Mind Indicator for iPhone and iPad
This section describes the Mind Indicator iOS app, version 1.0. The controller and privacy contact are identified in section 1 below. The app has separate mobile profiles. Website accounts, questionnaire reports and purchases do not synchronize with this app. References below to website questionnaires, purchases and website age limits concern the website; the general information about the controller, rights, security and recipients also applies to the app.
Exercises and information on your device
You can use the exercises without an account. Exercise results, history, favorites and private notes are stored in the app's local storage. The app does not upload these records to our profile server. History and notes are limited to the latest 100 entries of each type. You can delete individual saved records and notes, or use Profile > Clear data on this device to remove the local history, notes and favorites. If you choose Share summary, the selected summary is passed to the destination you choose through the device's sharing controls. Device or operating-system backups may include app storage, according to your device settings and backup provider.
Optional Sign in with Apple
If you choose Apple sign-in, we verify your Apple identity token and authorization code with Apple. The profile service stores your Apple user identifier, the given name and verified email address when supplied, an internal profile identifier, a protected Apple refresh credential used for authorization management, and session records. If you select Hide My Email, we receive Apple's relay address instead of your personal address. Apple handles its own password, Face ID, Touch ID and device authentication; we do not receive your Apple password or biometric data. We do not add an email-code or email-entry step to Apple sign-in.
Apple refresh credentials are encrypted on our server. App session credentials are stored in the device's protected Keychain, while the server stores a one-way digest of the session credential. Sessions expire after 30 days. A sign-in challenge expires after 10 minutes and can be used only once. The server removes expired challenge and session records during subsequent API requests. Signing out invalidates the relevant server session and removes the saved app sign-in from the device; it does not delete the mobile profile or local exercise records.
Technical information and purposes
When the app contacts our server, hosting systems can process the IP address, request time, request path, user agent, response status and technical errors. The profile API uses keyed hashes of IP addresses for rate limits; these counters are removed during API housekeeping once their stored window is over one day old. Diagnostic messages use fixed action, phase and error identifiers rather than identity tokens, authorization codes, account names or email addresses. We use mobile identity and session information to provide the optional profile you request, and technical information to protect and operate the service, under the relevant service-performance and security grounds explained in section 4.
The native app contains no advertising or analytics SDK and does not use exercise results or notes for advertising or tracking. Its informational browser is restricted to selected Mind Indicator about, contact and legal pages, with JavaScript disabled and browsing cookies separated from your ordinary browser. Loading these pages makes requests to our hosting service for the page and its assets. Apple processes authentication under its own privacy terms. The recipient, international-processing and rights information below explains the broader arrangements and how to contact us about them.
Deleting an app profile
Use Profile > Delete app profile and confirm with a fresh Apple sign-in. On successful completion, we revoke the stored Apple authorization credential, delete the mobile profile and all its sessions from the live application database, remove the saved app credentials from the device, and clear the app's local history, notes and favorites. Website accounts and purchases are managed separately. You can also contact contact@mind-indicator.com for access, correction, deletion or help with a mobile profile; we may need to verify ownership.
Mobile profiles remain until you delete them or request erasure, subject to applicable legal obligations. Live profile deletion does not instantly remove separate hosting logs or any backup copies; those are subject to the hosting and backup retention procedures discussed in section 8. Contact us for the period and handling that apply to a particular request. Removing an app from your device or withdrawing its permission in Apple settings is separate from requesting deletion of our mobile profile records.
Your main controls
- Use to review optional storage and service choices.
- Ask for access, correction, erasure or help with account data at contact@mind-indicator.com.
- Manage provider permissions in your Google account, or in another provider's settings if that sign-in method is offered. Provider disconnection and account closure are separate actions.
1. Who is responsible
The controller for Mind Indicator's account, questionnaire and website operations is NOWANO sp. z o.o., Ożarów 6A, 98-345 Mokrsko, Poland; KRS 0001216933; NIP/VAT ID PL8322102495; REGON 543729634. Contact: contact@mind-indicator.com; telephone +48 532 498 552. You can also write to the postal address above.
An identity provider, merchant of record or advertising provider may separately determine how it processes information for its own services. Their roles and policies are described below. The European General Data Protection Regulation (GDPR) applies where relevant, together with other applicable privacy and electronic-communications laws.
2. Information we process
- Account and authentication information: email address, account identifier, name where supplied, language, country information, registration and account status, login verification and session records, and linked-provider identifiers.
- Questionnaire and result information: the selected test and version, responses, calculated scores or response profiles, interpretive content, result access references, creation time and connection to your account where applicable. Depending on the topic, this can be sensitive information.
