Privacy Policy

Account. Your email address, and — if you sign in with Google — the display name and profile photo Google returns. Passwords are handled by Firebase Authentication and are never visible to us.

Profile. Your username, handle, avatar and bio.

Study content. Everything you create or upload: decks and flashcards, Knowledge Bank documents, past papers, exams, artifacts, folders and study schedules.

Study activity. Review results, scores, study time, streaks and the spaced-repetition schedule for each card. This is what makes the app work — it decides when you next see a card.

Social. Community posts and comments, direct messages, study group and room membership, friend connections, and leaderboard scores.

Device and preferences. Push notification tokens (only if you enable notifications), your theme, daily goal and reminder time.

Mindwell's AI features work by sending the content you choose to process — a topic, pasted notes, a PDF, a photo, a voice note, a past paper, or a question you ask Milo — to Google's Gemini models. If a fallback provider is configured, a request may instead go to Groq. Voice notes are transcribed by a speech-to-text model before being turned into flashcards.

Only the content required for the request you made is sent, and only when you trigger the feature. We do not send your messages, social activity or study history to these providers.

Audio you record for a voice note is used for that one transcription and is not stored — only the resulting flashcards are saved.

We do not sell your data or use it for advertising. It is processed by:

• Google Firebase — authentication, database, and push notifications.
• Supabase Storage — files you upload to community posts, chats and artifacts.
• Google (Gemini) — AI generation, as described above.
• Groq — optional fallback AI provider.
• Hugging Face — optional image generation and voice transcription.

Your study material is private by default. Decks, Knowledge Bank documents, past papers, exams and your study history are readable only by you — this is enforced by security rules on the database, not just by the app.

Other signed-in people can see your username, handle, avatar, bio and public counts on your profile, plus anything you deliberately publish: community posts and comments, decks you share into a group, messages you send, and your leaderboard score.

Your email address, notification tokens, reminder times and preferences are never shown to other users.

We keep your data for as long as your account exists. You can delete individual decks, notes, posts and messages at any time from within the app.

Deleting your account from Settings removes your profile, study content, community posts and uploaded files, releases your handle, and removes you from friend lists, groups and rooms. Deletion is permanent and cannot be undone.

Mindwell is intended for students aged 13 and over. We do not knowingly collect personal information from children under 13.

If you believe a child under 13 has created an account, contact us and we will delete it.

Data is transmitted over HTTPS and stored by Google Firebase and Supabase. Access is restricted by server-side security rules so that your private study space is readable only by your account.

No system is perfectly secure. Use a strong, unique password, and tell us if you think your account has been accessed by someone else.

You can access, correct, export or delete your information. Most of this is available directly in the app; for anything else, contact us and we will respond within a reasonable time.

Questions about this policy or your data: novathestar1415221@gmail.com