MindFlow Privacy Policy

1. Overview & Data Controller

This Privacy Policy explains how MindFlow (“the app”), operated by Deepak Kumar / KAD Labs (“we”, “us”, or “our”), handles information when you install and use the app.

Data Controller: Deepak Kumar, Founder of KAD Labs.
Contact Email: deepak.jindal07@gmail.com / contact@kad-labs.com
Studio Website: https://kad-labs.com/

2. Information We Process & How We Collect It

A. Guest Mode (Unauthenticated Usage)

You can use MindFlow completely as a guest without creating an account or providing an email address. When browsing as a guest, your listening statistics (hours listened, streaks, session counts), favorites, custom sound mixer presets, wellness journey progress, and theme settings are stored strictly locally on your device using device storage (SharedPreferences).

B. Optional Account Creation (Google Sign-In via Supabase)

If you choose to sign in using Google Sign-In:

• Authentication Provider: We use Google OAuth 2.0 integrated with Supabase Auth.
• Information Received: Your Google unique user ID, verified email address, display name, and profile avatar picture URL.
• Supabase Profile Record: A secure record is created in our Supabase PostgreSQL database table (profiles) containing your user ID, display name, email, and avatar URL. This table is protected by Row Level Security (RLS) so that only you can access or modify your personal profile.
• Seamless Guest Data Migration: Upon signing in for the first time, MindFlow migrates your offline listening stats, favorites, and wellness journey data to your account so you do not lose your progress.

C. In-App Subscriptions & Purchases (RevenueCat & Google Play Billing)

MindFlow offers optional subscription plans (Annual with 7-Day Free Trial, Monthly) and Lifetime access.

• Payment Processing: All payments and monetary transactions are handled directly and securely by Google Play Billing. KAD Labs never collects, processes, receives, or stores your credit card details, debit card numbers, bank credentials, or billing address.
• Purchase & Entitlement Verification: We use RevenueCat (Purchases SDK) to manage subscription receipts, free trial eligibility, renewal status, and unlock the kad_labs premium entitlement. RevenueCat receives an anonymous App User ID, transaction ID, store product identifier, and purchase timestamps.

D. Audio Playback & Device Permissions

• Foreground Service (Media Playback): MindFlow uses Android's foreground service (FOREGROUND_SERVICE_MEDIA_PLAYBACK) to maintain uninterrupted ambient soundscape and story playback when your screen is locked or while multitasking.
• Notifications: MindFlow requests notification permissions strictly to display media player controls (play/pause/skip) on your lockscreen and to trigger optional daily mindfulness reminder alerts that you configure in Settings.
• No Audio or Microphone Recording: MindFlow does not request or use microphone permissions and does not record or analyze your environment.

3. No Third-Party Advertising & No Data Brokering

MindFlow does not include any third-party advertising SDKs (such as Google AdMob, Meta Audience Network, Unity Ads, or similar networks). We do not serve personalized ads, track your activity across third-party websites or apps, or sell, rent, or trade your personal information to data brokers.

4. Data Storage, Security & Retention

We employ industry-standard encryption protocols (TLS/HTTPS in transit and AES-256 at rest) for all network communications with Supabase and RevenueCat.

• Local Data: Remains on your device until you clear app cache/data or uninstall the app.
• Account Data: Retained for the duration of your active account so that you can restore purchases and sync your wellness progress across devices.

5. Your Rights & Account Deletion

Depending on your location (including under GDPR, CCPA, and Indian Digital Personal Data Protection laws), you have the right to access, rectify, export, or permanently delete your account and personal data.

To permanently delete your MindFlow account and all associated profile information from our database, you may:

• Email our developer support directly at deepak.jindal07@gmail.com with the subject line “MindFlow Account Deletion Request” from your registered Google email address.
• Your account and associated profile records will be permanently purged within 30 days.

6. Children's Privacy

MindFlow is intended for general wellness audiences and is not directed to children under 13 years of age. We do not knowingly collect personal data from children under 13. If you become aware that a child has provided us with personal information without parental consent, please contact us immediately, and we will promptly delete the data.

7. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect product enhancements, security updates, or legal compliance. Any changes will be published on this page with an updated “Last Updated” date. Continued use of MindFlow after updates constitutes acceptance of the revised policy.

8. Contact Information

If you have questions, feedback, or data privacy requests regarding MindFlow, please contact:

• Founder & Developer: Deepak Kumar
• Support Email: deepak.jindal07@gmail.com
• Official Studio Inquiries: contact@kad-labs.com
• Studio Website: https://kad-labs.com/