Privacy Policy

MindVoice — Last updated: April 4, 2026

The short version: MindVoice uses third-party AI services to categorize, format, and summarize your voice notes. Before any data is sent, the app asks for your explicit permission on first launch. Audio and text are processed in real time and never permanently stored on any server. On iOS, no accounts are required. On Android, Google Sign-In is used solely for cloud sync.

AI Data Sharing & Consent

MindVoice sends your data to third-party AI services for processing. On first launch, the app presents a consent screen that explains:

You must agree to this data sharing before using the app. You can reduce cloud data sharing by switching to on-device transcription in Settings.

1. Who We Are

MindVoice is developed by Forward Alpha, LLC ("we", "our", "us"). This privacy policy explains how we handle your data when you use the MindVoice application.

2. What Data We Collect

Free Tier

When using MindVoice's free tier:

Premium Tier

When you subscribe to Premium ($4.99/month or $49.99/year), the following data is sent to cloud services for processing:

All cloud-processed data is:

Free Trial

New users receive a free trial with full Premium access (7 days standard, up to 30 days for early adopters). During the trial, audio and text are processed the same way as Premium. Trial status is tracked on our server using your device identifier — no personal information is collected.

Device Identifier

iOS: We generate a random UUID on first app launch, stored on your device. This identifier is used for:

This identifier is not linked to your personal identity, Apple ID, or hardware. It can be reset by reinstalling the app.

Android: We use the Android ID (a system-provided device identifier) for trial tracking and rate limiting. The Android ID is unique per app signing key and user — it is not a hardware serial number and resets on factory reset. It is not linked to your Google account or personal identity.

Android-Specific Data Practices

The Android version of MindVoice uses the following additional services:

What We Never Collect

3. Third-Party Services

Premium features use the following services for processing. Data sent to these services is used only to fulfill your request and is not retained:

4. Data Storage

iOS: All voice entries, transcriptions, categories, and summaries are stored locally on your device using Apple's SwiftData framework. Audio recordings (WAV files) are stored locally and never uploaded to our servers. If you subscribe to Premium, your entries also sync to your personal iCloud account via Apple's private CloudKit database. We do not have access to your iCloud data.

Android: All voice entries and summaries are stored locally on your device using Room database. Audio recordings are stored locally and never uploaded to our servers. If you sign in with Google, your entries and summaries sync to Firebase Firestore under your authenticated Google account. This data is stored in Google's cloud infrastructure, encrypted at rest, and accessible only through your Google account.

We do not maintain a general database of user content on our servers. The only server-side data we store is your device identifier and trial status. On Android, synced entries are stored in Firebase Firestore under your Google account's private collection.

5. Subscriptions & Payments

Subscriptions are processed through Apple's App Store (iOS) or Google Play (Android). All payment information is handled entirely by Apple or Google respectively. We never receive, process, or store your credit card details, bank information, or other payment data.

Available plans:

6. Data Retention

7. Your Rights

Regardless of where you live, you have the right to:

We respond to all data requests within 30 days.

8. Children's Privacy

MindVoice is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with data, please contact us and we will delete it.

9. Security

We protect data in transit using TLS encryption. Our cloud infrastructure runs on Cloudflare Workers, which provides DDoS protection and edge security. Device authentication uses HMAC-SHA256 tokens. All endpoints are rate-limited. No user accounts or passwords are required.

10. Changes to This Policy

We may update this privacy policy from time to time. Material changes will be communicated through an update to the app. The "Last updated" date at the top of this page indicates when the policy was last revised.

11. Contact Us

If you have questions or concerns about this privacy policy: