Mindcraft

Privacy Policy

Last updated: March 30, 2026

TL;DR — Your data stays on your device or in your personal iCloud account. We don't track you, we don't sell your data, and we don't use third-party analytics. You have complete control over your information.

Introduction

Mindcraft (“we,” “our,” or “the app”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our iOS application.

Information We Collect

Information You Provide

User Account Data

  • When you sign in with Apple, we receive a unique anonymous identifier
  • We do not receive your email address or name unless you explicitly choose to share it

Content You Create

  • Text notes (Cards and Capsules)
  • Voice recordings (audio files)
  • Tags and collections for organizing your content
  • Imported messages from Telegram (if you choose to use this feature)

Automatically Collected Information

Device and Usage Data

  • Device type and iOS version
  • App usage preferences stored locally via UserDefaults
  • File modification timestamps for sync purposes
  • CloudKit sync status (if enabled)

How We Use Your Information

Local Data Storage

  • All your content is stored locally on your device using SwiftData

CloudKit Sync optional

  • If you enable CloudKit sync, your data is synced to your personal iCloud account
  • Sync uses Apple's CloudKit service, which is end-to-end encrypted
  • We do not have access to your synced data
  • Data is stored in your private iCloud storage, not on our servers

Authentication

  • Sign in with Apple provides secure, privacy-preserving authentication
  • We only receive an anonymous identifier
  • No email or personal information is required

Telegram Import optional

  • Messages are processed entirely on your device
  • Imported content is stored in your local database
  • We do not transmit your Telegram data to any external servers

Push Notifications

  • Used for background sync notifications and reminders (if enabled)
  • We do not collect or store notification content
  • Managed through Apple Push Notification Service (APNs)

Voice Transcription optional

  • When you choose to transcribe voice recordings, audio is sent to transcription APIs
  • Audio is processed solely for transcription purposes
  • Providers may temporarily process audio but do not retain it
  • You control when transcription occurs — it's always opt-in per recording
  • We do not use your voice data for any other purpose

AI-Powered Features optional

  • Card text may be sent to our backend server to generate embeddings, tag suggestions, and insights
  • Data is processed solely for providing these features to you
  • We do not use your content for training AI models
  • You control when these features are activated

Data Storage and Security

Local Storage

  • All data is stored locally on your device using Apple's SwiftData framework
  • Voice recordings are stored in the app's local file system
  • Media files from Telegram imports are stored locally

iCloud Storage optional

  • When CloudKit sync is enabled, data is encrypted and stored in your iCloud account
  • We use Apple's CloudKit service with standard encryption
  • Data is protected by your iCloud account credentials
  • We cannot access your iCloud data

Security Measures

  • All network communications use HTTPS encryption
  • Authentication via Sign in with Apple uses industry-standard OAuth
  • No third-party analytics or tracking services are used
  • No advertising networks or data brokers have access to your information

Data Sharing and Third Parties

We Do Not Share Your Data

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

Third-Party Services We Use

  • Apple Sign In — Authentication service
  • Apple CloudKit — Optional cloud sync service
  • Apple Push Notification Service — Push notifications
  • Voice Transcription APIs — Optional transcription of voice recordings

Most services are provided by Apple. Voice transcription is opt-in and only activated when you request it.

Your Privacy Rights

Data Access and Control

You have complete control over your data:

  • Access — All your data is accessible within the app
  • Export — You can export your data at any time
  • Delete — You can delete individual items or all data
  • CloudKit Control — You can enable or disable CloudKit sync at any time

Account Deletion

To delete your account and data:

  1. Delete the app from your device
  2. If CloudKit sync was enabled, delete the data from your iCloud account via iCloud.com

Children's Privacy

Mindcraft is not directed to children under 13. We do not knowingly collect information from children under 13. If you believe a child has provided us with personal information, please contact us.

Data Retention

  • Local Data — Retained until you delete it or delete the app
  • CloudKit Data — Retained in your iCloud account until you delete it
  • Account Data — Your Sign in with Apple credentials are managed by Apple

International Data Transfers

If you use CloudKit sync, your data may be stored in Apple data centers worldwide as determined by Apple's infrastructure. Apple complies with applicable data protection laws including GDPR.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes through in-app notifications and updates to this document.

GDPR Compliance

If you are in the European Economic Area (EEA), you have additional rights:

Legal Basis for Processing

  • Consent — CloudKit sync, Telegram import
  • Contract Performance — Core app functionality
  • Legitimate Interest — App improvement and security

Your GDPR Rights

  • Right to access your data
  • Right to rectification
  • Right to erasure (“right to be forgotten”)
  • Right to data portability
  • Right to object to processing
  • Right to withdraw consent

Data Controller

All data processing is controlled by you. We do not act as a data controller since your data is stored locally or in your personal iCloud account.

California Privacy Rights (CCPA)

We do not sell your personal information to third parties. California residents have the right to know what information we collect, the right to delete information, and the right to non-discrimination.

Analytics and Tracking

We do not track you.

  • No analytics services
  • No advertising SDKs
  • No cross-site tracking
  • No user behavior profiling
  • No data collection for marketing purposes

Contact Us

If you have questions about this Privacy Policy or your data:

tom@mindcraft.company

support@mindcraft.company

App Store Privacy Nutrition Label

Data Linked to You

  • User Content — Notes, audio recordings, voice transcriptions, tags
  • Identifiers — Sign in with Apple anonymous ID (for authentication only)

Data Used for Functionality

  • Audio Data — Voice recordings sent to transcription APIs only when you request transcription

Data Not Collected

  • Precise location, contact information, browsing history, search history, usage data for marketing or analytics