Privacy Policy
Effective date: 11 October 2026
This Privacy Policy explains how Mind Solutions ("we", "us", "our") collects, uses, and protects your personal data when you use the Service at MindSolutions.app.
1. Who We Are (Data Controller)
Mind Solutions is the data controller responsible for your personal data.
- Contact: support@mindsolutions.app
- Registered address: 907 29 Umeå, Sweden
2. Data We Collect
| Category | Examples | Purpose | Legal basis (GDPR) |
|---|---|---|---|
| Account data | email, hashed password, first and last name, phone number and its country | authenticate you, provide the Service, contact you about your account | Performance of contract |
| Payment data | billing details (processed by Stripe) | process payments | Performance of contract; legal obligation |
| User Content | text extracted from material you choose, generated flashcards | provide the Service | Performance of contract |
| Usage data | feature usage, generation metrics, error logs | operate, secure, and improve the Service | Legitimate interest |
| Analytics data | aggregated product usage, feature engagement | understand and improve the Service | Legitimate interest |
| Technical data | IP address, device/browser info | security, fraud prevention | Legitimate interest |
We do not collect or process any special categories of personal data beyond what you choose to include in your uploaded content.
3. How We Use Your Data
We use personal data only to:
- Provide, maintain, and improve the Service.
- Process payments and manage subscriptions.
- Analyze aggregate product usage to improve the Service.
- Enforce our Terms and prevent fraud, abuse, and security incidents.
- Comply with legal obligations (e.g. tax and accounting records).
We do not sell your personal data.
4. Sharing with Third-Party Processors
We share data only with the following categories of processors, and only as necessary to provide the Service:
| Processor | Purpose | Data shared |
|---|---|---|
| Supabase | hosting, database, authentication, storage | account data, User Content, usage data |
| Stripe | payment processing, subscriptions, tax | billing details |
| LLM providers (e.g. DeepSeek, Google, OpenRouter, or other AI providers) | AI flashcard generation | the specific User Content needed for that job |
| Google Cloud Text-to-Speech | speech synthesis (Premium tier) | the specific text to be synthesized |
| Firecrawl | reading web pages you ask us to turn into cards | the web address you enter |
| Google Drive (optional, only if you connect it) | saving your finished decks to your own Drive | the deck files you choose to save |
We do not share your personal data with any external party other than the services used to operate this website. The only information we transmit to AI and text-to-speech providers is the specific material you upload, and only as necessary to generate your flashcards and audio. We do not share any analytical data, usage data, account data, payment data, or other personal data with these providers. We do not sell, rent, or trade your personal data to third parties.
These processors are independent of us; their processing of the data they receive is governed by their own privacy policies.
5. Google Drive
If you choose to connect Google Drive, we request only permission to create and manage files that Mind Solutions itself creates. We cannot see, read, or change any other files in your Drive. We use this access solely to save the decks you choose to save into a "Mind Solutions decks" folder. You can disconnect at any time from your Account page or your Google account settings. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
6. International Data Transfers
Some processors may be located outside the European Economic Area (EEA). Where applicable, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) or an adequacy decision so your data receives an adequate level of protection.
7. Data Retention
- Your files: documents and pictures you add are read on your own device and are never stored on our servers. Only the extracted text (and, for picture scanning or audio, the specific picture or text) is sent for processing and is not kept afterwards.
- Generated decks: built on your device; we do not store them unless you choose to save them to your own Google Drive.
- Account data: retained while your account is active.
- Payment records: retained as required by tax and accounting law.
- Usage records: card counts per month, kept to enforce plan limits.
8. Your Rights (GDPR)
You have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate data.
- Erase your data ("right to be forgotten"), including full account deletion, which you can perform at any time from within the Service.
- Restrict or object to processing.
- Data portability: receive your data in a structured, machine-readable format.
- Withdraw consent where processing is based on consent.
To exercise any right, contact support@mindsolutions.app. You also have the right to lodge a complaint with your local supervisory authority (in Sweden, Integritetsskyddsmyndigheten (IMY)).
9. Your Rights (California: CCPA/CPRA)
If you are a California resident, you have the right to know, access, delete, correct, and opt out of the "sale" or "sharing" of your personal information. We do not sell personal information. To exercise these rights, contact support@mindsolutions.app.
10. Cookies and Tracking
We use only essential cookies and similar technologies necessary for authentication and core functionality. We do not use third-party advertising or analytics trackers. Your language and theme choices are stored only on your own device.
11. Security
We implement appropriate technical and organizational measures, including:
- Encryption in transit (HTTPS/TLS) and at rest.
- Row-level access controls so users can only access their own data.
- Strict access controls and least-privilege principles for our personnel.
- Secure storage of service credentials (never exposed client-side).
No method of transmission or storage is 100% secure; we cannot guarantee absolute security.
12. Children
The Service is not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us data, contact us and we will delete it.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-application notice.
14. Contact
For any privacy questions or requests: support@mindsolutions.app.