Mind Models iconMind Models

Privacy Policy

Last updated: March 30, 2026

1. Who We Are

Mind Models is operated by Funneldom, a company registered in Athens, Greece. As an EU-based company, we are subject to the General Data Protection Regulation (GDPR) and treat the protection of your personal data as a core responsibility.

For any privacy-related questions or requests, contact us at: apps@funneldom.com

2. What Data We Collect

We collect the following categories of personal data:

Account & Identity

  • Email address (provided by Google or Apple during sign-in)
  • Sign-in method (Google or Apple — we do not collect or store passwords)
  • User ID (generated by our auth provider, Supabase)

Onboarding & Preferences

  • Learning goal (e.g. better decisions, leadership)
  • Language preference
  • Gender (optional)
  • Color theme preference

App Activity

  • Lessons viewed, completed, and bookmarked
  • Filter selections within the lesson library
  • App session count and usage milestones
  • Learning streak data (current streak, longest streak, last activity date)

Device & Technical Data

  • Device push notification token (for future notification features)

Subscription & Billing

If you upgrade to a Pro plan, subscription and billing data is handled directly by RevenueCat and Apple / Google. We receive only your subscription status (free or Pro) — we do not store or process payment card details.

3. How We Use Your Data

We use your personal data to:

  • Provide, personalise, and improve the Mind Models app
  • Track your learning progress and unlock lessons over time
  • Understand how users interact with the app (analytics)
  • Manage your subscription and Pro access
  • Respond to support and data requests

We do not sell your personal data to third parties, use it for advertising, or share it with anyone outside of the service providers listed below.

4. Legal Basis for Processing (GDPR)

We process your personal data under the following legal bases:

  • Contract performance — to create your account and deliver the service you signed up for.
  • Legitimate interests — to understand app usage and improve the product, where this does not override your rights.
  • Legal obligation — to comply with applicable laws, including GDPR data subject requests.

5. Third-Party Service Providers

We share data only with the following sub-processors, each used to operate the service:

ProviderPurposeLocation
SupabaseAuthentication and databaseEU (AWS Frankfurt)
MixpanelProduct analyticsEU (EU data residency)
RevenueCatSubscription managementUnited States
AppleSign in with Apple, App Store billingUnited States
GoogleSign in with Google, Play Store billingUnited States

For providers based outside the EU, data transfers are covered by Standard Contractual Clauses (SCCs) or other GDPR-compliant transfer mechanisms.

6. Data Retention

We retain your personal data for as long as your account is active. Each third-party provider retains data according to their own policies:

  • Supabase — data is deleted immediately upon account deletion.
  • Mixpanel— upon account deletion we submit a GDPR erasure request to Mixpanel. Processing may take up to 30 days per Mixpanel's policy.
  • RevenueCat — subscription records may be retained as required by financial and tax regulations.

7. Your Rights Under GDPR

The easiest way to remove your data is to delete your account directly from the Profile tab in the app — this is instant and permanent.

For any other data requests — such as accessing or correcting the information we hold about you — email us at apps@funneldom.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA) at www.dpa.gr.

8. Account Deletion

You can permanently delete your account at any time from the Profile tab in the app. Deleting your account will:

  • Immediately delete all your lesson progress, bookmarks, and settings from our database.
  • Delete your authentication credentials from Supabase.
  • Submit a GDPR erasure request to Mixpanel for your analytics data.

This action is irreversible.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. All data in transit is encrypted via TLS. Authentication is handled by Supabase using industry-standard JWT-based sessions.

10. Children's Privacy

Mind Models is a general-audience app. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us at apps@funneldom.com and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we will notify you within the app. Continued use of the app after any changes constitutes acceptance of the updated policy.

12. Contact

For any questions, data requests, or concerns about this Privacy Policy, please contact:

Funneldom
Athens, Greece
apps@funneldom.com