Mindvia Privacy Policy
Last updated: 30 September 2026
This policy explains what data the Mindvia iPhone app handles, where it's kept, who else sees it, and what you can do about it. It covers Mindvia only. For Wordesso, read the Wordesso privacy policy. If anything is unclear, email hello@outofmindapps.com.
The short version
- Your mood check-ins, journal, reflections and birth details are stored encrypted on your iPhone. We never see them.
- Your account holds your email address, how you sign in and your choice about the weekly email. That's the data we can read.
- If you're signed in, Mindvia backs up once a day when you open it, and whenever you tap Back up now. You can turn the daily backup off in Settings → Account. Your iPhone encrypts every backup first, so our server holds only data that nobody else can read, including us.
- Mindvia has no ads, no analytics, no tracking, no crash reporter and no AI. We never sell your data.
- The weekly email is off unless you switch it on. People under 18 never get it.
- You can delete your account and its server data from inside the app.
Who we are
Mindvia is made by outofmindapps, an independent app studio run by Yelyzaveta Kibets. We are responsible for your personal data under this policy. Contact: hello@outofmindapps.com.
What Mindvia handles
| Data | Why | Where it's stored | Shared with |
|---|---|---|---|
| Your settings: your age group (under 18 or 18+), language, tone, topics, reminder times, colour palette and whether the app lock is on. | To show the right notes at the times you picked. | Encrypted on your iPhone. | Nobody. |
| Mood check-ins: how you feel, tags, energy, an optional note, and the time and time zone. | To show your mood history. | Encrypted on your iPhone. Inside your encrypted backup, if you make one. | Nobody. |
| What you write and save: journal entries, lesson answers and notes, answers to the small question, reflection answers and takeaways, your own notes, saved notes and tarot readings. | So you can come back to them. | Encrypted on your iPhone. Inside your encrypted backup, if you make one. | Nobody. |
| Birth details (18+ only): birth date, birth time if you add it, and birth place (city name, coordinates and time zone). | To calculate your birth chart. The calculation runs on your iPhone. Mindvia uses no astrology service. | Encrypted on your iPhone. Inside your encrypted backup, if you make one. | Nobody. |
| City search text while you type your birth place. | To find the city. | Not saved. | Apple (Apple Maps), only while you search. |
| Reminders: the note text and a few IDs for each scheduled reminder. | To show your daily note on your lock screen. | In iOS notifications on your iPhone. We don't send push notifications. | Nobody. |
| Plus status: the last time Apple confirmed your subscription. | So Plus keeps working offline. It never lasts past the paid period. | Encrypted on your iPhone. | Nobody. The App Store checks your subscription with Apple directly. |
| Account details: your email address, how you sign in (email code, Google or Apple) and a user ID. Apple may give us a private relay address instead of your email. If you use Google, Google may also send your name and profile picture. Our sign-in system saves them with your account, but Mindvia doesn't use them. | To create your account, sign you in and link your backups to you. | Supabase, our server provider. A copy of your email address and sign-in method on your iPhone. | Supabase. Resend, to send your sign-in code. Google or Apple, if you sign in with them. |
| Sign-in tokens. | To keep you signed in. | The iPhone Keychain. Never in files or backups. | Supabase, each time the app checks you're signed in. |
| Encrypted backup: the encrypted data itself, a random key ID, a version number and a random ID for each iPhone. | To restore your entries on a new iPhone. | Supabase, as encrypted data only. Each iPhone keeps 1 backup, and a new backup replaces the last one. | Nobody can read it. Supabase stores it for us. |
| Backup key. | To lock and unlock your backups. | Your iCloud Keychain, which Apple encrypts end to end. | Apple keeps it in your iCloud Keychain. It is never sent to us. |
| Your weekly email choice: yes or no, the version of the wording you saw, your app language, and a record of every change. | To send "Weekly self-love, astrology and psychology tips and early access" (1 short email a week) only if you said yes, and to prove your choice. | Supabase. | Resend, only if you say yes. It gets your email address and app language. |
| A Sign in with Apple token, stored encrypted, once Apple sign-in is available and if you use it. | Apple requires apps to revoke the connection when you delete your account. | Supabase, encrypted. | Apple, when you delete your account. |
| Export file, only when you create one. | To give you a copy of your data. | A temporary file on your iPhone, removed when you close the share sheet. | Only where you send it. |
| Support emails you send us. | To answer you. | Our mailbox. | Cloudflare forwards them. Google (Gmail) hosts our mailbox. |
If you say yes to the weekly email from the offer in the app, you get 7 extra days of Plus, once. That is recorded only on your iPhone.
What Mindvia doesn't do
- No analytics or tracking tools, no ads and no crash reporter.
- No Apple Health (HealthKit) access.
- No AI service. Nothing reads your journal automatically.
- No astrology service. Your chart is calculated on your iPhone.
- No automatic cloud sync. Mindvia also asks iOS to leave its files out of your iPhone's own iCloud and computer backups. That's why Mindvia has its own encrypted backup.
Mindvia connects to the internet only to search for a city while you type your birth place, to sign you in, to save your weekly email choice, and to back up or restore when you ask. The App Store also checks your subscription with Apple.
Payments
Mindvia Plus is sold and billed by Apple through the App Store. We never see your card or payment details. Apple tells the app only whether your subscription is active.
