Mindvara Privacy Policy

Information stored on your device

Mindvara stores practice progress, scores, streaks, skill history, goals, preferences, reminder settings, language choice, subscription state, analytics consent, and a random installation identifier in local app storage. This supports offline play, continuity, personalization, and consent choices.

Optional account and cloud sync

You may use Mindvara without an account. If you choose to sign in, Mindvara collects your email address to send a one-time six-digit login code through Resend. The Mindvara service stores an account identifier, your email address while the account is active, hashed authentication/session information, subscription entitlement, and synchronized progress in Cloudflare-hosted infrastructure. Raw login codes and raw session tokens are not stored. Cloud sync may include training progress, scores, goals, preferences, streaks, and related app state. Your email is used for authentication, account support, invitations you request, and service messages—not for advertising.

Private accountability features

If you use optional accountability features, Mindvara may process a display name, invitation email addresses, partner relationships, challenge titles and dates, check-ins, workout totals, streak information, optional notes, reactions, blocks, and reports. Information you intentionally share with a connected accountability partner may be visible to that partner. Mindvara does not provide a public feed or public leaderboard.

Personalized AI guidance

Personalized AI guidance is available only to eligible signed-in subscribers. To generate guidance, Mindvara sends a limited training context to OpenAI, such as your selected goal, daily and weekly targets, active days, streak, workout totals, priority and strongest skill, average score, and selected language. Mindvara sends a hashed safety identifier rather than your email address or display name. Responses and limited request context may be cached by the Mindvara service to operate the feature and control usage. AI guidance is motivational game guidance only; it is not medical advice, diagnosis, cognitive assessment, or a guaranteed outcome.

Optional analytics and diagnostics

Anonymous analytics and diagnostic reporting stay off unless you explicitly consent. If enabled, TelemetryDeck may receive a random anonymous installation identifier and product-interaction events such as app opens, onboarding completion, workouts, training-area use, progress views, paywall views, and successful subscriptions. With the same consent, Mindvara may send limited JavaScript error diagnostics to its own backend, including an anonymous identifier, error message and stack, current screen, app version, platform, and page path. Naniba Studios does not intentionally include your email address, display name, free-form accountability notes, or account content in those analytics or diagnostics. You can change your analytics choice in Mindvara.

Purchases and subscriptions

The iOS app uses Apple StoreKit for Mindvara subscriptions. Apple processes payment information. Mindvara receives the product and signed transaction/entitlement information needed to activate, verify, restore, and maintain subscription access, including renewal, expiration, refund, grace-period, and revocation status. Naniba Studios does not receive your full payment-card number. The current iOS purchase flow does not offer web checkout.

Notifications and language settings

If you enable training reminders, Mindvara schedules local notifications on your Apple device. You can change notification permission in iOS Settings. Mindvara supports English, Spanish, and French; when System Default is selected, the app follows Apple’s per-app language setting first and the device language second. Your language preference is used to present the app, notifications, account messages, sharing text, subscription UI, and eligible AI guidance in the selected language.

Service providers

Mindvara uses Apple for App Store distribution, StoreKit subscriptions, and subscription-management settings; Cloudflare for application hosting, APIs, and account/data storage; Resend for one-time login and invitation emails; TelemetryDeck for consent-based anonymous analytics; and OpenAI for optional personalized AI guidance. These providers process information under their own privacy terms and security practices.

Data sharing, advertising, and tracking

Naniba Studios does not sell personal information. Mindvara contains no third-party advertising, does not use advertising identifiers, and does not use information to track you across other companies’ apps or websites. Data is shared with service providers only as needed for the optional features you use or to operate and secure the service.

Retention, account deletion, and your choices

Local information remains on your device until you reset Mindvara, clear its local data, or delete the app. If you use Delete account, Mindvara disables the account, invalidates active sessions, and removes or replaces identifying account fields so the email address can no longer be used to access that account. Certain de-identified or transaction/safety records may be retained when reasonably necessary for subscription records, security, fraud prevention, moderation/report integrity, support, or legal obligations. Apple may also retain transaction records under its own obligations. You may decline analytics, avoid signing in, leave accountability unused, disable reminders, and continue using core offline training.

Your privacy choices and requests

Depending on where you live, you may have rights to request access to, correction of, or deletion of personal information, or to object to certain processing. For privacy questions or requests, use the contact information below. We may need to verify a request before acting on it.

Children

Mindvara is not directed to children under 13, and Naniba Studios does not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action.

Security and policy updates

Mindvara uses HTTPS/TLS connections and security controls including hashed authentication records, limited session duration, rate limiting, and verified Apple transaction data. No system can guarantee absolute security. This policy may be updated when Mindvara’s features, providers, or legal requirements change; the effective date above will be revised.