Privacy Policy

Last updated: 21 October 2026. This policy explains what Mindspace collects, how assessment data is used, and the specific protections in place before any data is used to improve our models.

What we collect

Depending on your account type, we collect:

• Account & contact information: name, email, phone, address, date of birth, age, and class/grade. For institutions: institution name, official contact details, and address. This is required to operate your account, and is never shared with Mindspace staff for model training purposes (see below).
• Assessment content: your conversation with the assessment engine (transcript), the resulting clinical report, and psychometric scoring data.
• Usage & audit data: login times, assessment start/completion times, and report generation events, for security and (for institutions) oversight of their own students' activity.
• Payment data: handled entirely by Stripe. Mindspace never sees or stores your card details - only the resulting subscription/payment status.

Your own reports and transcripts

Your full, personalized assessment reports and transcripts are stored in your account permanently and are visible to you (and, if you belong to an institution, to that institution's administrators) for as long as your account exists. This copy intentionally includes your name and other identifying details, because it's your own clinical record.

What we use for model improvement - and what we never do

Separately from your own account copy, Mindspace collects only anonymized assessment data to improve its models: the assessment transcript and report, your age, and your class/grade.

We do not include, in that anonymized copy:

• Your name (removed and replaced with a generic placeholder; each record carries only a random anonymous label)
• Email address, phone number, or physical address
• Institution name
• Any other personally identifiable information (PII)

Names and other identifying details are stripped from the transcript automatically before this anonymized copy is created - your personal account record and the anonymized training copy are separate from the moment the anonymized copy is written, not linked or cross-referenced afterward. Automated redaction (pattern matching plus natural-language name detection) is highly effective but not infallible; we do not claim a mathematical guarantee that every name is caught in every case.

Mindspace employees do not have access to your personal information for the purpose of AI training. The anonymized dataset used for model improvement is structurally separated from account data and cannot be linked back to you through the application.

Institutions and student data

If you take an assessment through an institution, that institution's administrators can see your profile, assessment status, and completed reports/transcripts - this is how they support you. If an assessment shows signs of crisis, the institution is alerted in its dashboard and audit log so someone can follow up. Mindspace itself does not share your identified data with any other institution or third party beyond the service providers below.

Service providers

We rely on a small number of infrastructure providers to operate Mindspace:

• Supabase - database, authentication, and hosting for account and assessment data.
• Google (Gemini API) - powers the conversational assessment engine and report generation. Messages sent during a session are processed by Gemini to generate responses.
• Stripe - payment processing. Mindspace never stores raw card details.

Consent

When you create your own student account you agree to this policy, and if you are under 18 you confirm that a parent or guardian knows you are taking the assessment. We record when you agreed. Students added by an institution are covered by that institution's own agreement with Mindspace.

Your choices

You can request deletion of your account and associated personal data at any time by contacting support. Note that anonymized data already contributed to model improvement, containing no identifying information, cannot be traced back to you and therefore cannot be selectively deleted from that dataset.

Contact

Questions about this policy or how your data is handled can be sent to privacy@mindspace.app.