Privacy Policy

1. Introduction

MindPoppy ("we", "our", "us") is a mobile application that helps users capture and organize their ideas as visual balloons. This Privacy Policy explains how we collect, use, and protect your personal information.

2. Information We Collect

We collect the following types of information:

Account Information: When you create an account, we collect your name, email address, and password (encrypted).

User Content: Ideas and thoughts you add as balloons, notes, group names, and categories.

Usage Data: App usage statistics, device type, operating system version, and language preference.

Group Data: When using group features, balloon content is stored anonymously — no user identity is linked to group balloons.

3. How We Use Your Information

We use your information to provide and improve the MindPoppy service, sync your data across devices, process subscription payments, send optional reminders (with your permission), and provide customer support.

4. Data Storage & Security

Your data is stored on Supabase (PostgreSQL) servers. All data is encrypted in transit (TLS/SSL) and at rest. We implement Row Level Security (RLS) to ensure users can only access their own personal data.

5. Third-Party Services

We use the following third-party services:

Supabase — Database, authentication, and real-time sync

RevenueCat — Subscription and payment management

Apple App Store — App distribution and in-app purchases

6. Anonymity in Groups

Group balloons are completely anonymous. We use random tokens instead of user IDs for group content. Even group leaders cannot see who wrote which balloon. This anonymity is guaranteed by our database design.

7. Your Rights

You have the right to access your personal data, request deletion of your account and all associated data, export your data, and opt out of optional communications. To exercise these rights, contact us at support@mindpoppy.com.

8. Children's Privacy

MindPoppy is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us.

9. Data Retention

We retain your data as long as your account is active. Popped (deleted) balloons are permanently removed. When you delete your account, all personal data is removed from our servers.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes through the app or by email.

11. Contact Us

If you have questions about this Privacy Policy, contact us at:

Email: support@mindpoppy.com

Website: https://mindpoppy.com/support