Privacy Policy

This Privacy Policy explains how MindHack collects, uses, stores, shares, and deletes information when you use the MindHack mobile application and related services.

1. Information We Collect

• Account identifiers from Google Sign-In, such as your Google account identifier and basic profile data.
• Profile data you set in MindHack, such as display name and avatar seed.
• Gameplay records, including level progress, achievements, energy usage, check-ins, and shared prompts.
• Conversation input and output required to run the AI gameplay flow and rule-judging pipeline.
• Device and app data needed for fraud prevention, app stability, and service delivery.
• Advertising and consent-related data used by AdMob and the Google Mobile Ads SDK.

2. Why We Use the Data

• To authenticate users and restore cloud-backed progress across devices.
• To operate the core game loop, including AI chat processing, rule judgment, and progression tracking.
• To grant rewards, preserve achievements, and maintain leaderboards.
• To prevent abuse, automate moderation, and investigate suspicious activity.
• To serve ads, manage consent, and measure ad-related events where permitted by law.
• To comply with legal obligations and enforce our terms.

3. Third-Party Services

MindHack currently relies on these service categories:

• Supabase for database, authentication, and edge function infrastructure.
• Google services for Google Sign-In and AI-related processing dependencies used by the app.
• Google AdMob and the Google Mobile Ads SDK for banner, app open, interstitial, and rewarded ads.
• Cloudflare services for website delivery and related infrastructure where applicable.

These providers process data according to their own policies in addition to this policy.

4. AI Processing

MindHack is an AI gameplay product. To generate character responses and judge rule violations, gameplay messages may be transmitted to cloud services and processed in real time. We use this processing only to deliver the gameplay experience, enforce rules, and maintain service integrity.

5. Advertising and Consent

MindHack uses AdMob. Depending on your location, you may be asked to provide or manage ad consent before ads become available. You can also revisit privacy choices from within the app where supported.

6. Data Retention

• Account and progression records are kept while your account remains active.
• Operational logs and abuse-prevention data may be retained for a limited period when required for security.
• Some data may remain in backups or legal records for a limited period after deletion where required.

7. International Transfers

Your information may be processed on servers located outside your home country. By using MindHack, you understand that data may be transferred across jurisdictions where our providers operate.

8. Children

MindHack is not intended for children under 16. If you believe a child has provided personal data through the service, contact us and we will review and remove the information where appropriate.

9. Your Rights and Choices

• You may stop using the service at any time.
• You may sign out from the app.
• You may request deletion of your MindHack account and associated cloud data.
• You may contact us to request privacy assistance or data deletion if you cannot access the app.

10. Account Deletion

MindHack provides an in-app delete-account flow for signed-in users. We also provide an external deletion request page at /account-deletion/ for users who cannot access the app.

11. Security

We apply technical and organizational measures intended to protect account data and service integrity, but no internet-connected system can be guaranteed fully secure.

12. Changes

We may update this policy from time to time. Material changes will be reflected on this page with an updated effective date.

13. Contact

For privacy questions or deletion requests, contact me@leshm.com.