MindBlink privacy policy

Last updated October 5, 2026

The short version

• You speak; your phone turns it into text. Audio never leaves your device and is never stored.
• The text you capture is stored in your private account on our server, and processed by third-party AI providers (Anthropic and OpenAI models, with zero data retention) to build your brain. The app asks for your agreement before anything is sent.
• No ads, no tracking across apps or websites, no data sales, no third-party analytics SDKs.
• Export everything or delete your account in the app, anytime.

This policy covers the MindBlink iPhone and Apple Watch apps, the web companion, and the service behind them. It applies to the MindBlink app published as “MindBlink” with an account and a server brain; the original on-device MindBlink capture app has its own policy.

What we collect

Your account

• Your Sign in with Apple identifier and, if you choose to share it, your email address (which may be an Apple private-relay address).
• Your time zone, briefing time, and notification tokens, so briefings and reminders arrive at the right time.
• Your subscription status, which Apple reports to us (we never see your payment details).

What you capture and ask

• The text of your thoughts — spoken (transcribed on your phone), typed, imported from notes or AI-chat exports, or shared into MindBlink from other apps.
• Photos, screenshots, and PDFs are read on your device (or by Apple's Private Cloud Compute on supported iPhones); only the text they contain is sent to us. The images and files themselves are never uploaded or stored.
• Links you save: we fetch the page or YouTube transcript text and store it as your capture. Emails you forward to your MindBlink address are stored the same way.
• Your questions and chats with your brain, your searches, and what MindBlink writes for you (memories, your profile, briefings, letters, drafts).

Context you can turn on (each is off until you enable it)

• Apple Health: daily summaries of steps, active energy, heart-rate variability, resting heart rate, sleep, and mindful minutes, plus a short note of how you were doing attached to a capture. Individual Health samples stay on your device. Apple Watch workout reflections include a short summary (type, duration, calories). Health data is never used for advertising or marketing and is never sold.
• Place: if you turn on place tagging, the approximate coordinates (about 100 m) and the name of a saved place where you captured a thought. Location-based reminders are checked on your device.
• Calendar and Reminders:the titles, times, places, and attendee names of today's and tomorrow's events, and what's due, held for up to 24 hours to write your briefing.
• Activity and music: whether you were walking, driving, or still, and the song and artist playing when you captured a thought.

Integrations you connect

• Gmail (only permission to send emails you approve), Readwise highlights, and any webhook or AI-assistant connection you set up.

How you use MindBlink

• Which briefing cards you saw or opened, and counts of AI usage. These are first-party records in our own database, used to make briefings relevant and to keep usage within fair limits.

What stays on your phone

Your voice audio, your contacts (read only to spell names correctly), individual Apple Health samples, and your photos and files. Face ID is handled entirely by iOS.

How we use it

Only to run MindBlink for you: to extract memories and people from what you capture, write your briefings and drafts, answer your questions with citations to your own words, send the notifications you've enabled, keep your account secure, and keep the service within fair usage limits. We don't use your content for advertising, we don't sell it, and we don't track you across other apps or websites.

Who processes it

We use these service providers, which process data on our behalf in the United States:

• Vercel — hosting, and the AI Gateway that routes requests to the AI providers.
• Neon — our database (encrypted at rest).
• AI models from Anthropic (Claude) and OpenAI— processing your text: extracting memories, writing, answering, and search embeddings. Every request goes through Vercel's AI Gateway with zero data retention required, so it is only sent to a provider that keeps nothing after responding and never trains on it. Depending on availability, those models run on infrastructure from Anthropic, OpenAI, Microsoft Azure, Amazon Web Services (Bedrock), or Google Cloud (Vertex AI).
• ElevenLabs— turns your brain's answer into speech, only when you ask for a spoken answer. It receives the answer text, not your captures, and is not covered by the zero-retention routing above.
• Apple— Sign in with Apple, push notifications (notification text passes through Apple's push service, or your browser's push service if you turn on web notifications), in-app purchases, and Private Cloud Compute for on-device-class processing.
• Cloudflare — receives emails you forward to your MindBlink address.
• Google and Readwise — only if you connect them.

We don't share your data with anyone else, except if required by law. No one at MindBlink reads your content unless you ask us to (for example, in a support request) or the law requires it.

Sharing you control

You can create a public link to a single item you choose, optionally with a password and an expiry date. Anyone with the link can see that item. Links are private by default, and revoking one takes effect immediately.

Keeping and deleting

• Your data is kept while your account is open.
• Deleting a thought removes it from your brain right away — it no longer appears in search, chat, or briefings — and its text is permanently erased within 30 days. Tentative memories that rested only on it are removed with it; established memories it helped form can remain — review or forget any of them in Settings → What your brain knows.
• Deleting your account(Settings → Account → Delete account) immediately and permanently erases everything — thoughts, memories, profile, briefings, chats, and search data — revokes MindBlink's Sign in with Apple access, and disconnects any integrations. Database backups roll off within 30 days.
• Export: Settings → Your data → Export everything gives you a complete copy at any time.

Security

Data is encrypted in transit (HTTPS) and at rest. Tokens for connected services are additionally encrypted. Your session lives in your phone's Keychain, and you can lock the app with Face ID.

Children

MindBlink isn't intended for children under 13, and we don't knowingly collect their data. If you believe a child has created an account, contact us and we'll delete it.

Your rights

You can access, export, correct, and delete your data in the app. Where laws like the GDPR or the CCPA give you additional rights, contact us and we'll honor them. You may also complain to your local data-protection authority.

Changes

If we change what we collect or who processes it, we'll update this page and ask for your agreement again in the app before the change applies to you.

Contact

Questions or requests: privacy@mindblink.app