Who processes data for us
| Service | What for |
|---|---|
| Supabase | Runs our sign-in system and the database that holds your account, your weekly email choice and your encrypted backups. Our Supabase project is in the United States (US East, North Virginia). |
| Resend | Sends your sign-in code emails. If you opt in, it also sends the weekly email, using your email address and app language. It counts which links in the weekly email are clicked, so we can see which tips are useful. We don't track whether you open it. |
| Apple | App Store purchases, Apple Maps city search, iCloud Keychain for your backup key, notifications on your iPhone and, soon, Sign in with Apple. |
| Sign in with Google, if you choose it. Gmail hosts the mailbox that receives support emails. | |
| Cloudflare | Runs this website and forwards email sent to our address. |
Supabase, Resend and Cloudflare process data only to deliver their service to us. When you use Apple or Google sign-in, Apple Maps or iCloud Keychain, Apple and Google also handle data under their own privacy policies. Our providers keep short-lived technical logs, such as IP addresses, to run and secure their services.
Health data
Mood check-ins, and anything you write about how you feel, can count as health data. That's true under the EU and UK GDPR, which give health data extra protection, and under US rules such as the FTC Health Breach Notification Rule. We treat this data that way:
- It's stored encrypted on your iPhone.
- It reaches our server only inside a backup you start, and your iPhone encrypts it first. We can't read it.
- We never use it for ads, never sell it and never share it.
- If a security breach ever affected your data, we would tell you as the law requires.
Mindvia doesn't diagnose anything. Nothing in the app is a medical or psychological assessment. Astrology and tarot are for reflection, not prediction.
Legal basis (for people in the EU and UK)
- Contract: your account, signing in and keeping the backups you ask for are needed to provide the app.
- Explicit consent: your backups can hold health data. We store them while you're signed in: once a day if the daily backup is on, and whenever you tap Back up now. You can turn the daily backup off in Settings → Account, or withdraw completely by deleting your account, which deletes your backups.
- Consent: the weekly email, only if you switch it on. You can withdraw at any time in the app or with the unsubscribe link. We keep a record of each change to prove your choice.
- Legitimate interests: keeping the service secure, stopping abuse and answering support emails.
How long we keep data
- Data on your iPhone stays until you delete it, use Erase everything or delete the app. Erase everything signs you out on that iPhone, but your account and backups stay until you delete your account. Your backup key stays in your iCloud Keychain, so a backup can still be restored.
- Your account, backups, weekly email choice and its history, and your Apple token stay until you delete your account.
- When you delete your account, we remove all of them from our database and revoke Apple sign-in if you used it.
- If you ever said yes to the weekly email, saying no or deleting your account takes you off the Mindvia list right away, and we stop emailing you. Resend may still keep your address as a contact record that isn't on any Mindvia list. Email us and we'll delete it completely.
- Support emails are kept only as long as we need them to help you.
Your rights
You can ask to see, correct, export or delete your data. You can also object to how we use it, ask us to limit it, and withdraw consent at any time. In Mindvia:
- Export: Settings → Privacy → Export my data creates a file with your check-ins, journal and answers. It's free.
- Delete your account: Settings → Account → Delete account. This removes your account and its data from our server. It doesn't cancel a subscription.
- Delete data on your iPhone: Settings → Erase everything.
- Weekly email: switch it off in Settings → Account, or use the unsubscribe link in any weekly email.
For a copy of the account data on our server, or anything else, email hello@outofmindapps.com. We can't open your backups, so the export in the app is the way to get a copy of your entries. If you are in the EU or UK and you are unhappy with our answer, you can complain to your local data protection authority.
Children and teens
When you start, Mindvia asks if you're under 18 or 18+. This is your own answer, not an age check. If you choose under 18:
- Mindvia shows the daily notes. It keeps no mood check-ins, journal, lessons, reflections or birth details, and it doesn't offer Plus.
- You never see the weekly email switch or offer. If you change your age group to under 18 while signed in, an earlier yes is withdrawn.
- You can create an account after the app asks you to check with a parent or guardian first. The account holds your email address and sign-in method, plus an encrypted backup of your favourites and settings if you make one.
If you believe a child has given us data without a parent's permission, email us and we will delete it.
Security
- Mindvia's data on your iPhone is encrypted with AES-GCM. The 256-bit key stays in your iPhone's Keychain and is never synced. iOS file protection also applies.
- You can lock Mindvia with Face ID or your passcode in Settings → Privacy.
- Backups are end-to-end encrypted. Your iPhone encrypts them with AES-GCM before upload, using a key kept in your iCloud Keychain. Our server holds only the encrypted data. Neither we nor Supabase can read it.
- Sign-in tokens stay in the iPhone Keychain. Your Apple token is stored encrypted.
- Each account can reach only its own rows in our database.
If you lose your backup key, your backup can't be restored. That can happen if iCloud Keychain is off, or if your new iPhone uses a different Apple Account. We can't reset or recover the key. That's the cost of nobody else being able to read your backups.
No system is perfectly secure. If you find a security problem, please email us.
International transfers
Our server runs in the United States (Supabase, US East). Resend, Apple and Google may also process data in the United States and other countries. If you live outside the United States, your account data is transferred there, under the safeguards the law requires. Your backups are encrypted before they leave your iPhone, so they stay unreadable wherever they are stored.
Changes to this policy
If we change this policy, we will update the date at the top. If a change affects your rights in a significant way, we will tell you in the app.
Contact
Questions about your data? Email hello@outofmindapps.com. outofmindapps, run by Yelyzaveta Kibets.