Privacy Policy

Data we collect

To run accounts and billing, we collect a minimal set of fields tied to your Mindvary login:

• Account email. Used to authenticate you and to send transactional email (sign-in links, billing receipts, security notices).
• Billing customer id. An opaque Stripe customer id linked to your account when you subscribe to a paid tier.
• Basic auth telemetry. Sign-in timestamps, session token rotations, and coarse user-agent strings used to defend against credential stuffing.

Data we don't collect

Mindvary is BYOK. Your model API keys are stored locally on your device and used to call model providers directly from the app. Specifically, we do not collect:

• Model prompts and responses. They are never proxied through our servers; they flow from your machine straight to the provider you chose.
• Your model API keys. Keys never leave your device.
• Your local files, prompts, or library content. These live in your local SQLite file on disk.

Processors

We use a small number of trusted sub-processors to operate the service:

• Supabase. Authentication and account database. Stores your email and account row only.
• Stripe. Billing. Stores your billing customer id and payment metadata. Card details are held by Stripe and never reach our servers.

Cookies

Mindvary sets a single first-party authentication session cookie to keep you signed in across page loads. We do not load third-party analytics or advertising cookies by default.

Your rights

Mindvary intends to honor the rights granted by GDPR, CCPA, and similar regulations, including the rights to access, export, and delete your account data. To exercise these rights, contact us at the address below. Final implementation details are pending legal review.

Contact

For any privacy questions, email hi@mindvary.com.