Myndo Privacy Policy

Last Updated: October 9, 2026

This version applies to new accounts from October 9, 2026, and to existing accounts when they accept it. Until you accept it, the version you accepted before applies to your account. Earlier versions are listed at the end of this page.

What stays the same. Your Conversation Data is never used for advertising or for marketing to you, and we never sell your data (Section 13.2).

What changed. Our promises not to use your data for advertising or for marketing to you now cover your Conversation Data rather than all your data (Sections 1, 5.3, 13.1, 13.2 and 13.4), so that we can measure our own ads and email you about Myndo. If you say yes, we tell the ad network that showed you our ad what you did next, such as signing up, but never your name, email or anything you say (Section 5.5). We also explain how we email you, including optional emails you can turn off (Section 3.1), and that a new version applies to you when you accept it (Section 12). If you already had an account and hadn't chosen, accepting this version turns optional emails on, except in places where we ask you first. You can turn them off anytime. Compared with the version of October 8, 2026: Section 5.5 describes what we may send to ad networks in general terms instead of as a list, its list of what we never send no longer includes when, how long or how often you use Myndo, and we may keep a click ID for up to 90 days.

We will ask you to accept these changes before you next use Myndo. Until you accept, nothing about your account is sent to an ad network, and you can still export or delete your data.

1. Our Privacy-First Commitment

At Myndo, privacy isn't just a legal requirement—it's a core value and feature of our service. We believe that support for your wellbeing and inner life should be private and accessible, which is why:

We minimize data collection. We collect only what we need to provide and improve the Service. We also use a small amount of information about how you found Myndo to measure our own ads, within the limits in Sections 5.5 and 13.2.
We prioritize the privacy of what you share. We recognize that your reflections can be deeply personal and may reveal sensitive information, and we apply additional protections. We are committed to irrevocable data protection commitments (See section 13).
You control your data. You own your data and can delete it when you choose.
We implement pseudonymization. We pseudonymize your Conversation Data wherever we can, including at our service providers. Some providers need your contact details to run your account and to email you (Section 5.1). Advertising partners never receive your Conversation Data or your contact details.
No ads in Myndo, and your conversations never reach advertisers. We advertise Myndo on other services and measure whether those ads work, within the limits in Sections 5.5 and 13.2. That never uses anything you say to Myndo.
Complete deletion. When you delete your account, we permanently delete your personal content. We keep messages you exchanged with us, such as emails, support messages and feedback, for our records and to handle questions or claims, and the few other records described in Section 6.
We're transparent. We clearly disclose what data we collect and why

This Privacy Policy explains how Nelumbo Labs LLC ("Myndo," "we," "our," or "us") collects, uses, shares, and protects your information when you use our voice-based AI coaching and self-reflection service for general wellbeing, including our website, applications, and related services (collectively, the "Service"). Myndo is a wellbeing and self-reflection tool; it is not a medical device or a substitute for professional care.

2. Information We Collect

2.1 Information You Provide to Us

When you use our Service, you may provide us with the following information:

Account Information: Your email address, your name and the settings you choose. We use them to run your account, to personalize Myndo (our AI coach may use your name in conversation), and to email you (Section 3.1).
Voice Inputs: When you speak to Myndo, we process your voice in real-time for transcription. We do not store your voice recordings.
Conversation Transcripts: We store text transcripts of your conversations with Myndo to provide personalized support and improve our Service.
AI-Generated Content: We use AI to analyze your conversation transcripts to generate personalized content including insights, themes, patterns, summaries, and other information to help provide tailored wellbeing and self-reflection support. This content is used to personalize your experience across the Service.
Payment Information: If you subscribe to Myndo, we collect payment information through our payment processor, Stripe. We do not store complete credit card information on our servers.

Conversation Data. In this policy, "Conversation Data" means what you say or type to Myndo and everything we create from it: your voice inputs, conversation transcripts, AI-generated content, memories, insights, topics, goals, practices, weekly reviews, posters, onboarding answers, the text of reminders and notifications we write for you, support and feedback messages, voicemails, and anything we learn from these about your moods, emotions, health or wellbeing.

