Privacy Notice

MindDrop Journaling (“MindDrop”, “we”), operated by William Rothwell, is the data controller for the personal data described in this notice. You can reach us at support@minddrop-journaling.com.

• Account data: your email address and password, and a display name if you choose to add one. A name is not required to sign up.
• Journal data: the moods you select, the entries you write or dictate by voice, and the AI reflections generated for you.
• Usage data: sign-in and activity timestamps (for example, to send you a re-engagement email only after a period of inactivity), reminder preferences, and app settings.
• Device data: your browser or device type, and — only if you opt in — a push-notification token so we can send your daily reminders.
• Billing data: your subscription plan and its status. Payments are processed by Paddle; we never see or store your full card details.

We use your data to provide the Service: storing your entries, generating your reflections, showing your statistics, managing reminders, handling your subscription, and supporting you. We do not sell your data, and we do not use your journal entries for advertising.

Reflections are generated by an AI model that receives the text of your entry and its mood. Your name and email address are never shared with the AI model. AI providers act only on our instructions to produce your reflection; they do not use your entries to train their models.

We share personal data only with the providers needed to run the Service:

• Paddle.com Market Ltd. — our Merchant of Record, which processes payments, collects taxes, and sends receipts. Paddle receives your email address and billing details for this purpose.
• Hosting and database providers — who store account and journal data on our behalf under strict confidentiality.
• Email and push delivery providers — who deliver your account emails, reminders, and notifications.
• AI model providers — who process entry text to generate reflections (see section 4).

We may also disclose data where required by law, or to protect the rights, property, or safety of MindDrop, our users, or others.

Your data is stored in encrypted form in transit and at rest. Journal entries are protected by row-level security so that only your signed-in account can read them, and your sessions can additionally be locked behind your device’s biometric unlock. Access by our team is limited to what is necessary to operate and support the Service.

Your entries and account data are kept while your account is active. If you delete an entry, it is removed permanently. If you ask us to delete your account, we delete your account data and entries; billing records are retained only as long as legally required.

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these rights, email support@minddrop-journaling.com. You may also complain to your local data-protection authority.

MindDrop is not directed at children under 16, and we do not knowingly collect their data.

We will post any updated Privacy Notice on this page with a new “last updated” date.

See also our Terms & Conditions and Refund Policy.