- Order and access information: information about your one-time purchase, including the selected product, order or transaction reference, customer contact information, payment status, access entitlements and support correspondence. Payment details entered into a payment provider's checkout are processed under that provider's arrangements. Test/product names or categories, category identifiers, account and result-access references may also be exchanged to fulfil the purchase; even a test name can indicate the subject of a questionnaire.
- Technical and usage information: IP address, browser/user agent and device information, language, country, timezone, request/error records, referring page, attribution parameters and permitted cookie or measurement identifiers. The data recorded depends on the page, your choices and the services used.
- Messages and reports: contact, complaint and chat messages, translation-problem reports and the information you choose to include. Avoid sending third-party personal information, unnecessary health details, passwords or payment-card details.
Sources include information you provide, records generated when the website operates, payment notifications and the identity provider you choose. If a field is needed for a requested feature, such as a verified email for email sign-in, not providing it may prevent that feature. Optional analytics and advertising choices are separate from providing an account.
4. Purposes and legal bases
The basis depends on the activity; accepting this policy is not a universal consent. For data subject to the GDPR:
| Purpose | Main information | Basis |
|---|---|---|
| Provide an account, requested sign-in, result access and purchased content | Account, provider identity, answers, results and order references | Article 6(1)(b): requested steps or performance of the service; special-category information also requires the additional condition explained in section 5 |
| Protect accounts and the website; investigate abuse | Authentication records, technical logs, IP and relevant incident information | Article 6(1)(f): legitimate interests in security and preventing misuse, subject to your rights |
| Handle purchases, accounting and legal obligations | Order, billing and required customer records | Article 6(1)(c) for applicable obligations; Article 6(1)(b) for fulfilment |
| Respond to messages, resolve complaints and establish or defend claims | Correspondence, relevant account/order and incident records | Article 6(1)(b), 6(1)(c) or 6(1)(f), depending on the request or obligation |
| Optional measurement, advertising or promotional communications | Permitted online identifiers, usage/attribution data or contact information | Consent under Article 6(1)(a) where required; legitimate interests under Article 6(1)(f) only where permitted and subject to objection and applicable electronic-communications rules |
Our stated legitimate interests are providing a reliable service, protecting accounts, preventing abuse, responding to requests and defending legal rights. Where consent is the basis, withdrawal does not affect processing that was lawful before withdrawal. It can prevent a feature that depends on the withdrawn permission, but does not automatically end unrelated processing based on another lawful ground.
5. Sensitive answers and automated results
Some questionnaires concern health, sex life or sexual orientation, political opinions or other matters that may reveal special-category personal data. Their status is not changed simply by describing a test as educational or non-diagnostic. A general contractual basis does not by itself provide the additional condition required by Article 9 GDPR.
Where explicit consent is required for such processing, it must be requested specifically for that purpose and be withdrawable; signing in through Google, accepting general terms or reading this policy is not that specific consent. Do not submit special-category information if a required specific consent request has not been presented. Contact us if you need clarification or want to withdraw permission and request erasure.
Results are calculated on our servers using the selected test's scoring and interpretation rules and your responses. It can produce a profile about your answers. It is not an individual assessment by a clinician and is not used by us to make employment, insurance, credit or comparable decisions with legal or similarly significant effects. Do not treat it as a diagnosis or use it as the sole basis for an important decision.
External AI and language services, including OpenAI and Google, are used in administrative content-production and translation workflows. If you submit a translation issue, relevant text and your issue note may be processed by OpenAI to investigate and improve the wording. Do not include unnecessary personal or sensitive information in an issue note. Questionnaire results are calculated on our servers; taking a test does not by itself mean your raw answers are routinely sent to an external AI model.
6. Email and marketing
We use email for verification codes, account and result access, orders, support and other operational communications. Messages about unfinished or unpaid access may also contain offers for paid reports and therefore may be promotional. Email delivery is supported by an external email service, including EmailLabs.
Marketing has separate legal requirements. Using a social login, providing an email for a result, accepting the Terms or buying a product does not itself grant every form of marketing permission. Consent is required where applicable law requires it. Where direct marketing is permitted on a legitimate-interest basis, you can object at any time.
To ask us to stop promotional reminders or other direct marketing, use an unsubscribe control where provided or email contact@mind-indicator.com. You do not need to explain a direct-marketing objection. Necessary messages concerning an existing order, security or a request you made may still be sent for those separate purposes. A minimal suppression record may need to be kept to respect a marketing objection.
