Privacy Policy
Effective date: 19 October 2026
Mind Culture (the "App" and "Service") is operated by Mindculture Software Inc. ("Mind Culture", "we", "us", or "our"). This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. If you have questions, contact us at privacy@mindculture.io.
By creating an account or using the App, you agree to this Privacy Policy.
1. Information we collect
Account information. When you create an account we collect your email address, name, a username, and a securely hashed password. If you enable two-factor authentication, we store a secret used to verify your login codes. We store your subscription plan.
Content you save and create. Mind Culture is a personal library. We store the items you save (podcasts, articles, books, PDFs, links), and any notes, highlights/bookmarks, collections, goals, interests, ratings, and feedback you create. We store your playback and reading progress so you can continue across devices.
Contacts and sharing. If you add contacts to share content with, we store the name and email address you enter for them. (We do not access your device's address book.) We store the groups you create and records of items you share or receive.
Connected AI assistants. If you connect an AI assistant such as Claude to your account (see Section 4), we store a record of that connection and a log of the requests it makes.
Device and technical information. If you enable notifications, we store a push notification token for your device. We log limited technical information such as IP address for security, rate-limiting, and abuse prevention.
Communications. If you contact us, we keep your messages so we can respond.
We do not use advertising identifiers, third-party analytics SDKs, or cross-app/website tracking, and we do not track you across other companies' apps or websites.
2. How we use your information
We use your information to: provide and maintain the Service; authenticate you and keep your account secure; store and sync your library and progress; generate personalized recommendations, summaries, and transcripts; deliver notifications and transactional emails you request or that are part of the Service (for example, when someone shares content with you); answer requests from AI assistants you have connected; provide customer support; and comply with legal obligations.
3. AI processing
To provide recommendations, goal suggestions, transcript analysis, and text-to-speech, we send relevant content you have saved or generated (such as item text, transcripts, or goals) to AI service providers that process it on our behalf (see Section 5). These providers process the content to return results to us and do not use your content to train their models except as permitted by our agreements with them. We do not sell your content.
4. AI assistants and connectors
You can connect an AI assistant, such as Claude through the Mind Culture connector, or another app that uses the Model Context Protocol (MCP), to your Mind Culture account. Nothing is connected unless you choose to: you sign in to Mind Culture and approve each connection yourself.
What a connected assistant can access. When you ask it to, a connected assistant can read your own Mind Culture data — your library, notes, starred items, collections, goals, interests, people, queue, contacts and groups, the podcasts you follow, your listening history, and transcripts of episodes in your library — and make the changes you ask for, such as saving an item or creating a goal. It can never see other members' data, your password, or your sign-in codes.
Where the data goes. What a connected assistant reads from Mind Culture is sent to that assistant's provider (for Claude, Anthropic) under your own account with them, and is handled under their privacy policy and your settings with them, not under this one. Mind Culture does not send your data to an assistant you have not connected.
What we keep. We store the name of each app you connect and when you approved it. The access keys it uses are stored only as one-way hashes; access tokens expire after one hour and refresh tokens after 30 days. We log each request a connected assistant makes (which action, when, and from which IP address) for security and abuse prevention, and delete these logs after 90 days.
Disconnecting. You can revoke any connected app at any time on the web under Settings → User Data → Connected apps; it loses access immediately. Deleting your account also removes every connection.
5. Service providers (sub-processors)
We share information with vendors who process it only to provide the Service to us, under contract:
- Supabase — database hosting (stores your account and content).
- Vercel — application hosting and file storage (thumbnails, generated audio, avatars).
- Anthropic — AI models for recommendations, summaries, and transcript analysis.
- Deepgram — audio transcription and text-to-speech.
- Resend — sending transactional email.
- Expo — delivering push notifications.
- Google Books, Open Library, YouTube — looking up book and video metadata from search terms you provide.
We do not sell your personal information, and we do not share it with third parties for their own marketing.
6. Data retention and account deletion
We keep your information for as long as your account is active. You can permanently delete your account at any time from Profile → Delete account in the mobile app, or Settings → Delete account on the web. Deleting your account permanently removes your account and associated data (library, collections, goals, history, groups you own, and shares you sent). Some records may be retained where required by law or for legitimate security/fraud-prevention purposes, and backups are purged on a rolling schedule.
7. Security
We protect your information with encryption in transit (HTTPS), hashed passwords, optional two-factor authentication, and access controls. No method of transmission or storage is completely secure, but we work to protect your information.
8. Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can access and correct most information in the App, delete your account as described in Section 6, or contact us at privacy@mindculture.io to exercise your rights.
9. Children
Mind Culture is not directed to children under 13 (or the minimum age of digital consent in your country), and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.
10. International transfers
We are based in Ontario, Canada, and our providers may process information in other countries. Where required, we use appropriate safeguards for international transfers.
11. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version with a new effective date and, where appropriate, notify you.
12. Contact
Mindculture Software Inc. Email: privacy@mindculture.io