Privacy Policy
Last updated: March 30, 2026
1. Who We Are
Mind Models is operated by Funneldom, a company registered in Athens, Greece. As an EU-based company, we are subject to the General Data Protection Regulation (GDPR) and treat the protection of your personal data as a core responsibility.
For any privacy-related questions or requests, contact us at: apps@funneldom.com
2. What Data We Collect
We collect the following categories of personal data:
Account & Identity
- Email address (provided by Google or Apple during sign-in)
- Sign-in method (Google or Apple — we do not collect or store passwords)
- User ID (generated by our auth provider, Supabase)
Onboarding & Preferences
- Learning goal (e.g. better decisions, leadership)
- Language preference
- Gender (optional)
- Color theme preference
App Activity
- Lessons viewed, completed, and bookmarked
- Filter selections within the lesson library
- App session count and usage milestones
- Learning streak data (current streak, longest streak, last activity date)
Device & Technical Data
- Device push notification token (for future notification features)
Subscription & Billing
If you upgrade to a Pro plan, subscription and billing data is handled directly by RevenueCat and Apple / Google. We receive only your subscription status (free or Pro) — we do not store or process payment card details.
3. How We Use Your Data
We use your personal data to:
- Provide, personalise, and improve the Mind Models app
- Track your learning progress and unlock lessons over time
- Understand how users interact with the app (analytics)
- Manage your subscription and Pro access
- Respond to support and data requests
We do not sell your personal data to third parties, use it for advertising, or share it with anyone outside of the service providers listed below.
4. Legal Basis for Processing (GDPR)
We process your personal data under the following legal bases:
- Contract performance — to create your account and deliver the service you signed up for.
- Legitimate interests — to understand app usage and improve the product, where this does not override your rights.
- Legal obligation — to comply with applicable laws, including GDPR data subject requests.
5. Third-Party Service Providers
We share data only with the following sub-processors, each used to operate the service:
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Authentication and database | EU (AWS Frankfurt) |
| Mixpanel | Product analytics | EU (EU data residency) |
| RevenueCat | Subscription management | United States |
| Apple | Sign in with Apple, App Store billing | United States |
| Sign in with Google, Play Store billing | United States |
For providers based outside the EU, data transfers are covered by Standard Contractual Clauses (SCCs) or other GDPR-compliant transfer mechanisms.
6. Data Retention
We retain your personal data for as long as your account is active. Each third-party provider retains data according to their own policies:
- Supabase — data is deleted immediately upon account deletion.
- Mixpanel— upon account deletion we submit a GDPR erasure request to Mixpanel. Processing may take up to 30 days per Mixpanel's policy.
- RevenueCat — subscription records may be retained as required by financial and tax regulations.
7. Your Rights Under GDPR
The easiest way to remove your data is to delete your account directly from the Profile tab in the app — this is instant and permanent.
For any other data requests — such as accessing or correcting the information we hold about you — email us at apps@funneldom.com. We will respond within 30 days.
You also have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA) at www.dpa.gr.
8. Account Deletion
You can permanently delete your account at any time from the Profile tab in the app. Deleting your account will:
- Immediately delete all your lesson progress, bookmarks, and settings from our database.
- Delete your authentication credentials from Supabase.
- Submit a GDPR erasure request to Mixpanel for your analytics data.
This action is irreversible.
9. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. All data in transit is encrypted via TLS. Authentication is handled by Supabase using industry-standard JWT-based sessions.
10. Children's Privacy
Mind Models is a general-audience app. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us at apps@funneldom.com and we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we will notify you within the app. Continued use of the app after any changes constitutes acceptance of the updated policy.
12. Contact
For any questions, data requests, or concerns about this Privacy Policy, please contact:
FunneldomAthens, Greece
apps@funneldom.com