Privacy Policy

Effective date: May 24, 2026  ·  Last updated: May 24, 2026

1. Information We Collect

1.1 Account Information

When you sign in with Google, we receive from Google:

• Your Google account email address
• Your display name
• Your Google profile photo URL
• Your unique Google account ID

1.2 Profile Information You Provide

You may provide additional information when setting up your profile:

• Username and display name
• Biography / about me text
• Age or date of birth
• City or general location
• Profile photographs (uploaded from your camera or gallery)
• Mind map topic selections (your interests and passions)

1.3 Voice Recordings

You may send voice messages to your matches. These audio recordings are stored on our servers and are only accessible to you and the recipient of the message.

1.4 Location Information

With your permission, we collect:

• Approximate location — to show your city/region on your profile
• Precise location (GPS) — used at the time of location detection only; we store only the resulting city/country name, not raw GPS coordinates

You can revoke location permission at any time in your device settings.

1.5 Communications

• Text messages sent between matched users
• Voice messages sent between matched users
• Connection requests and follow requests
• Notification data (type, sender, timestamp)

1.6 Usage Data

• Match history (who you have matched with)
• Topics you have explored in the mind map
• Profile visits (that you have made to other users)
• Likes and reactions
• App interaction events

1.7 Device Data

• Firebase Cloud Messaging (FCM) token — used solely to deliver push notifications to your device
• Operating system type (Android / iOS)

2. How We Use Your Information

Purpose	Data Used
Create and manage your account	Google account info, email, user ID
Display your public profile to other users	Username, profile photo, bio, location (city), mind map topics
Match you with compatible users	Mind map topic selections, interests
Enable real-time messaging	Messages, voice recordings
Send push notifications	FCM token, notification content
Improve app features and fix bugs	Anonymized usage data
Prevent abuse and enforce our Terms	Account info, usage data

We do not use your personal data for advertising, profiling for third-party marketing, or any purpose not listed above.

3. Information We Share

3.1 With Other Users

The following profile information is visible to other MindMatch users:

• Username, profile photo, bio, city, age range
• Mind map topics (your interests)
• Match status and connection history (only to matched users)

Private messages and voice recordings are only visible to you and the recipient.

3.2 With Service Providers

We use the following trusted third-party services to operate MindMatch:

• Supabase (database, authentication, storage) — stores your profile data, messages, and media files. Data is stored on servers in the EU region.
• Google Firebase (push notifications via FCM, Google Sign-In) — receives your FCM token to deliver push notifications; processes your Google account credentials for sign-in.

These providers are contractually bound to keep your data secure and may not use it for their own purposes.

3.3 Legal Requirements

We may disclose your information if required by law, court order, or to protect the safety of our users or the public.

3.4 We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to any third party for commercial purposes.

4. Data Retention

We retain your data for as long as your account is active. When you delete your account:

• Your profile, messages, photos, voice recordings, and mind map data are deleted within 30 days.
• Aggregated and anonymized analytics data may be retained indefinitely (cannot be linked back to you).
• Certain records may be retained for up to 90 days for legal compliance, fraud prevention, or safety purposes, then permanently deleted.

5. Data Security

• All data is transmitted over HTTPS (TLS encryption).
• Data is stored in Supabase with row-level security (RLS) policies ensuring users can only access their own data.
• We regularly review and update our security practices.

No method of electronic transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Your Rights and Choices

6.1 Access and Correction

You can view and update your profile information at any time within the app (Profile → Edit Profile).

6.2 Delete Your Account and Data

You can delete your account and all associated data:

• In-app: Settings → Account → Delete Account
• By email: Send a deletion request to mindmatch1871@gmail.com
• See our Data Deletion page for details.

6.3 Location Permission

You can revoke location access at any time in your device's app settings. The app will continue to work without location access; your city will not be updated.

6.4 Push Notifications

You can disable push notifications at any time in your device's notification settings or within the MindMatch app.

6.5 Microphone and Camera

You can revoke microphone and camera permissions at any time in your device settings. You will not be able to send voice messages or take profile photos without these permissions.

7. Children's Privacy

MindMatch is not intended for users under the age of 17. We do not knowingly collect personal information from anyone under 17. If we learn that we have inadvertently collected data from a minor, we will delete it promptly.

If you believe a child has created an account, please contact us at mindmatch1871@gmail.com.

8. International Data Transfers

MindMatch is available worldwide. Your data may be processed and stored on servers located in the European Union (Supabase) and the United States (Google Firebase). By using MindMatch, you consent to this transfer.

We implement appropriate safeguards for cross-border data transfers in accordance with applicable data protection laws, including GDPR for European users.

9. Additional Rights for EEA / UK Users

If you are located in the European Economic Area (EEA) or United Kingdom, you have the following additional rights under GDPR / UK GDPR:

• Right of access — request a copy of your personal data
• Right to rectification — correct inaccurate data
• Right to erasure — request deletion of your data
• Right to restrict processing — limit how we use your data
• Right to data portability — receive your data in a machine-readable format
• Right to object — object to processing based on legitimate interests

To exercise any of these rights, contact us at mindmatch1871@gmail.com. We will respond within 30 days.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice in the app or sending a push notification. The "Last updated" date at the top of this page indicates when the policy was last revised. Continued use of MindMatch after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

• Email: mindmatch1871@gmail.com
• App: MindMatch — available on Google Play
• Package ID: com.mindmatch.mindmatch

We aim to respond to all privacy-related inquiries within 5 business days.