MindPass Privacy Policy
Effective 10 October 2026. MindPass is available on iPhone and Android and is provided by Zyur Ltd. Contact info@zyur.io with privacy questions or requests.
What stays on your device
iPhone. MindPass uses Apple’s Screen Time frameworks to protect the individual apps you select. App-selection tokens, schedules, focus routines, pauses, strict-mode settings and earned passes are stored on your device in storage shared with MindPass’s extensions. We do not send these tokens, the names of your selected apps, or your browsing history to our learning service or analytics. MindPass does not need access to your messages, contacts or photos.
Android. MindPass uses an Android Accessibility service to protect the apps you choose. The service is notified when the app on screen changes and receives only that app’s package name, so MindPass can show its screen over an app you chose to block. It cannot read what is on your screen, does not record what you type, and does not perform actions for you. Which app is on screen is used on your device in real time and is never sent to our servers or analytics. To show the app picker, MindPass reads the list of apps you can open from your home screen; that list, your selected apps and app categories, schedules, focus routines, pauses, strict-mode settings and earned passes are stored only on your device. You can turn the Accessibility service off at any time in Android Settings.
Identity and learning data
Firebase Authentication creates a pseudonymous account without requiring your name or email. Authentication credentials are stored in the iOS Keychain on iPhone, and on Android in MindPass’s private app storage, encrypted with an Android Keystore key and excluded from device backups. The same account identifier is used for our learning service, product events and RevenueCat billing identity. Your selected interests, generated paths, lesson answers and learning progress may be stored by our backend so it can provide lessons and memory checks. Bundled discoveries and cached paths can be read locally.
AI-generated paths
When you choose Create my path, your subject, optional note and chosen starting level are sent through our backend to Google Gemini to generate lessons. Account identifiers, purchase history, selected apps and learning progress are not included in that request. Selecting interests for regular curated discoveries does not send those interests to Gemini. Do not include sensitive, confidential or unnecessary personal information. We store generated paths and request details to deliver them and safely handle retries. AI content may be inaccurate; source suggestions are not verification. See Google’s Privacy Policy and the applicable Gemini service terms for provider processing.
Purchases and allowances
Apple processes payments on iPhone and Google Play processes payments on Android. RevenueCat helps verify subscriptions, purchases, restores and trial eligibility. It receives the account identifier and purchase information needed for that service. We do not receive your payment-card details. Our backend checks subscription access and stores billing-account mappings and generation accounting records to enforce the monthly allowance, prevent duplicate charges against it and keep it consistent after a restore. A device reinstall does not create a new allowance for the same verified billing account.
Product events and diagnostics
MindPass sends pseudonymous product events, such as onboarding completion, discoveries answered, passes started, subscription-flow results and routine changes. Events include an installation identifier, app version, timestamps and limited feature properties such as counts. These events do not include your app-selection tokens, the names of apps you select or open, or your learning prompts. On Android, events also record that they came from Android. We use them to understand reliability and improve the app, not to sell personal data or target advertising. Hosting and diagnostic systems may process technical information necessary to operate and secure the service.
Notifications and support
Optional pass-ended notifications are scheduled on your device. You can disable them in MindPass, iOS Settings or Android Settings. If you contact support, we process the information you choose to send so we can respond. Please do not send payment-card details or authentication credentials.
Purposes, sharing and retention
We process data to provide the service you request, administer purchases, protect against abuse, meet legal obligations, and improve reliability. Providers include Apple, Google (Firebase, Gemini and Google Play), RevenueCat and our hosting providers. These services may process data outside your country; applicable contractual and legal safeguards govern those transfers. We retain learning and account data for as long as needed to provide the service and fulfil legitimate operational or legal requirements. Billing, security and accounting records may need to be retained after a deletion request. Cached device data can remain until removed from the device.
Delete your account
Open MindPass Settings → Delete account & data. This is available without Pro and during strict mode. After confirmation, MindPass deletes your owned learning paths, answers, progress, reports and linked product events from its active database, deletes your Firebase account, and clears local MindPass data and focus settings. If interrupted, deletion resumes when you retry or reopen the app. No new account is created until you explicitly start again. Uninstalling alone does not delete your account: on iPhone, Keychain credentials and server data may persist; on Android, uninstalling removes the data on your phone, but server data remains until you delete your account. If you no longer have the app, see how to request deletion without the app.
We retain a hashed account-suppression record to prevent stale requests from recreating deleted data. Limited pseudonymous billing mappings and completed-generation counts are retained for allowance integrity, fraud prevention and applicable legal obligations; prompt content and the raw account identifier are removed from those generation records. Apple and RevenueCat retain purchase records under their applicable policies. Backup and provider retention can differ from active-database deletion. Contact us for information about a specific record or a deletion that cannot finish. Deletion does not cancel a subscription; use Apple subscription settings or Google Play subscriptions.
Your choices and rights
You can change interests and protected apps, manage your Apple or Google Play subscription, revoke Screen Time access in iOS Settings, and turn off the MindPass Accessibility service in Android Settings. Depending on your location, you may have rights to access, correct, delete, restrict or object to processing, obtain a copy of your data, or complain to your data-protection authority. Email info@zyur.io to exercise these rights. Because accounts are pseudonymous, we may need information to identify the correct account and verify the request. Never send passwords or authentication tokens.
Audience and changes
MindPass is designed for adults managing their own screen time, not for monitoring children or another person. We may update this policy as the service changes and will update the effective date and provide additional notice where required.