily plan, evening wrap-up, weekly recap, bill and budget alerts).
- To understand what you capture: read text, photos and voice notes and turn them into entries; answer your questions; plan your day.
- To support you, keep the service secure, prevent abuse, and meet legal obligations.
We never sell or rent your data and never use it for advertising.
3. AI and the companies that help us
Some features send content to specialised providers. We send only what the feature needs — the thing you captured, the question you asked, and the minimum context required to answer it — and they process it on our behalf under their API terms.
| Provider | What it does | What it receives |
|---|---|---|
| DeepSeek | Understands captured text, answers the assistant, plans your day | The text you capture or ask about, and a short summary of the relevant entries. Processed in China. |
| Google (Gemini API) | Reads photos and documents | The photo or page you upload. Paid service: Google does not use it to train its models. |
| ElevenLabs, Groq | Turns voice notes into text | The recording you make |
| Hetzner | Hosts our servers and database | All account data, stored in Helsinki, Finland (EU) |
| Cloudflare | Network security, and storage for your files (R2) | Traffic to MindChart; your uploaded files |
| Google Firebase, Apple | Deliver push notifications | A device token and the notification text |
| Google, Apple | Sign-in (optional), Google Calendar sync (optional), app stores and subscriptions | Only what you connect or buy |
AI output can be wrong. MindChart asks you to review anything it is unsure about — please check important dates, amounts and names.
4. Assistant memory
When you tell the assistant a lasting fact about your life — who someone is to you, a routine, a place, a preference — MindChart can remember it and use it to file things and answer better. You can see, edit and delete every remembered fact in Settings → “What MindChart knows about me”, switch learning off there, or delete them all at once. Memory is never used in shared section chats, which other members can read.
5. Sharing
A section is private until you share it. People you invite see that section, its chat, and who added or ticked each entry. A public link you create lets anyone who has it view that one section until you turn the link off. Invitations are sent by email to the address you enter.
6. Where your data is and international transfers
Your data is stored in the EU (Finland) with files on Cloudflare. Some processing happens elsewhere: DeepSeek in China, and Google, ElevenLabs and Groq mainly in the United States. By using the AI features you understand that the content they need is transferred to those countries for processing. Everything travels over encrypted connections, and files are only ever served through short-lived signed links.
7. How long we keep it
- For as long as your account exists, unless you delete it sooner.
- Deleted entries and sections stay in “Recently deleted” for 30 days so you can restore them, then are removed for good. Deleted files are removed from storage 30 days after you delete them, and photos attached to deleted entries within 60 days.
- When you delete your account, your account, entries, files, memory, conversations and devices are deleted immediately — including entries you added to sections other people shared with you. Copies in our server backups are removed within 30 days.
- Server logs are kept for a limited time for security and troubleshooting.
8. Your choices and rights
- Export: on the web, Settings → Download backup gives you all your data as a file, and any section can be exported as a spreadsheet.
- Correct: edit anything in the app, including your profile and remembered facts.
- Delete: delete any entry or file, or your whole account — see how to delete your account.
- Limit: turn off notifications, assistant memory, or Google Calendar sync at any time.
Depending on where you live (for example the EU/UK under the GDPR, or Lebanon under Law No. 81/2018), you may also have the right to access, correct, delete or port your data, to object to or restrict processing, and to complain to your data-protection authority. Write to [email protected] and we will answer within 30 days.
9. Children
MindChart is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.
10. Security
Passwords are hashed, connections are encrypted, calendar tokens are encrypted at rest, files are private by default, and access to data is limited to what is needed to run the service. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.
11. Changes
If we change this policy in a meaningful way we will tell you in the app or by email before the change applies. The date at the top shows the latest version.
Questions? Write to [email protected]. · Back to MindChart