2.2 Information We Collect Automatically

When you use our Service, we may automatically collect the following information:

Usage Data: Information about how you use the Service, such as when you joined, the features you use, and when, how long and how often you talk with Myndo.
Device and Location Information: Information about your device and its settings, such as device type, operating system, time zone, language and region, and your approximate location, such as your country or region. We use it to run, secure and personalize the Service, to time reminders, and to apply the rules that fit where you live.
Session Events: Events and actions taken during your sessions with Myndo.
Analytics Data: We use analytics tools to collect pseudonymized usage data which helps us improve the Service. This may include information about your device (such as IP address, browser type, operating system) and how you interact with our platform.
Push Notification Data: If you enable notifications on our mobile app, we collect device tokens to send you reminders and updates. We also collect basic device information (device identifier, platform) to ensure reliable notification delivery. You can disable notifications at any time through your device settings.
Email Information: We may measure whether our emails to you are delivered, opened or clicked, so we can keep them working and improve them.
Ad Measurement Data: If you reach Myndo through one of our ads or campaign links, we record the campaign and ad you came from. If you say yes to ad measurement, we also keep the ad's click ID and record what you do next, such as going to the app store, signing up or paying, so we can tell the ad network (Section 5.5). We keep a click ID only as long as we need it to measure the ad, and never longer than 90 days. App stores and ad networks may also measure our ads themselves and send us reports.

2.3 Cookies and Similar Technologies

We use two kinds of cookies and similar technologies:

Essential: These keep the Service working and are always on. If you answer the ad-measurement question on our website, a cookie remembers your choice.
Analytics: Our analytics provider, PostHog, uses a random ID, or your account ID if you are signed in to Myndo in the same browser. We don't keep your IP address or ad click IDs.

We don't use advertising pixels or advertising cookies on our website or in our apps.

3. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve the Service
Personalize your experience with Myndo
Generate personalized insights to better understand and support your wellbeing and reflection goals
Process your payments and manage your account
Communicate with you, including the emails described in Section 3.1
Monitor and analyze usage patterns and trends
Measure and improve our own advertising, as Sections 2.2, 5.5 and 7.6 describe, and never using Conversation Data
Protect the security and integrity of the Service
Comply with legal obligations

Important Note on Voice Processing and Personalized Insights: Your voice inputs are processed in real-time for transcription purposes only. We do not store audio recordings of your voice—only the text transcripts derived from your voice inputs. These transcripts are analyzed by our AI to generate personalized insights that help us provide tailored support. These insights are treated with the same level of confidentiality and protection as your other personal information.

3.1 Emails and Other Messages

Service emails. We email you about your account, security and billing, about changes to our terms, and about your own activity in Myndo, such as a summary or report being ready. These continue while your account is open.

Optional emails. We also send optional emails, like help getting started, tips, news about Myndo and offers, because we think they make Myndo more useful. They're usually on by default, though in some places we ask you first. If you turned them off before, they stay off. You can turn them off anytime in the app's settings, with the unsubscribe link in any optional email, or by writing to privacy@myndo.ai, and we act on it promptly.

Measuring our emails. We may measure whether our emails are delivered, opened or clicked, to improve them.

Replies. Some of our emails come from our founder, who reads your replies.

Push and in-app messages may include reminders and personalized content. You control push notifications in your device settings.

4. Technical Infrastructure and Data Processing

To provide our Service, we use a combination of secure technologies:

Web Application Infrastructure: Our web application is built using modern web frameworks and hosted on secure cloud infrastructure.
Databases: We use different database systems to securely store different types of data:
- One database system for session data, transcripts, and personalized insights
- Another database system for user profile information (e.g., payment status)
Analytics: We use industry-standard analytics tools for service improvement
Authentication: We use third-party authentication services to securely manage user accounts
Voice Processing: Our voice-based interface relies on technologies for real-time audio communication, speech-to-text transcription, and text-to-speech conversion
AI Technology: We leverage AI language model capabilities from established providers
Payment Processing: Payments are handled by a trusted third-party payment processor
Email: We send and receive email through third-party email providers

All data is transmitted using encryption protocols and stored in secure, encrypted databases.

5. How We Share Your Information

We do not sell or rent your personal information to third parties, and we never sell or rent your Conversation Data or share it with advertisers. If you say yes to ad measurement, we share limited Ad Measurement Data with ad networks (Section 5.5). You can withdraw your yes anytime (Section 7.6). We may share your information in the following circumstances:

5.1 Service Providers

We work with carefully selected third-party service providers to operate Myndo. These providers process data only on our behalf and under strict contractual obligations to protect your information. Our service providers include:

Authentication providers to securely manage your account access
Cloud infrastructure and database providers to store and process your data securely
Real-time communication infrastructure to enable voice conversations
Speech recognition services to transcribe voice to text (we do not store voice recordings)
AI language model providers to power our conversational AI assistant
Text-to-speech services to generate voice responses
Analytics providers to understand how users interact with our service (using pseudonymized data)
Payment processors (Stripe) to handle subscription billing securely
Our subscription provider processes app-store purchase and install information to run memberships and to report which campaigns led to them.
Push notification services to deliver reminders and alerts to your device
Email providers to send our emails and to hold the emails you exchange with us

All service providers are bound by data processing agreements that restrict their use of your data to providing services to us and require appropriate security measures.

