Privacy Policy

Effective Date: April 19, 2026
Last Updated: April 19, 2026

1. Introduction

Welcome to Mindskribe ("we," "our," or "us"). We are committed to protecting your privacy and ensuring transparency about how we handle your personal information. This privacy policy describes our practices regarding the collection, use, and disclosure of information when you use our mobile application and services.

2. Information We Collect

2.1 Personal Information

We may collect the following types of personal information:

• Account Information: Email address, username, and profile information
• User-Generated Content: Notes, thoughts, and text content you create within the app
• Profile Pictures: Images you choose to upload as your profile picture
• Device Information: Device type, operating system, and app version
• Usage Data: How you interact with our app and services

2.2 Camera Permission and Image Data

What We Collect:

• Images you capture using the camera feature within our app
• Images you select from your device's photo gallery when uploading profile pictures
• Image metadata (such as dimensions and file size) for processing purposes

What We Do NOT Collect:

• We do not access your camera without your explicit permission
• We do not automatically capture or record images in the background
• We do not access your photo gallery without your permission
• We do not collect location data from images (EXIF data is stripped)

3. How We Use Your Information

3.1 General Use

We use your information to:

• Provide and maintain our services
• Personalize your experience within the app
• Process and store your notes and thoughts
• Communicate with you about our services
• Improve our app and develop new features
• Ensure security and prevent fraud

3.2 Camera and Image Data Use

Images captured or uploaded through our app are used exclusively for:

• Profile Pictures: Displaying your chosen profile image within the app
• Personal Use: Storing images you've captured for your own reference and note-taking
• Image Processing: Optimizing image quality and size for better app performance

4. How We Store and Protect Your Data

4.1 Data Storage

• Cloud Storage: Your data is securely stored on Google Cloud Platform with enterprise-grade security
• Encryption: All data is encrypted both in transit and at rest
• Access Controls: Only you can access your personal notes and images
• Backup: Your data is regularly backed up to prevent loss

4.2 Image Storage Specifics

• Profile pictures are stored securely in our cloud storage system
• Images are optimized and resized to reduce storage requirements
• Original EXIF data (including location information) is automatically removed
• Access to your images is restricted to your account only

5. SnipIt Browser Extension

SnipIt is a Chrome browser extension that allows you to capture, crop, and annotate webpage screenshots. This section describes the additional data practices specific to the extension.

5.1 Data Collected by the Extension

• Visible tab screenshot: When you click the SnipIt icon, the extension captures an image of the currently visible browser tab. Only the visible viewport is captured — no scrolling content, no other tabs, and no browser UI.
• Page URL and title: The URL and title of the active tab are recorded alongside your screenshot for source attribution.
• Authentication token: Your Mindskribe account authentication is handled via Google OAuth and Firebase Authentication. An authentication token is stored locally in the browser's secure extension storage to keep you signed in. This token is refreshed automatically and does not contain your Google password. No authentication data is transmitted to any third party beyond Google's authentication services and Mindskribe's servers.

5.2 Data NOT Collected by the Extension

• We do not capture screenshots automatically or in the background — capture only occurs when you explicitly click the extension icon.
• We do not track your browsing history, monitor page content, or inject scripts into web pages.
• We do not access tabs other than the currently active tab.
• We do not read or modify any webpage content — the extension only captures a visual snapshot of what is already visible on your screen.

5.3 How Extension Data Is Used

• Screenshots are uploaded to your private Mindskribe account on our servers (Google Cloud Platform).
• Source URLs are displayed alongside your screenshots so you can remember where the content came from.
• Screenshots are private by default. You may choose to make individual screenshots publicly viewable via a unique link.
• Screenshots are subject to the same encryption, retention, and deletion policies as all other Mindskribe data described in this policy.

5.4 Extension Permissions Explained

• activeTab: Allows the extension to capture a screenshot of the tab you are currently viewing, only when you click the extension icon.
• tabs: Allows the extension to read the URL of the current tab for source attribution on your screenshot.
• storage: Allows the extension to store your authentication token and preferences locally in your browser.
• identity: Allows the extension to sign you in to your Mindskribe account using your existing credentials.
• scripting: Allows the extension to run a small script on the active tab solely to detect your display's pixel density (devicePixelRatio). This ensures screenshots are captured at the correct resolution on high-DPI and Retina displays. No page content is read, modified, or collected by this script.

5.5 Temporary Local Storage

When you capture a screenshot, the image is temporarily stored in your browser's local database (IndexedDB) while you crop and edit it. This temporary copy is automatically deleted once the screenshot is uploaded to your Mindskribe account, or immediately if you cancel or close the editor. No screenshot data persists locally after this workflow is complete.

6. Data Sharing and Disclosure

6.1 We Do Not Sell Your Data

We do not sell, rent, or trade your personal information, including images, to third parties for commercial purposes.

6.2 Limited Sharing

We may share your information only in the following circumstances:

• With Your Consent: When you explicitly agree to share specific information
• Service Providers: With trusted third-party services that help us operate our app (all bound by strict confidentiality agreements)
• Legal Requirements: When required by law, court order, or to protect our rights and safety
• Business Transfers: In the event of a merger or acquisition (with advance notice to users)

7. Your Rights and Choices

7.1 Camera Permissions

• Permission Control: You can grant or deny camera access at any time through your device settings
• Alternative Upload: You can upload images from your gallery instead of using the camera
• No Requirement: Using camera features is entirely optional for app functionality

7.2 Data Control

• Access: You can view all your stored data within the app
• Edit: You can modify or update your information at any time
• Delete: You can delete specific images, notes, or your entire account
• Export: You can request a copy of your data in a portable format

8. Data Retention

We retain your information for as long as necessary to provide our services and as follows:

• Account Data: Until you delete your account
• Images: Until you delete them or close your account
• Usage Data: Up to 2 years for analytics and improvement purposes
• Legal Compliance: As required by applicable laws

9. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure that such transfers comply with applicable data protection laws and that your data receives adequate protection.

11. Updates to This Privacy Policy

We may update this privacy policy from time to time. We will notify you of any changes by:

• Posting the new privacy policy on this page
• Updating the "Last Updated" date
• Sending you a notification through the app for material changes

12. Contact Us

13. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), our legal basis for processing your personal information includes:

• Consent: For camera access and image processing
• Contract: To provide our services to you
• Legitimate Interest: To improve our services and prevent fraud
• Legal Obligation: To comply with applicable laws

This privacy policy is designed to be transparent and comprehensive. We are committed to protecting your privacy and ensuring you have control over your personal information.