7. Recipients and international processing
Information may be disclosed, to the extent needed for the relevant purpose, to:
- hosting, security, technical-support and email-delivery providers;
- the identity provider you choose for authentication;
- FastSpring as current reseller/merchant of record, and payment providers associated with earlier purchases, including Stripe;
- measurement and advertising providers, such as Google and Microsoft, according to the relevant service, settings and choices;
- translation and AI providers for the content or issue-report workflow described above;
- professional advisers, competent authorities or other recipients where necessary to comply with law or establish, exercise or defend legal claims.
Providers acting on our instructions and providers acting as separate controllers have different responsibilities. Their own account, payment and measurement activities are also subject to their privacy information. Relevant policies include FastSpring, Stripe, Google, Microsoft and OpenAI.
Use of international providers may involve processing outside the European Economic Area, including in the United States. Such transfers require a lawful mechanism appropriate to the recipient and processing, such as an applicable adequacy decision or standard contractual clauses with any necessary additional safeguards. An adequacy mechanism, including the EU–US Data Privacy Framework where applicable, is not a blanket approval of every recipient or every transfer. Contact us to request information about the recipients and safeguards relevant to your data.
8. Retention and deletion
Different records have different lifecycles. The currently configured cleanup schedule includes:
- Unpaid result records: scheduled to be hidden after 6 days and deleted after 14 days.
- Certain free-access result records: scheduled for deletion after 1 day.
- Separate anti-abuse IP records: scheduled for deletion after 14 days. IP information included in a result or another security record follows that record's own lifecycle.
- Login sessions: a newly issued persistent login can last up to 365 days. Expired authentication-token records are removed by scheduled cleanup. A verification code is normally valid for 10 minutes.
These are scheduled operations rather than a guarantee of deletion at an exact minute. A technical failure or a valid legal preservation need can affect actual timing. Result availability can end before physical deletion.
Account records, linked-provider identities and paid result records do not currently have a single automatic age-based deletion deadline. They are retained in connection with maintaining the account, purchased access and related support until closure or an erasure request is assessed, subject to legal obligations and justified claims. Purchase, accounting and complaint records may need to remain for the applicable statutory retention or limitation period even after an account is closed. Ask us for the period or criteria applying to a specific record.
Account closure or a “delete” control can deactivate an account or hide a result rather than immediately erase every stored record. To request erasure of retained personal information, email us and identify the account or result. We will assess the request, any lawful exceptions and what has been erased or must remain. Removing a provider connection does not delete the corresponding account-link records held by us automatically.
Security logs, correspondence, provider records and any backup copies can have separate retention or deletion procedures. The right to erasure is subject to legal exceptions; we do not promise that every copy disappears instantly from every system. We will explain a justified refusal or retention requirement when responding to a request.
10. Your rights and requests
Subject to the applicable conditions, you can request access and a copy, correction, erasure, restriction or portability of your personal information. You can object to processing based on legitimate interests and object unconditionally to direct marketing. You can withdraw consent at any time where processing relies on it. You also have rights concerning decisions based solely on automated processing that have legal or similarly significant effects.
Send a request to contact@mind-indicator.com. Explain what you need and provide enough information to locate the relevant account or result. We may request proportionate information to verify identity; do not send a full identity document or sensitive data unless it is necessary and we have explained how to provide it safely.
Under the GDPR, we normally respond within one month. Where a legally permitted extension is needed, we explain the reason within that month. Requests are normally free, subject to the limited exceptions in the law. We will explain any refusal and available remedies.
You may complain to your competent data-protection authority, including the Polish supervisory authority, the President of the Personal Data Protection Office (UODO), or an authority in your place of habitual residence or work in the EEA. Contacting us first is helpful but is not a condition for lodging a complaint. Rights under other applicable privacy laws can also be raised through the same contact address.
11. Security and age limits
We use technical and organizational measures appropriate to the service, including verified provider identities, protected authentication cookies, server-side session checks and controls on private result access. No internet transmission or storage system can be guaranteed completely secure.
Protect your email, provider account and private result links. Signing out invalidates the relevant login token, but does not itself delete your account or results. Contact us promptly if you suspect unauthorized access.
The service is intended for adults aged 18 or over. Do not submit a child's identifiable sensitive information. If you believe information about a child has been submitted contrary to these conditions, contact us so that we can investigate and take appropriate action.
12. Changes and further information
We publish the date and explain material changes before introducing a new purpose, recipient or permission where advance information or consent is required. Updating this policy does not retroactively obtain consent, authorize unrelated uses or remove your rights.
For account and purchase conditions, read the Terms and Conditions. For questions about this policy or a particular record, contact contact@mind-indicator.com.