5.1.1 Enhanced Privacy Through Data Minimization

Pseudonymization: We share with each service provider only what it needs. Our AI, voice and analytics providers receive your conversations and usage under a pseudonymized ID, never your email address. Providers that run your account, take payments or send our emails receive the contact or payment details they need for that.

Ad networks are not our service providers. If you say yes to ad measurement, a network may link what we send it to an account you have with it. That is why what we send for ad measurement is off until you say yes, and why we never send them your Conversation Data, your contact details or your Myndo account ID (Section 5.5).

5.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

5.3 Business Transfers

If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. In such event, we will require any acquiring entity to honor the commitments in this Privacy Policy and to:

Use your Conversation Data solely for providing the Service, and other data only as this Privacy Policy allows
Maintain at least the same level of data protection
Not use your Conversation Data for advertising or marketing to you, and not sell your data to data brokers
Provide you with advance notice and the option to delete your account and all associated data prior to the transfer

We will notify you via email and/or a prominent notice on our website of any change in ownership and provide options for your data before the transfer occurs.

Following any business transfer, the acquiring entity may modify, update, or discontinue certain aspects of the Service, or change the terms and functionality, at their discretion and in accordance with the Terms and Conditions.

5.4 With Your Consent

We may share your information with third parties when we have your consent to do so.

5.5 Advertising Partners

We advertise Myndo on other services and measure which of our ads work. The companies that help us are ad networks, the app stores' own measurement tools, and measurement providers acting only on our behalf. We name them on our How Myndo advertises page.

Counting our own ads. We count, inside Myndo, which of our ads and campaign links bring people to Myndo. Nothing goes to ad networks for this.

With your yes. If you came to Myndo from an ad and say yes, we may tell that ad network what you did next, such as installing, signing up or paying, along with details about the ad and your general location. Joining a wellbeing service can itself be sensitive, so we do this only with your yes, and when we ask, we tell you what we would send.

What we never send: your Conversation Data, your name, email address or phone number, or your Myndo account ID.

What we never do: upload user lists to advertising partners, build audiences from what you do in our apps, build retargeting audiences from visits to our website, or target ads by health, mental health or hardship.

How ad networks use it. Each ad network handles what it receives under its own privacy policy, linked from our How Myndo advertises page. An ad network may combine it with data it already holds to measure ads and to decide who sees them, including other advertisers' ads. In US states with laws that let you opt out of the sale or sharing of personal information, you can opt out of ad measurement at any time, including with a Global Privacy Control signal (Section 7.6). In the European Economic Area, the United Kingdom and Switzerland, we and an ad network may be joint controllers for collecting and sending this information.

We may use a measurement provider that handles Ad Measurement Data only on our behalf and under our instructions.

6. Data Retention and Deletion

We retain your personal information only for as long as necessary to provide the Service.

6.1 Complete Deletion of Personal Content

When you delete your account, we permanently delete your personal content from our systems, except what is described under "What can remain" below:

Your personal information, including your email, profile details, and account data, is permanently deleted.
All conversation transcripts are permanently deleted.
All memories, insights, and AI-generated content are permanently deleted.
All topics, weekly reviews, and personalized content are permanently deleted.
Any data in our system backups will be overwritten in the normal course of business.

What can remain. We keep messages you exchanged with us, such as emails, support messages and feedback, for our records and to handle questions or claims. Our email provider may keep your email address on a do-not-email list if an email to you bounced or was marked as spam. We also keep the records described in Section 6.2.

6.2 Billing Metadata Retention

To comply with financial record-keeping requirements and support billing dispute resolution, we retain minimal metadata:

Account references (your account IDs, when your account was created and deleted, and your membership status when it was deleted)
Session timestamps and durations (when sessions started and ended, how long they lasted)
Usage metrics (token counts, not content)
Payment processor references (e.g., Stripe customer ID, if applicable)

This billing metadata contains no personal content, conversation text, or identifying information beyond what is necessary for financial records. It is retained for up to 7 years as required by law, then automatically deleted.

