Privacy Policy

Last updated: 2 October 2026

The short version

We built MindCircle to keep your inner life private. Your journal is not read by us or shown to other members. We do not sell your data, we do not run advertising or tracking networks, and we do not use third-party analytics. We collect the minimum needed to run the product, and you can delete everything.

What we collect

  • Account data. Your email address, an optional display name, an avatar emoji, and an anonymous ID. If you sign in with Google we receive your name, email and profile picture from Google.
  • What you write. Journal entries, their titles, attached photos, and the mood you tag them with.
  • Wellbeing signals. Mood check-ins and your activity history, used to draw the private Insights charts.
  • Community content. Posts, comments and chat messages you choose to send.
  • Technical data. IP address, user agent, and security logs kept for abuse prevention.

We ask for your real name nowhere. If you choose to share identifying details in a post, that is a decision you make, and moderators may remove it.

Cookies we set

MindCircle uses a deliberately small number of cookies. There are no advertising, analytics or cross-site tracking cookies on this site.

CookiePurposeType
sb-access-tokenKeeps you signed in. Set only after you log in.Strictly necessary
sb-refresh-tokenRenews that session so you are not logged out.Strictly necessary
cookie-consentRemembers your choice on the cookie notice. Set when you dismiss it.Strictly necessary

Why we use it

To provide the features you asked for (journal, insights, community, sessions); to keep the service secure and prevent abuse; to answer support requests; and to meet our legal obligations. That is the complete list — we do not use your data for advertising, profiling or AI model training.

Who we share it with

We share data only with:

  • Infrastructure providers that host our database and authentication on our behalf, under data-processing terms.
  • An email delivery provider that sends only the transactional messages needed to verify and secure your account.
  • Law enforcement or regulators, only where we are legally compelled to respond.
  • A professional adviser in a corporate transaction, if one ever happens.

Counsellors see only the profile information you choose to share when you book, plus the messages you send them. They do not get your journal.

How long we keep it

Your content is kept while your account exists. When you delete an entry it goes immediately; when you close your account, we delete your data from live systems within 30 days and from encrypted backups within a further 30 days. Security logs are kept for 12 months.

Your rights and controls

You can read, export, correct and delete your data from Settings. You can withdraw from community features at any time without losing your journal. You can also email us to access, correct or erase your data, or to object to processing — we respond within 30 days.

How we protect it

Traffic is encrypted in transit with TLS. Data is stored encrypted at rest. Access to production data is limited to what is needed to operate and secure the service, and access is logged. Journal media is restricted to the signed-in owner. No system is perfect, so please use a unique password and do not reuse one you use elsewhere.

Children's privacy

MindCircle is not for users under 16. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will remove it.

Changes to this policy

If we change what we collect, we will update this page and, for material changes, notify you in the App or by email. The date at the top always reflects the current version.

Contact us

For any privacy question or request, email daksh.24b0101340@abes.ac.in or write to us at Uttar Pradesh, India. We answer within 2 working days.