Privacy Policy
This Privacy Policy explains how the Mindveil mobile application (“App”) collects, processes, stores and protects your personal data in line with applicable data protection laws. By using the App, you are deemed to have accepted this policy.
1. Personal Data We Collect
1.1 Data provided by the user
- Name (required to personalise greetings in the app and may be shared with AI models only to address you; it does not affect the analysis itself).
- Date of birth (required to confirm that you meet the minimum age to use the app).
- Gender
- Sleep frequency
- Dream frequency
- Dream texts you write in the app
- Voice recordings submitted for speech-to-text are processed to generate text and then deleted immediately.
1.2 Automatically collected technical data
- Device model and operating system
- App usage analytics
- Crash reports (Firebase Crashlytics)
1.3 Data we do not collect
- IP address
- Precise geolocation data
2. Purposes of Processing
Your data is processed for the following purposes:
- AI-based analysis of your dreams
- Creation and management of your user account
- Monitoring app performance and usage
- Detecting and fixing errors
- Managing payments and subscriptions
- Preventing misuse and abuse
3. Consent
Your dream content and personal data are processed based on your explicit consent, as this is necessary to provide the service.
4. International Data Transfers
Mindveil uses the following third-party services located abroad:
- OpenAI API — US
- Firebase — US / Global
- Google Analytics — US / Global
- RevenueCat — US
As a result, some of your data may be transferred abroad where necessary to provide the service.
5. Data Retention
- Your data is retained unless you delete it.
- Voice recordings used for speech-to-text are deleted immediately after processing.
- You can delete all your data via the “Delete my data” option.
- You can export your data in JSON via the “Export my data” option.
- Device ID is required for the in-app reward system and cannot be deleted.
6. Data Security
Mindveil protects personal data through the following measures:
- Secure connections (HTTPS)
- Firebase security rules
- Access controls to prevent unauthorized access
- Use of modern encryption methods where appropriate
7. Your Rights
Your legal rights regarding your personal data
Depending on applicable law, you may have the following rights regarding your personal data:
- To learn whether your personal data is being processed.
- To request information if your personal data has been processed.
- To learn the purpose of processing and whether it is used in line with that purpose.
- To know third parties to whom personal data is transferred, domestically or abroad.
- To request correction of personal data if it is incomplete or inaccurate.
- To request deletion or destruction of personal data under the conditions provided by law.
- To request notification of rectification or deletion to third parties to whom data has been transferred.
- To object to results produced exclusively by automated systems if they are detrimental to you.
- To request compensation for damage arising from unlawful processing of personal data.
Situations where certain rights may not apply
Article 28/1
Under some data protection laws, data subjects may not be able to exercise their rights in certain situations, such as:
- Processing of personal data by individuals for purely personal or family purposes, provided that the data is not disclosed to third parties and security obligations are respected.
- Processing of personal data for research, planning and statistics purposes after being anonymised for official statistics.
- Processing of personal data for artistic, historical, literary or scientific purposes or within the scope of freedom of expression, provided that national security, public order, economic security, privacy and personality rights are not violated and no criminal offence is committed.
- Processing of personal data within the scope of preventive, protective and intelligence activities carried out by authorised public bodies to ensure national defence, national security, public security, public order or economic security.
- Processing of personal data by judicial authorities or enforcement authorities within the scope of investigation, prosecution, trial or execution procedures.
Article 28/2
In some other situations, certain rights may also be limited, for example where:
- Processing of personal data is necessary to prevent crime or for criminal investigations.
- Personal data has been made public by the data subject.
- Processing is necessary for supervisory or regulatory duties of public bodies or professional organisations, or for disciplinary investigations or prosecutions.
- Processing is necessary to safeguard important economic and financial interests of the state, including budgetary and fiscal matters.
8. Acceptance and Validity
Sharing your personal data with our App is entirely your choice. By continuing to use the App, you are deemed to have accepted this Privacy Policy.
9. Changes to this Policy
Mindveil may update this policy from time to time. Material changes will be reflected in the version published in the App and on our website.