We keep a record of which version of the Terms and this Privacy Policy you accepted, and when, for up to seven years, so we can evidence consent and defend legal claims. This record contains no conversation content.

If you answer the ad-measurement question on our website, we keep a record of your answer, not linked to any account, for as long as we need to show we asked; an answer you give in the app is stored with your account. We keep an ad click ID only as long as we need it to measure the ad, and never longer than 90 days. As for everyone, we keep the campaign and ad names you arrived from (Section 2.2).

6.3 Why Complete Deletion

We believe complete deletion of personal content provides the strongest privacy protection:

No ambiguity: Your conversations and insights are gone, not "anonymized"
Privacy-first: Aligns with our commitment to your privacy
GDPR/CCPA compliant: Meets the highest standards for the "right to erasure"

When you leave, your story leaves with you.

7. Your Rights and Choices

7.1 Account Information

You can update your account information, including your email address and payment information, through your account settings.

7.2 Data Access and Portability

You have the right to access the personal information we hold about you and to receive a copy of this information in a structured, commonly used, and machine-readable format. We aim to fulfill access and portability requests under 7 days; the legal maximum is one month per GDPR Article 12(3). For step-by-step instructions, see Your Account Rights.

7.3 Data Correction

You have the right to correct inaccurate or incomplete personal information we hold about you.

7.4 Data Deletion

You have the right to request the deletion of your personal information. You can delete your account and associated data from Your Account Rights, which triggers permanent deletion of all your personal content (see Section 6). Deletion requests are honored without undue delay; the legal maximum is one month per GDPR Article 12(3).

7.5 Communication Preferences

You can turn optional emails off anytime in the app's settings, with the unsubscribe link in any optional email, or by writing to privacy@myndo.ai (Section 3.1).

7.6 Advertising Choices

What Myndo sends to ad networks about you is off until you say yes. You can change your choice in the app or by emailing privacy@myndo.ai. If your browser sends a Global Privacy Control signal, we treat it as a no. When you withdraw, on our website or in the app, we stop new sharing based on that yes, and we delete its click ID at once where we can, and otherwise when it expires.

Measurement that app stores run for our app campaigns follows your app store and device ad settings and the law where you live.

Information an ad network has already received is governed by that network's own privacy policy. Our How Myndo advertises page links to each partner's privacy policy and ad settings. You can also use aboutads.info/choices and youronlinechoices.eu.

8. California Privacy Rights

If you are a California resident, you have the rights provided by the California Consumer Privacy Act (CCPA), including:

The right to know what personal information we collect about you
The right to request deletion of your personal information
The right to opt out of the "sale" or "sharing" of your personal information. We do not sell your personal information. Where measuring our ads counts as "sharing" under California law, you can opt out at any time, including with a Global Privacy Control signal (Section 7.6).
The right to limit the use of your sensitive personal information. We use Conversation Data only to provide and improve the Service and never for advertising.
The right to non-discrimination for exercising your privacy rights

To exercise your California privacy rights, please contact us at privacy@myndo.ai. To stop ad measurement, see Section 7.6.

8.1 Other US States

If you live in another US state with a consumer privacy law, you may have the right to access, correct, delete and get a portable copy of your personal information, and to opt out of targeted advertising and the sale of your personal information. To use these rights, email privacy@myndo.ai or see Section 7.6. If we decline your request, you can appeal by replying to our decision. If you disagree with the outcome of your appeal, you can contact your state's Attorney General.

9. Security

We implement appropriate technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction. However, no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, while we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

10. International Data Transfers

We are based in the United States, and we and our service providers process information in the United States and other countries. When we transfer personal information out of the European Economic Area, the United Kingdom, Switzerland, Canada or another country that restricts such transfers, we rely on a recognized safeguard, such as an adequacy decision or approved standard contractual clauses, or another basis the law allows. This includes Ad Measurement Data we share with advertising partners when you say yes (Section 5.5). You can ask for a copy of these safeguards at privacy@myndo.ai.

11. Children's Privacy

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information.

12. Changes to This Privacy Policy and the Service

We post every new version on this page with a new "Last Updated" date and keep earlier versions available. For a material change, we will tell you by email or in the app and ask you to accept it before it applies to your account. Until you accept, the version you accepted before applies to your account, and you can still export or delete your data. Other changes take effect when posted.

Changes to the Service itself are covered by Section 12.1 of our Terms.

