Legal

Privacy Policy

Effective date: [LAUNCH DATE]

Mynd ("we," "us," or "our") operates joinmynd.com and the Mynd platform — a service that lets you build an AI twin of yourself and make it available to the world. This Privacy Policy explains exactly what data we collect, why we collect it, who we share it with, and what rights you have over it.

1. Who This Policy Applies To

This Privacy Policy applies to all users of the Mynd platform, including:

  • Owners — people who create and build a Personal Mynd;
  • Visitors — people who visit and converse with any Mynd (Personal or Historical), whether or not they have an account; and
  • Anyone who accesses joinmynd.com in any capacity.

By using Mynd, you agree to this Privacy Policy. If you do not agree, please do not use the platform.

2. Data We Collect

2.1 Account Data

When you sign up using Google OAuth, we receive from Google and store: your name and email address, your Google profile picture, and your chosen Mynd username. We do not receive or store your Google password. Authentication is handled entirely by Google and our authentication infrastructure provider.

2.2 Source Documents and Memories

When you upload content to build your Personal Mynd, we collect and store:

  • The raw source documents you upload (ChatGPT exports, tweets, Reddit posts, WhatsApp chat history, Kindle highlights, Goodreads data, Google activity, Telegram exports, Notion, Obsidian, Medium, Apple Notes, or plain text);
  • Structured information derived from your uploaded content, including beliefs, opinions, values, and preferences;
  • Derived representations of your content used to operate your Mynd; and
  • Metadata associated with your content.

You are responsible for ensuring you have the right to upload the content you provide. Source documents that include messages from other people (such as WhatsApp conversations) should only be uploaded with awareness that such third-party content will be processed to build your Mynd.

2.3 Conversation Data

When anyone converses with a Mynd — whether they are a registered user or an anonymous visitor — we store the full text of the conversation, a conversation identifier and timestamp, and the identity of the Mynd being conversed with. For logged-in users, conversations are associated with their account. For anonymous visitors, conversations are stored without a linked identity.

What Mynd owners can see: Owners can view aggregate data about questions their Mynd has received — topic themes and patterns — but not the full transcripts of individual visitor conversations. Owners do not receive the identity of anonymous visitors.

2.4 Google Calendar and Gmail Data

If you connect Google Calendar or Gmail to your Mynd, we access and temporarily process the data necessary to perform the actions you request (such as creating a calendar event or reading an email thread). We do not permanently store the full content of your emails or calendar events beyond what is needed to complete your request. OAuth access tokens are stored securely and used to maintain the connection until you disconnect the integration.

2.5 Technical and Usage Data

We automatically collect standard technical information when you use the platform:

  • IP address and approximate geographic location;
  • Browser type, operating system, and device type;
  • Pages visited, features used, and access timestamps;
  • Error logs and diagnostic data; and
  • Session cookies required for authentication.

3. How We Use Your Data

We use the data we collect for the following purposes:

  • To operate your Mynd — processing uploaded content and serving conversations with your AI twin to visitors;
  • To authenticate you — maintaining your secure login session;
  • To execute your commands — using connected tools (Calendar, Gmail, web search) on your behalf when you instruct us to in your command center;
  • To improve the platform — understanding feature usage, diagnosing errors, and making Mynd better;
  • To enforce our Terms of Service — detecting abuse, impersonation, and prohibited conduct;
  • To communicate with you — sending service-related notices; and
  • To comply with law — responding to valid legal process or regulatory requirements.

We do not sell your personal data. We do not use your data to train AI models — neither our own (we do not train models) nor those of our model providers (see Section 4).

4. Third Parties Who Receive Your Data

Running Mynd requires working with the following third-party service providers. Each receives only the minimum data necessary to perform their specific function.

Database and Infrastructure

Your data is stored and managed by our infrastructure providers, who process it solely to operate the platform on our behalf.

