This Privacy Policy explains what personal data Mindbeat collects, why we collect it, how we use it, and the rights you have. We care about your privacy and only collect what we need to run the Service well.

1. Who is responsible for your data

The Service is provided by Mindbeat and its parent company ("Mindbeat", "we", "us", "our"). We are the controller of the personal data described here. For any privacy question, or to exercise your rights, contact us through the contact us page.

2. The data we collect

• Account details, such as your name, email address, password (stored in encrypted form), language, country and any profile photo you add.

• Content you create, such as saved mixes and notes you write in the app.

• Plan and billing information, such as your plan, subscription status and the reference IDs from our payment providers. We do not store your full card number. Card and payment details are handled directly by our payment providers.

• Usage and device information, such as basic logs, general location derived from your connection at sign up, and information needed to keep the Service secure and working.

• Sign in information, if you choose to sign in with a third party such as Google, we receive basic details from them to create and secure your account.

3. How we use your data

• To create and manage your account and provide the Service.

• To process subscriptions, renewals and coupons through our payment providers.

• To send you service messages, such as account, billing and security notices.

• To respond to your requests and provide support.

• To keep the Service secure, prevent abuse and meet our legal obligations.

• To improve the Service and understand how it is used, in a way that respects your privacy.

4. Our legal bases

Where the General Data Protection Regulation applies, we rely on the following legal bases: performance of our contract with you (to provide the Service you signed up for), our legitimate interests (to run, secure and improve the Service), your consent (where we ask for it, for example for certain messages), and compliance with our legal obligations.

5. Who we share data with

We do not sell your personal data. We share it only with trusted providers who help us run the Service, and only as needed. These include:

• Payment providers (such as Stripe and PayPal) to process subscriptions and payments.

• Sign in providers (such as Google) where you choose to use them.

• Email delivery providers to send you account and service messages.

• Optional integrations you choose to connect, such as Slack.

• Authorities or advisers where we are required to by law, or to protect our rights.

Each of these providers handles data under their own privacy terms and, where required, under agreements that protect your data.

6. International transfers

Some of our providers may process data outside your country. Where personal data is transferred internationally, we take steps to make sure it stays protected, using appropriate safeguards recognised under data protection law.

7. How long we keep your data

We keep your personal data for as long as your account is active and for as long as we need it to provide the Service, meet legal and accounting obligations, and resolve disputes. When we no longer need it, we delete it or make it anonymous.

8. Your rights

Depending on where you live, you may have the right to access the personal data we hold about you, to correct it, to ask us to delete it, to object to or restrict certain uses, and to receive a copy of your data in a portable format. You can ask us at any time for a full export of the data we hold about you, and we will send it to the email address on your account. To exercise any of these rights, contact us through the contact us page. You also have the right to complain to your local data protection authority.

9. Cookies and similar technologies

We use a small number of cookies and similar technologies to keep you signed in, remember your preferences, and keep the Service secure. Where the law requires it, we ask for your consent before using non essential cookies. You can control cookies through your browser settings.

10. Security

We take reasonable technical and organisational measures to protect your personal data, including encryption of passwords and secure handling of payments by our providers. No online service can be completely secure, so we cannot guarantee absolute security, but we work to keep your data safe.

11. Children

The Service is not intended for children who are below the age at which they can consent to online services in their country. We do not knowingly collect personal data from such children. If you believe a child has given us their data, please contact us and we will remove it.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we make a significant change, we will post the updated policy here with a new date. Please check back so you stay informed.

13. Contact us

If you have any questions about this Privacy Policy or how we handle your data, contact us through the contact us page.