Privacy Policy

1. Who we are

Mind Canvas is a product operated by Descobrilança Unipessoal LDA (NIPC 516940503), a company registered in Portugal ("we", "us"), which is the data controller for your personal data. Contact: info@mindcanvas.one.

2. What we collect

• Account data: email and display name; with Google sign-in, your name and email from Google; with Telegram, your Telegram user ID, first name and username.
• Your content: questionnaire answers, technique entries and notes.
• Technical data: browser, device, approximate location from IP address, and pages viewed.

3. Voice input

When you press "Speak", the recording is sent to our server and forwarded to the Lovable AI Gateway, which uses Google's Gemini model to transcribe it. We do not keep the audio; only the text you choose to save is stored. The transcription provider may process the audio outside the EEA under standard contractual clauses. Typing instead of speaking avoids this entirely.

4. Connected AI assistants (MCP)

If you connect an external AI assistant through our MCP endpoint, you authorise it to read the data you grant. We do not share your entries with any assistant otherwise.

5. Analytics and advertising

Google Analytics and the Meta Pixel load only after you click "Accept all" in the cookie banner. They record page views and events such as account creation or a built map, never the content of your answers. Details and how to withdraw: Cookie Policy.

6. Telegram Mini App

When you open Mind Canvas in Telegram, we receive your Telegram user ID, first name and username from Telegram to create your account. Your answers, technique entries and notes are stored in your private account and are visible only to you. No email is collected and no emails are sent to Telegram accounts. You can delete all your entries at any time from My account (web) or More → Delete all my entries (Telegram), or delete the whole account from My account → Data.

7. How we use information

Your data is used to operate the service, sync your entries across devices, and improve product quality. We do not sell personal data to third parties.

8. Processors and transfers

• Supabase - database and authentication
• Lovable - hosting and AI gateway
• Google Ireland Limited - analytics, sign-in, transcription model
• Meta Platforms Ireland Limited - advertising measurement
• Telegram - Mini App sign-in and bot messages

Where data is transferred outside the EEA, this happens under standard contractual clauses (SCCs).

9. Retention

We keep your account data and content until you delete it or your account. Technical logs are kept for up to 30 days.

10. Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability and objection. In the app you can use Export my data, Delete all my entries and Delete my account (My account → Data), or email info@mindcanvas.one. You also have the right to lodge a complaint with the Portuguese supervisory authority, Comissão Nacional de Proteção de Dados (CNPD).

11. Age

Mind Canvas is intended for adults aged 18 and over.

12. Changes

We may update this policy. The date at the top shows the latest version.

13. Data controller & contact

• Data controller: Descobrilança Unipessoal LDA
• NIPC: 516940503
• Registered in Portugal
• For data-protection requests (access, correction, deletion, portability, objection), write to info@mindcanvas.one.