13. Data Protection Commitment

We are committed to protecting your data beyond standard privacy practices. Our commitments include:

13.1 Purpose Limitation

Your data, including conversation transcripts and personalized insights, will only ever be used for:

Providing and improving the Service, including the emails described in Section 3.1
Personalizing your experience with Myndo
Measuring our own advertising, as Sections 2.2, 5.5 and 7.6 describe. Conversation Data, including transcripts and personalized insights, is never used for this.

13.2 Irrevocable Commitments

We make the following irrevocable commitments regarding your data:

We will never sell your data to third parties
Your Conversation Data will never be used for advertising or for marketing to you, even with your consent.
We will never use personalized insights derived from your conversations for any purpose other than providing the Service to you
These commitments survive any change in ownership, acquisition, or business transfer.

The commitments about your Conversation Data can never be narrowed for any account, by notice or otherwise. We may use limited information that is not Conversation Data to measure our own ads, as Sections 2.2, 5.5 and 7.6 describe.

13.3 Technical Safeguards

We implement the following technical safeguards:

Encryption of all data in transit and at rest
Access controls limiting internal access to your data
Regular security audits and vulnerability testing
Data minimization practices
Pseudonymization for both third-party providers and internal use

13.4 Financial Disincentives

To align our business interests with your privacy:

Our business model is based on paid memberships and paid offers. There are no ads in Myndo, and we don't earn money from your data.
We never collect Conversation Data for advertising, and we keep the information we use to measure our own ads to the minimum described in Section 5.5.
Our privacy commitments are contractually binding, even in the event of acquisition

13.5 Transparency Reports

We will publish annual transparency reports detailing:

Types of government requests for data received, if any
Our response to such requests
Changes to our privacy practices
Data incident reports, if any

14. Personalized Insights Protection

We use AI technologies to analyze your conversation transcripts and generate personalized insights to provide tailored wellbeing and self-reflection support. These insights may include patterns in your communication, preferences, wellness indicators, emotional states, and other information that helps us understand your needs better. We recognize the sensitive nature of these insights and apply additional protections:

Limited Use: Personalized insights are used solely to tailor and improve your experience with the Service.
Never for Advertising: These insights will never be used for targeted advertising or marketing.
No Third-Party Sharing: We do not share your personalized insights with third parties, except as strictly necessary to provide the Service.
Protection in Transfer: In the event of a business transfer, the restrictions on the use of personalized insights will transfer with the data.
Complete Deletion: Your personalized insights are permanently deleted when you delete your account (see Section 6).
Automated Generation: Personalized insights are generated through automated AI processing of your conversation transcripts.
Limited Human Review: Your personalized insight data is not routinely reviewed by humans. However, to improve our Service, we may have authorized employees or contractors review pseudonymized conversation transcripts (identified only by pseudonymized_user_id with no other identifying information).

We believe that these additional protections are essential for maintaining trust while providing effective wellbeing and self-reflection support.

15. Limitations of AI-Based Support

Myndo is powered by AI and provides probabilistic responses based on the language you speak. While we strive to ensure accuracy and usefulness, AI can misunderstand your intent, produce irrelevant or incorrect information, or fail to detect important emotional nuance.

Please note:

Myndo does not understand tone, sarcasm, or intent beyond your literal words.
Myndo is not a substitute for human therapists or clinicians.
Myndo may generate responses that feel helpful, but they should not be taken as medical, psychological, or legal advice.

Always consult a qualified mental health professional for medical decisions.

16. Voice and Biometric Data

We do not retain or analyze biometric identifiers, including your voice recordings or voiceprints. Your voice is processed in real-time for transcription purposes using third-party speech-to-text providers, and no audio data is stored or retained by Myndo or its subprocessors.

Real-time voice responses are streamed to you and not stored. Where a feature lets you replay generated audio — such as your weekly review — that audio is stored privately so you can listen again.

We do not use any biometric data for identification, authentication, or profiling. Our voice processing is strictly limited to enabling conversation with our AI assistant and does not involve creating or storing biometric templates of your voice.

17. International Users and GDPR Rights

If you live in a country with a data protection law, you have the rights that law gives you. In the European Economic Area, the United Kingdom and Switzerland, these include:

The right to access, rectify, or erase your personal data
The right to object to or restrict processing of your personal data
The right to data portability
The right to withdraw consent at any time, where consent is the legal basis
The right to lodge a complaint with a supervisory authority

To exercise these rights, please contact us at privacy@myndo.ai or use the self-service tools at Your Account Rights. Erasure requests (GDPR Article 17) and portability requests (GDPR Article 20) are honored without undue delay; the legal maximum is one month per GDPR Article 12(3).

