Privacy Policy

Our Core Privacy Promise

Mindora - Personal Mental Wellness Companion ("Mindora", "we", "our") was built around one principle: your mental health journey is your own. We collect only the minimum data needed to give you a great experience, and we never sell, broker, or share your personal information with advertisers, data brokers, or third-party health trackers.

Information We Collect

We collect only what is strictly necessary to operate the app:

• Account Information: Your email address, used solely for OTP-based authentication. We do not ask for any sensitive personal identifiers.
• Mood Logs: The 1–5 mood rating you voluntarily log after each session. Stored securely and never used for advertising.
• Session Data: Records of completed breathing and calming exercises (points, streak, total number of sessions). Used to power your AR Garden progress and analytics dashboard.
• Achievement & Garden State: Your butterfly collection, badge milestones, and streak progress — purely to personalize your experience.
• Camera (AR Garden only): The camera is accessed solely to power the AR Butterfly Garden feature using Apple's ARKit. No camera images or video are recorded, stored, or transmitted. Camera access can be revoked at any time in iOS Settings → Mindora.
• Device Information: Basic iOS device model and OS version, collected anonymously to improve app performance and fix compatibility issues.

How We Use Your Data

Your data is used exclusively to make Mindora work better for you:

• Displaying your weekly and monthly mood trend charts and emotional trajectory insights
• Progressing your butterfly lifecycle (Egg → Caterpillar → Pupa → Butterfly) based on completed sessions
• Maintaining your streak, point totals, and achievement badges across devices
• Syncing your AR Garden state so it persists between app launches and device restores

We do not use your data for profiling, advertising targeting, or any purpose beyond delivering the app experience.

Data Storage & Security

All user data is stored securely on Supabase, a cloud infrastructure provider with enterprise-grade security standards. Your data is:

• Encrypted in transit using TLS/HTTPS protocols
• Encrypted at rest on Supabase-managed servers
• Accessible only through authenticated API requests tied to your verified session token
• Never stored in plain text on your device or our servers

The app also leverages iOS's on-device caching for offline functionality — this cached data is sandboxed to the app and inaccessible to other applications.

Data Sharing

We do not sell, rent, or share your personal data with any third parties for commercial purposes. The only circumstances under which data may be shared are:

• Legal Obligation: If required by a valid court order or applicable law.
• Service Providers: Supabase acts as our infrastructure provider and processes data solely according to our instructions under a data processing agreement.
• Apple: Standard iOS analytics (if you have opted into Apple's device diagnostics) may be shared with Apple under their own Privacy Policy.

Your Rights & Data Deletion

You are in complete control of your data. Within the Mindora app, you can:

• View your data: Access all your mood logs and session history from the Insights tab.
• Delete your account: Permanently remove all your data (account, moods, garden, achievements) from the Profile tab → "Delete Account". This is irreversible and immediate.

If you require any additional data requests (export, correction), please contact us directly at the email below.

Children's Privacy

Mindora - Personal Mental Wellness Companion is not directed at children under the age of 13. We do not knowingly collect personal information from anyone under 13. If we become aware that a child under 13 has provided us with personal data, we will delete it immediately. If you believe a minor has used the app, please contact us at mindora.icodesquad@gmail.com.

Data Retention

We retain your personal data only for as long as your account is active. Specifically:

• Account data (email): Retained until you delete your account.
• Mood logs, session data, and garden state: Retained until you delete your account.

When you delete your account via Profile → "Delete Account", all your data is permanently and immediately erased from our servers. We do not keep backups of deleted accounts.

Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or applicable law. When we do, we will update the "Last updated" date at the top of this page and, for material changes, notify you via an in-app notice. Continued use of Mindora after updates constitutes acceptance of the revised policy.