AI Providers

Mynd uses third-party AI service providers to power conversations and process your uploaded content. Your data is transmitted to these providers only as necessary to operate your Mynd. None of our AI providers use API customer data to train their models under their business terms.

Application Hosting

The Mynd platform is hosted on cloud infrastructure providers who process request logs and may temporarily cache content as part of their services.

Google — Authentication and Integrations

Google provides authentication and, if you connect them, Calendar and Gmail access. See policies.google.com/privacy.

Web Search

When you use web search in your command center, your query is transmitted to a third-party search provider to retrieve results.

5. Cookies

We use cookies only for authentication and session management:

  • Session cookies — used to maintain your login state. These are essential for the platform to function and cannot be disabled for logged-in use.
  • Signup flow cookie — a short-lived cookie (mynd_pending_username) used to pass your chosen username through the Google OAuth redirect. This expires within 5 minutes.

We do not use advertising cookies, tracking pixels, or third-party analytics cookies.

6. Data Retention

6.1 Active Accounts

We retain your data for as long as your account is active and the platform is in operation.

6.2 Account Deletion

When you delete your account, we begin purging your data from active systems immediately. Complete deletion from all systems, including database backups, is completed within 30 days. This includes your profile, content, derived data, source documents, and conversation history. Anonymised or aggregated data that cannot identify you may be retained for service diagnostics.

6.3 Visitor Conversation Data

Conversations with a Mynd are retained while the owner's account is active. If the owner deletes their account, associated visitor conversation data is deleted within the same 30-day window.

7. Your Rights

You have the following rights with respect to your personal data:

  • Access — request a copy of the personal data we hold about you;
  • Deletion — request that we delete your data, or delete your account directly from Settings, which initiates full deletion;
  • Correction — request that we correct inaccurate data we hold;
  • Portability — request an export of your data in a readable format; and
  • Objection — object to certain processing of your data.

To exercise any right, email privacy@joinmynd.com. We will respond within 30 days and may ask you to verify your identity.

7.1 India — Digital Personal Data Protection Act, 2023

Mynd is operated from India and is subject to the Digital Personal Data Protection Act, 2023 (DPDP Act). As a Data Fiduciary under the DPDP Act, we collect and process your personal data only for lawful purposes with your consent. You have the right to withdraw consent by deleting your account, and the right to nominate a representative to exercise your rights on your behalf. For grievances, contact our Grievance Officer at privacy@joinmynd.com.

7.2 European Users — GDPR

If you are in the European Economic Area or United Kingdom, you have additional rights under GDPR, including the right to lodge a complaint with your local data protection supervisory authority. Our lawful basis for processing is performance of a contract (operating your Mynd) and legitimate interests (platform security and improvement).

8. Data Security

We implement the following technical security measures:

  • Encryption in transit (HTTPS/TLS) for all data transmitted to and from the platform;
  • Encryption at rest for data stored in our database;
  • Row-level security policies preventing one user from accessing another user's data;
  • OAuth-only authentication — we never store passwords; and
  • Access controls limiting who within our team can access production systems.

No system is completely secure. If you believe your data has been compromised, contact us immediately at privacy@joinmynd.com.

9. Children

Mynd is not directed at children under 13. We do not knowingly collect data from children under 13. If we discover that a child under 13 has created an account, we will delete it promptly. Users between 13 and 18 must have parental or guardian permission to use Mynd. If you believe a child is using Mynd without permission, contact privacy@joinmynd.com.

10. International Data Transfers

Mynd is operated from India. Your data may be stored and processed in countries where our service providers operate, including the United States. These countries may have different data protection laws from your home country. By using Mynd, you consent to these transfers. We require all providers to maintain appropriate security standards.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this page and, where appropriate, notify you by email or through an in-platform notice. Continued use of Mynd after changes take effect constitutes acceptance of the revised Policy.

12. Contact

For any questions, concerns, or requests related to this Privacy Policy: