Privacy Policy for mindlog

Last updated: September 9, 2026

mindlog ("the app") is a personal daily journal, to-do, and scratchpad app. This policy explains what information the app collects, how it is used, and your choices. mindlog is developed and operated by an individual developer, not a company.

Information we collect

• Google account information. mindlog uses Google Sign-In as its only authentication method. When you sign in, Google shares your name, email address, and profile photo with the app so we can create and identify your account. We do not receive your Google password.
• Content you create. Journal entries, to-dos, and scratchpad notes you write in the app are stored so the app can display them back to you and keep them in sync across your devices.

We do not collect location data, contacts, device identifiers for advertising, or any other data beyond what is listed above. mindlog contains no ads and no third-party analytics or tracking SDKs.

How we use your information

• To authenticate you and keep your account secure.
• To store and display your journal, to-do, and scratchpad content.
• To operate core app features, such as carrying unfinished to-dos forward to the next day and making your entries searchable.

We do not sell your data, share it with advertisers, or use it for any purpose other than providing the app's functionality to you.

Where your data is stored

Your account information and content are stored in a Postgres database hosted by our backend provider, Supabase. Access to your data is restricted at the database level so that only your own account can read or write your own data (row-level security). Data is transmitted between the app and our backend over encrypted (HTTPS/TLS) connections.

Data sharing

We do not share, sell, or rent your personal information to third parties. Your data is only accessible to our infrastructure providers (Google, for sign-in, and Supabase, for hosting) strictly as needed to operate the app, and to you.

Data retention and deletion

Your content is retained for as long as your account exists. You may request deletion of your account and all associated data at any time by emailing us at the address below; we will delete it within a reasonable time.

Children's privacy

mindlog is not directed at children under 13, and we do not knowingly collect information from children under 13.

Changes to this policy

If this policy changes, the updated version will be posted at this same URL with a revised "Last updated" date.