17.1 Legal Basis for Processing

If you are in the European Economic Area, the United Kingdom or Switzerland, we process your personal data on the following legal bases:

Performance of contract: Providing the Service you requested
Consent: Optional emails, where the law requires your consent, and ad measurement that shares information with ad networks (Section 7.6). You can withdraw your consent anytime.
Legitimate interests: Running, improving and securing the Service, sending optional emails where consent is not required, measuring and improving our emails, and counting which of our ads bring people to Myndo, where the law allows it without consent; you can object where the law gives you that right. We rely on these only where they do not override your fundamental rights and freedoms.
Legal compliance: Where required by law

17.2 Canada

If you are in Canada, you can ask to access or correct your personal information, withdraw your consent, and complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d'accès à l'information. We ask for your express consent before sharing Ad Measurement Data. You can reach the person responsible for privacy at privacy@myndo.ai.

17.3 Other Countries

Wherever you live, your Conversation Data is never used for advertising, and what Myndo sends to ad networks about you goes only with your yes. We respect and will make reasonable efforts to honor your privacy rights wherever you live. To use the rights your local law gives you, email privacy@myndo.ai.

17.4 Data Protection Contact

If you are in the European Economic Area, the United Kingdom or Switzerland, contact us at privacy@myndo.ai.

18. AI Transparency Commitment

As part of our commitment to transparency, we make information about our AI agents publicly available. This includes general descriptions of how our AI agents work together to provide wellbeing and self-reflection support. While we protect specific proprietary details about our AI architecture, we believe users should understand the general principles of the AI systems they interact with.

19. Data Pseudonymization and Database Separation

19.1 Privacy-by-Design Architecture

We store your conversation transcripts and personalized insights in our database with only a pseudonymized_user_id and no direct identifiers that link to your real identity. This process, known as pseudonymization, provides an added layer of privacy protection.

As an additional security measure, we deliberately separate your identifying information from your Conversation Data into different databases. This architectural decision creates a technical separation that provides enhanced protection - even in the unlikely event that one database is compromised, an attacker would not have access to both your identity and your private conversations. This separation of databases is part of our privacy-by-design approach. Messages you exchange with us, such as emails and support messages, are the exception: we keep them with your account or email address so we can answer you.

19.2 Human Access to Your Data

Myndo is designed so that our team members do not need to access your personal data during normal operations. Our systems use pseudonymized identifiers that prevent casual identification.

Support Access: If you contact us for support and resolution requires reviewing your account or conversation data, we will ask you to explicitly grant access, for example when you send a support request in the app. This access:

Is valid for a limited time
Allows our support team to view your records while assisting you
Automatically expires, ending access
Can be revoked by you at any time

Without access you have granted, our team members can only view anonymized or pseudonymized data that cannot be linked to your identity, except messages you send us yourself.

Messages you send us: When you email us, reply to one of our emails or message our support team, the person handling it sees your message and who sent it. Our founder reads replies to our founder's emails.

Exceptions: Apart from messages you send us yourself, we may access identifiable data without your grant only:

To comply with valid legal process (court order, subpoena)
To address imminent safety concerns
To investigate fraud or abuse

Any such access is logged and subject to internal review.

19.3 Pseudonymized Review for Service Improvement

To improve the quality and effectiveness of our Service, we may have authorized employees or contractors review pseudonymized conversation transcripts. These reviewers only see:

A pseudonymized_user_id (not your name, email address or any other identifying information)
Conversation transcripts
Derived personalized insights

They do not have access to your contact information or other account details, and are bound by strict confidentiality agreements.

19.4 Service Improvement

We may analyze pseudonymized Conversation Data while you are an active user to improve our Service. When you delete your account, your Conversation Data is permanently deleted and is not retained for research purposes, except messages you exchanged with us, which we keep for our records and to handle questions or claims (Section 6.1).

20. Contact Us

Support Email: support@myndo.ai
Privacy Email: privacy@myndo.ai
Legal Mailing Address:
Nelumbo Labs LLC
c/o Legalinc Corporate Services Inc.
131 Continental Dr, Suite 305
Newark, DE 19713
United States

By using Myndo, you acknowledge that you have read and understood this Privacy Policy and agree to its terms. Using Myndo does not give the separate yes described in Section 7.6.

Privacy that is visible, specific, and product-deep.