Privacy Policy

MindRoll
Effective Date: July 1, 2026
Last Updated: July 1, 2026

This Privacy Policy describes how Jon ("we," "us," or "our") collects, uses, and shares information about you when you use MindRoll (the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information You Provide

• Voice recordings and transcriptions: When you record a voice note, the audio is processed on-device by Apple Speech Recognition to produce a text transcription. The transcribed text is stored locally on your device.
• Note text sent for AI analysis: When generating Pulses (daily insights) and Recaps (periodic summaries), a truncated version of your note text (up to 500 characters per note), along with its category labels, timestamp, and computed sentiment score, is sent to a Cloudflare Worker for processing by Cloudflare's AI models. Audio recordings are never sent to Cloudflare.
• Category names: You may create custom categories to organize notes. Category names are stored locally and sent to Cloudflare as part of insight generation.

1.2 Information Collected Automatically

• Usage data: Anonymous, aggregate usage statistics (e.g., number of notes recorded, features used) are tracked locally on your device. No usage data is sent to external servers.
• Crash data: No crash reporting or analytics SDKs are integrated. The app does not automatically transmit crash logs.

1.3 Third-Party Services

1.4 No Account System

MindRoll does not require an account, login, or registration. No personal identifiers (name, email, phone number) are collected by the app.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, operate, and maintain the Service — including generating AI-powered insights and periodic recaps from your note text
• To improve, personalize, and expand the Service — aggregate feature usage helps guide development decisions
• To communicate with you — including responding to inquiries sent to the support email address
• To comply with legal obligations — and enforce our policies

3. Sharing Your Information

We do not sell, trade, or rent your personal information to third parties.

Data shared with third-party service providers:

• Cloudflare receives note text for the sole purpose of generating AI insights. Cloudflare is prohibited from using this data for its own purposes.
• Apple receives audio data when on-device speech recognition falls back to server-assisted transcription, as governed by Apple's Privacy Policy.

We may disclose information if required by law, court order, or to protect the rights, property, or safety of Jon, our users, or others.

4. Data Storage and Security

4.1 Local Storage

All voice recordings, notes, categories, insights, and recaps are stored locally on your device using Apple's SwiftData framework. Audio data is stored inline in the same database. If you back up your device to iCloud, this data is included in the backup as part of iOS's standard device backup mechanism.

Authentication tokens for the Cloudflare Worker are stored securely in the iOS Keychain.

4.2 Security Measures

• Data transmitted to Cloudflare is encrypted in transit using TLS/SSL protocols.
• Access to the Cloudflare Worker is restricted by a shared authentication token.
• No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5. Data Retention

• Note text and metadata are retained on your device until you delete them. Deleting a note removes it from local storage.
• Cloudflare does not persistently store any data sent for AI processing. Data is processed in memory and discarded after the response is returned.
• Apple Speech Recognition transcripts are handled per Apple's data retention policies.

When you delete the app, all locally stored data is removed with the app deletion. Device backups may retain data until the next backup cycle.

6. Your Rights and Choices

• Delete your data: You can delete individual notes, insights, or recaps within the app. Deleting the app removes all locally stored data.
• Disable AI features: You can turn off daily insights and recaps in the Settings screen within the app. This stops all data transmission to Cloudflare.
• Access your data: Since all data is stored locally on your device, you have direct access to it at any time within the app.
• Withdraw consent: You may stop using the app at any time. All data resides on your device until deleted.

Depending on your jurisdiction (e.g., GDPR for EU users, CCPA for California residents), you may have additional rights including access, correction, deletion, and portability. To exercise these rights, contact us at the email below.

7. Children's Privacy

Our Service is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at hello.jpdev@gmail.com. We will take steps to remove such information.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes. Changes are effective when they are posted on this page.

9. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Developer: Jon
• Email: hello.jpdev@gmail.com
• Landing page: https://mind-roll-landing.vercel.app/
• Country: Canada

We will respond to your inquiry within a reasonable time frame.