mindHub

Your account

• On the website you sign in with Google. We ask Google only for openid, so its sign-in token carries an identifier for you and no name, email address or photo. On iPhone you will sign in with Apple, and we ask Apple for no name or email address.
• We store an account ID made from that identifier by a one-way hash. If you link a second sign-in (Apple and Google), we store the same kind of hash for it with the date you linked it. For Apple we also keep a token that lets us revoke Sign in with Apple when you unlink it or delete the account. Google gives us no token to keep. An Apple ID or Google account that already has its own mindHub account cannot be linked; accounts are never merged.
• We keep which version of the OpenAI notice you agreed to, and when.

What the account keeps

• Maps: the text of each map (its title and its ideas, events, steps, stages, table cells or causes), its kind, the direction you chose, and when it was made and changed.
• Source images: the images a map was made from, up to five per map, as JPEG no larger than 2048 pixels on the long side.
• Today's counts: how many maps and better-quality remakes you made today, for the free daily limit. Only today's counts are kept.
• When you delete a map, a marker with its ID and the time of deletion stays, with nothing of its content, so your other devices remove it too.

OpenAI

• When you make or remake a map, our server sends OpenAI the images you chose and, from the iPhone app, the text the phone read from them. It never sends your account ID or anything from your sign-in.
• The first time, mindHub says this and waits for you to agree. Nothing is sent until you do.
• Under OpenAI's API terms, it does not use this data to train its models, and keeps it for up to 30 days to monitor abuse. See OpenAI's privacy policy.

Where it is stored, and who processes it

• The account and maps are stored on Google Cloud in Tokyo, Japan (region asia-northeast1). Source images sit in private storage that only our server can read. The website is hosted on Google's Firebase Hosting. Everything travels over HTTPS.
• Service providers process data for us, each only to provide its service: Google Cloud (hosting, storage and Sign in with Google), OpenAI (reading images to make maps, in the United States) and Apple (Sign in with Apple on iPhone). Each is bound by terms that protect your data at least as well as this policy does.
• We do not sell your data or share it with anyone else.

In your browser

• The website keeps a few things in your browser's own storage: your sign-in session, a copy of your maps' text so they open quickly, changes waiting to be sent, and whether the description panel is shown. Source images are not saved in the browser; they are loaded from the account when you open them.
• The website sets no cookies and loads no scripts, fonts or images from anyone else. Google sign-in happens on Google's own page.
• Signing out removes the session and the browser's copy of your maps. The account keeps its copy until you delete it.

On your iPhone

• The app keeps your maps and their source images on the phone. Before a map is made, the phone reads the text in your images itself, with Apple's on-device text recognition.
• The app reads only the photos you pick, scan or share to it. Deleting the app removes what it keeps on the phone.

Keeping and deleting

• Deleting a map removes it and its source images from our server at once.
• Deleting the account (Account → Delete account) immediately deletes the account, every map and source image, any linked sign-in and today's counts, and revokes Sign in with Apple.
• Stopping Sign in with Apple for mindHub in your Apple Account settings deletes the account in the same way if you signed up with Apple. If you signed up with Google and only linked Apple, it unlinks Apple and the account stays.
• Our server logs record the kind of map made, how many images it had, how much text the phone read, the AI usage it cost, and any errors, without your account ID, your images or their text. Google Cloud also keeps standard request logs, which include IP addresses, for 30 days.

What mindHub does not collect

• No advertising, analytics or tracking, and no advertising identifier.
• No location, no contacts, and no photos other than the ones you choose.

Children

mindHub is meant for ages 13 and up. If you believe a child under 13 has made an account, write to us and we will delete it.

Your choices, and contact

To ask what we hold about you, to correct it, or to have it deleted, write to support@dina.jp. You can also delete everything yourself from the app or the website at any time.

Changes to this policy

If this policy changes, the updated version will be posted on this page with a new date.