Mindwire — Privacy Policy

Effective date: 2026-04-11

Last updated: 2026-08-06

1. Who we are

Mindwire is a personal reflection journal with an AI conversation partner. It helps you write daily notes, reflections, and gratitude entries, and build a journaling habit. Mindwire ("we", "our", "us") is operated by Sajin Payandath. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and the rights you have over it.

Questions? Email privacy@mindwire.app.

2. Scope

This policy covers the Mindwire iOS app, the Mindwire web app at mindwire.app, and all backend services we operate to support them.

3. Information we collect

3.1 Information you give us

3.2 Information collected automatically

3.3 Information we do NOT collect

4. How we use your information

4.1 To provide the journaling service

We store your journal entries, guided reflections, and photos so you can return to them across devices and over time.

4.2 To power your AI conversation partner

When you chat with your AI companion, we send the current chat message and relevant excerpts from your past journal entries to a third-party large-language-model provider (see Section 5.1) so the model can generate a response in the context of what you have written. Entries are encrypted at rest and decrypted only for the duration of that request. If our primary AI provider is temporarily unavailable, we may route the same request to a secondary AI provider (also listed in Section 5.1) so your chat can continue working.

4.3 Voice dictation (optional)

If you tap the microphone icon to dictate an entry, Apple's on-device speech recognition framework transcribes your speech. Depending on your device and iOS version, audio may be sent to Apple for transcription per Apple's privacy practices. Mindwire receives only the resulting text. We do not store raw audio.

4.4 Photos (optional)

When you attach a photo to an entry, the photo is uploaded to a private Google Cloud Storage bucket we operate. Photos are served back to your device through short-lived signed URLs that expire within one hour. The bucket is not publicly accessible.

4.5 Smart Reflections (optional)

If you have turned on AI personalization, then once per day — after you save an entry — the text of that day's entry is sent to the same third-party large-language-model provider described in Section 4.2, which writes a short reflection of two or three sentences shown back to you in the app. This happens at most once per journal day, only for entries long enough to reflect on, and only after you have saved. The generated reflection is stored encrypted with your key alongside your other entries, and is deleted whenever the underlying entry is deleted, when you turn off AI personalization with the erase option, or when you delete your account. If AI personalization is off, no entry text is sent and no reflection is generated.

4.6 Account security and abuse prevention

We use your email address for sign-in, password reset, and security notifications. We apply rate limits to prevent abuse.

4.7 Improving the product

We look at anonymized, aggregated usage statistics (for example, "how many users completed a guided reflection this week") to improve the app. We do not read the contents of your journal entries for product development.

4.8 Legal compliance

We may use or disclose information as required by applicable law.

5. Third parties that process your information

We use a small number of trusted service providers to operate Mindwire. Each is listed below with the purpose of processing.

5.1 AI model providers — Groq and Hugging Face

When you chat with your AI conversation partner, request a motivational quote, or save a journal entry that we analyze in the background, the text of your message and relevant excerpts from your past journal entries (decrypted server-side) are sent to a third-party large-language-model API. We use two providers for resilience:

We want to be especially clear about this: the AI chat and background-analysis features require sending your message and the relevant journal excerpts to a third party in readable form for the model to generate a response. You control whether this happens through a single AI consent setting in your profile. When AI consent is off, we do not send any new journal text or chat input to Groq or Hugging Face — your existing journals remain in your account and can still be read and edited, but no AI analysis, chat, or daily reflections will run on new content. If you turn AI consent off, we also delete the AI-derived memory we have already built from your journals (the analysis we generated to power chat and insights). Your original journal entries are not affected and remain available to you; if you turn AI consent back on later, the AI memory is rebuilt from your journals.

5.2 Cloud infrastructure — Google Cloud Platform

We host our backend services on Google Cloud Run and store photos in Google Cloud Storage, both in United States regions. Google acts as our data processor. Learn more at cloud.google.com/privacy.

5.3 Database — Supabase

We store your account and journal entries in a managed PostgreSQL database operated by Supabase, in United States regions. Supabase acts as our data processor. Learn more at supabase.com/privacy.

5.4 Transactional email — Resend

When we send you a password reset link or security notification, we use Resend to deliver the email. Resend processes your email address only for the duration of that delivery. Learn more at resend.com/legal/privacy-policy.

5.5 Authentication — Apple and Google

If you choose Sign in with Apple or Sign in with Google, the respective provider authenticates you and returns an identifier we use to create or match your account. If you use Apple's Hide My Email feature, we only ever see the private-relay address Apple issues — we cannot see your real email.

5.6 Future: Push notifications — Apple Push Notification Service

When we enable push notifications in a future version, reminder messages you have opted into will be delivered via Apple's APNs using a device token your iPhone provides. Apple's role is strictly delivery.

5.7 What we do NOT share

We do not sell your personal information. We do not share your information with advertising networks, data brokers, social networks, or analytics providers that build cross-app profiles.

6. How your journal entries are protected

7. Where your information is stored

Our backend services and database operate in United States regions of Google Cloud Platform and Supabase. If you use Mindwire from outside the United States, your information will be transferred to and processed in the United States.

For users in the European Economic Area, the United Kingdom, and Switzerland: we rely on appropriate safeguards for international data transfers, including Standard Contractual Clauses where required.

8. How long we keep your information

9. Your rights

You have the following rights over your personal information. To exercise any of them, email privacy@mindwire.app from the address on your account. We respond within 30 days.

9.1 Deleting some of your data without closing your account

You do not have to delete your account to delete your data. Each of these is available inside the app, on both web and mobile, and takes effect immediately:

These deletions are permanent and are not covered by the 30-day account archive described in section 8 — that window applies only to closing your account. If you would rather we did it for you, email privacy@mindwire.app from the address on your account and we will respond within 30 days.

9.2 California residents (CCPA / CPRA)

If you are a California resident, you have the right to know what personal information we collect, to delete it, to correct it, to opt out of any "sale" or "sharing" of personal information (we do neither), and to non-discrimination for exercising your rights.

9.3 India residents (Digital Personal Data Protection Act, 2023)

If you are in India, the Digital Personal Data Protection Act, 2023 ("DPDP Act") applies to our processing of your personal data. For the purposes of the DPDP Act, Mindwire acts as the Data Fiduciary and you are the Data Principal. You have the following rights under the DPDP Act, in addition to the rights listed above:

If you are not satisfied with our response to a grievance, you may escalate the matter to the Data Protection Board of India once it is established and accepting complaints.

10. Children's privacy

Mindwire is not directed to children under 13 (or the minimum age of digital consent in your country, if higher). We do not knowingly collect personal information from children under 13. If you believe a child has created an account, please contact us and we will delete it.

11. Your iOS privacy choices

12. Security incident notification

If a security incident affects your personal information and applicable law requires notification, we will notify you without undue delay via email and, where appropriate, an in-app message.

13. Not medical advice

Mindwire is a personal reflection journal and daily-writing companion. It is not a substitute for professional mental health care, medical advice, diagnosis, or treatment. If you are in crisis or need professional support, please contact a qualified professional or a local crisis line. In the United States, call or text 988 for the Suicide & Crisis Lifeline.

14. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top. For material changes we will notify you in-app or by email before the change takes effect. Your continued use of Mindwire after the effective date constitutes acceptance of the updated policy.

15. Contact us

← Back to Mindwire