Privacy Policy

1 What Data We Collect

2 Journal Data & On-Device AI (Gemini Nano)

All journal text you write in MindFlow AI is processed exclusively on your device using Google Gemini Nano — Android's on-device AI model. This means:

• Your journal content is never sent to any AI API endpoint or external server
• AI analysis (Clarity Score, Burnout Risk, Reflection Questions) runs entirely in Gemini Nano on your device
• On devices where Gemini Nano is unavailable, a local heuristic engine provides analysis — still 100% on-device
• Voice journaling uses Android's on-device speech recognition — audio never leaves the device

EU AI Act compliance: All AI-generated content in MindFlow AI (Clarity Score, Reflection Questions, Burnout Risk, Suggested Actions) is labeled with ✦ as required by EU AI Act Article 50.

Important note: AI-generated insights are designed solely for personal self-reflection and mindfulness. They do not constitute medical, psychological, or clinical advice.

3 AES-256 Encryption (SQLCipher)

MindFlow AI uses SQLCipher — the gold standard for mobile database encryption — to protect all stored data:

• AES-256-CBC encryption for all journal entries, mood data, and settings
• Encryption key is derived from device-bound secrets and (optionally) your biometric authentication
• The database is inaccessible even if the device is rooted or data is extracted via backup
• PTE Team does not hold any encryption keys — even we cannot decrypt your data

Additionally, the app uses androidx.security.crypto (EncryptedSharedPreferences) for all user preferences and settings storage.

4 Advertising (AdMob & GDPR/CCPA Consent)

The free version of MindFlow AI displays advertisements via Google AdMob (Banner, Interstitial, and optionally Rewarded ads). Pro subscribers see zero ads.

We use Google User Messaging Platform (UMP SDK) — Consent Mode V2 — to comply with GDPR and CCPA before showing any personalized advertising:

• EU/EEA users: Consent form shown on first launch — personalized ads only after explicit opt-in
• California users: Opt-out option for sale/sharing of personal info for advertising
• Other regions: Standard contextual ads may be shown

AdMob ad placements: Banner (Insights screen) · Interstitial (after every 5 journal saves) · Rewarded (user-initiated, unlocks AI tokens). No incentivized or misleading ad clicks.

Change your advertising consent: Settings → GDPR & CCPA Privacy Consent

Google Advertising Policies →

5 Analytics & Crash Reporting (Firebase)

MindFlow AI integrates Google Firebase Analytics and Firebase Crashlytics:

Firebase Analytics collects (anonymized):

• App events (e.g., "journal_saved", "insights_viewed", "paywall_opened") — no content
• Device model, OS version, app version
• Country/region (coarse) — never precise location
• Journal content is never included in any analytics event

Firebase Crashlytics collects:

• Stack traces at time of crash
• Device state (OS version, available memory, battery) — no personal data

Google Firebase Privacy Policy →

6 Biometric Data

MindFlow AI's optional Biometric App Lock uses the Android BiometricPrompt API and androidx.biometric library:

• MindFlow AI never accesses, stores, or transmits biometric data (fingerprint or face data)
• Authentication is performed entirely by Android OS and device secure hardware (TEE)
• MindFlow AI only receives a boolean success/failure result from the OS
• Fingerprint and face data never leave the device's Trusted Execution Environment

7 In-App Purchases & Subscriptions

MindFlow AI offers the following via Google Play Billing Library V9.1:

• mindflow_pro_monthly — Auto-renewing monthly subscription
• mindflow_pro_yearly — Auto-renewing yearly subscription (7-day free trial available)
• mindflow_lifetime — One-time lifetime purchase
• mindflow_ai_tokens_50 — Consumable AI token pack
• mindflow_clarity_bundle — One-time bundle purchase

PTE Team does not collect or store payment card details. All billing is handled securely by Google Play. Google Play Purchase Support →

8 Data Retention & Deletion

All journal data is stored locally on your device only. PTE Team does not hold server-side copies of your journal content.

How to delete your data:

• In-app: Settings → Security & Privacy → "Delete All Data" — permanently erases all journals, mood history, settings, and AI analysis from your device
• Uninstall: Uninstalling MindFlow AI removes all local data automatically
• Data Deletion Request (analytics/crash logs): Email greene.pte@gmail.com with subject "MindFlow Data Deletion Request"

Compliant with GDPR Article 17 (Right to Erasure) and CCPA Right to Delete.

9 Children's Privacy

MindFlow AI is rated Everyone 13+ (ESRB) / PEGI 12+ and is not directed to children under 13 (or 16 in EU countries). We do not knowingly collect personal information from children. If you believe your child has used MindFlow AI, please contact greene.pte@gmail.com immediately.

10 EU AI Act Compliance

MindFlow AI is designed to comply with the EU Artificial Intelligence Act (2024/1689):

• Article 50 (Transparency): All AI-generated content is labeled with ✦ in the app UI
• Risk classification: MindFlow AI is a limited-risk AI system (wellness journaling tool, not a high-risk medical device)
• Human oversight: All AI insights are advisory — users make all decisions. The app is designed strictly for personal self-reflection and mindful awareness
• No manipulative AI: MindFlow AI does not use subliminal techniques or exploit vulnerabilities

11 Your Rights Under GDPR (EU/EEA Users)

Under the General Data Protection Regulation (GDPR):

• Right of Access (Art. 15): Request information about data we hold
• Right to Erasure (Art. 17): Use in-app "Delete All Data" or email us
• Right to Withdraw Consent (Art. 7): Change advertising consent via Settings → GDPR & CCPA Privacy Consent
• Right to Object (Art. 21): Object to processing for advertising purposes
• Right to Lodge a Complaint: Contact your local EU Data Protection Authority

Legal basis: Legitimate Interest (providing the journaling service you requested) + Consent (advertising, where applicable).

Data Controller: PTE Team · greene.pte@gmail.com

12 Your Rights Under CCPA (California Users)

• Right to Know: What personal information we collect, use, and share
• Right to Delete: Request deletion via in-app or email
• Right to Opt-Out: Opt out of sale/sharing of GAID for advertising via Settings → GDPR & CCPA Privacy Consent
• Right to Non-Discrimination: We will not discriminate for exercising your rights

We do not sell personal information as defined by CCPA. Journal content is never shared with any third party.

13 Changes to This Privacy Policy

We may update this policy to reflect changes in app features, legal requirements, or privacy practices. Significant changes will be communicated via Google Play release notes. The "Last Updated" date at the top of this page will reflect any changes. Continued use of MindFlow AI after changes constitutes acceptance.

14 Contact Us

• Email: greene.pte@gmail.com
• Subject: MindFlow AI Privacy Policy Inquiry
• App: MindFlow AI (com.pteteam.mindflow)
• Response time: Within 3 business days