Your photos, your rules.

When you use MindPhase we process the following kinds of information:

• Service identifiers: We generate a random user ID the first time you launch the product. There is no email, password, or social login. We store these IDs in Supabase so we can link edits and credit usage to your account.
• Subscription & purchase info: RevenueCat provides us with credit balances and purchase status so we know what features you are entitled to use.
• Your content: The photos you upload, your prompts, edit settings, generated images, and edit history. This content lives in our Supabase storage so you can retrieve results later.
• Preferences & usage: Feature toggles, language, theme, and counters that show how many edits you have run or how many remain in your queue.
• Diagnostics & performance data: Metadata such as which model processed your request, processing times, failure reasons, and system logs that help us troubleshoot issues.

We do not sell your personal data.

• Directly from you when you upload photos, provide prompts, or change settings.
• Automatically from our systems as we generate logs needed to deliver edits reliably.
• From RevenueCat for payment and credit information.
• From fal.ai when we receive edit results and processing metadata.

Your information powers the product experience:

• Queue and process your AI-powered photo edits.
• Display your edit history and results inside MindPhase.
• Manage credit balances, enforce limits, and support billing.
• Monitor performance, fix bugs, and improve quality.

We rely on a focused set of partners to deliver MindPhase. Each one processes data under its own privacy terms:

• Supabase — stores user identifiers, metadata, uploads, and generated outputs.
• fal.ai — processes your photos based on the prompts and inputs you provide.
• RevenueCat — manages credits, purchases, and entitlements.
• Analytics — we plan to enable PostHog and Google Analytics to understand feature usage. These tools focus on aggregate trends, not the content of your photos.
• Advertising SDKs — in the future we expect to integrate Google, Meta, and TikTok advertising SDKs to measure marketing performance. These services may receive device identifiers and engagement signals.
• Legal — we may disclose information to comply with law, enforce agreements, or protect users and systems.

• Camera and photo library — needed so you can capture or upload images for editing.

Data may be processed in the United States or other regions where our providers operate. We protect it with:

• TLS encryption for data in transit.
• Secure storage of identifiers and tokens within Supabase.
• Access controls restricting who can reach production environments.

• Photos and generated images — retained so you can review past edits.
• Identifiers, usage data, and diagnostics — kept as long as we need them to operate MindPhase safely.
• Deletion requests — when you email us, we remove your account data and content from our active systems.

We keep information until you ask us to delete it. Contact onur@mindphase.app and we will remove your data within a reasonable timeframe, subject to any legal retention requirements.

• Use MindPhase without providing contact details—we only require the auto-generated ID.
• Request deletion or export by emailing onur@mindphase.app.
• Adjust analytics or marketing consents in your device settings once those features launch.

Depending on where you live, you may have rights to access, correct, delete, or restrict processing of your information. Email onur@mindphase.app with your request. We will verify your identity and respond as required by applicable law.

We take reasonable steps to protect your information:

• Encryption in transit for all network requests.
• Restricted employee access based on job role.
• Monitoring and audits of our infrastructure.

No system is perfectly secure, but we work continuously to safeguard your data.

MindPhase is not intended for children under the age required by local law (usually 13–16). We do not knowingly collect personal data from children without appropriate consent. If you believe a child has provided us with information, contact us and we will delete it.

We may update this policy if our practices change or we add new partners. If the changes are significant, we will let you know in the product. Continuing to use MindPhase after updates means you accept the revised policy.