Your data, plainly.

What MindMap keeps, where it lives, who can see it, and how to take it back. This covers the website, the browser extension, and the Android and iPhone apps. Updated October 2026.

What we keep

Your account email and settings (time zone, study hours). If you sign in with Google, Google gives MindMap your email, name and profile picture, and nothing else: no contacts, mail, files or calendar. What you add or sync: classes, class times, due dates, files, photos, notes, grades you type in. What MindMap makes for you: study packs, review cards and your ratings, paper recalls, summaries. The questions you ask in Ask. How you study: each answer you give, how long you spent on a page or item, and which ways of explaining you opened, so MindMap can pick what helps you (never shown to anyone else). If you use them: calendar links you paste and the busy times read from them, your reminder time and the address your phone gives for reminders, and the school or class sections you join. Nothing else.

What we don't collect

No location, contacts, advertising ID, browsing history or data from other apps. No analytics or ad tools in the website or the apps. The apps use the camera only when you tap to photograph a paper recall, and notifications only if you turn on the daily reminder.

Where it lives

Your account, classes and everything you study live in a database run by Supabase; the website is served by Vercel. Files (slides, documents, photos) and the pictures taken from them are kept in Cloudflare R2, a file store, under a name made from the file's contents. Every database row is locked to your account at the database level, so another account can't read it even by mistake. Files open through links that expire. Everything travels encrypted (HTTPS). An encrypted copy of the database is made every night and the last 14 are kept, so a deleted item can stay in a backup for up to 14 days.

AI

Study packs, summaries, memory hooks, recall checks and Ask answers are written by one model (off on this site) on a single computer run by MindMap's operator. It is not a school server and not a cloud AI service. That computer reads your files, photos, answers and questions to do the work, keeps a working copy of files for a short time, and writes logs that name what it worked on (never your passwords). Your files, photos and grades are not sent to an outside AI company and are never used to train a model.

Your school's systems

The browser extension reads Blackboard, Canvas, Brightspace or Moodle with your own login, inside your browser; your password never reaches MindMap, and it never submits, posts or messages anything. If your school connects MindMap (school sign-in or a link from your class), MindMap learns which class sections you're in.

The browser extension

The MindMap extension runs only on the course site you pick in its popup (Blackboard by default; any other site only after Chrome asks you and you allow it). There it reads your courses, announcements, due dates, grades, course pages and files, and sends them to your MindMap account. It keeps your MindMap sign-in and a list of what it already sent in your browser. It doesn't read other sites or your browsing history, and it never reads a quiz or test while you're taking it. The use of information the extension collects adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements: it is used only to keep your study plan in sync with your classes; it is never sold, never used or transferred for advertising, and never used to determine creditworthiness or for lending; and no person reads it unless you ask us to, it's needed for security, or the law requires it.

Who can see it

Only you. If you join a class section, its instructor sees counts for the whole class (what's hard, what's been studied), never for a class under 5 students, and never your own work unless you turn on "Share your own progress" in Account (you can turn it off any time). Files an instructor shares with the section are visible to its members. We never sell your data or show ads. The services named above (Supabase, Vercel, Cloudflare, and Apple or Google for reminders) store or carry it for us and may not use it for anything else.

Notifications

The daily "cards due" reminder is off until you turn it on. To send it, we keep the address your browser or phone gives for notifications (Apple's or Google's push service, or your browser's). The message says only how many cards are due.

Children

MindMap is for students 13 and older and isn't directed at children under 13. If you think a child under 13 has an account, write to us and we'll delete it.

How long we keep it, and taking it back

Until you delete it. The privacy center (in the website and the apps) lists everything MindMap holds about you, by kind. You can download all of it as one zip, delete one kind, or delete your whole account, sign-in included, at once. Deletion removes the rows and files right away; this month's AI usage total stays until the month ends so a monthly limit can't be reset.

Changes

If this policy changes in a way that matters, we'll say so in the app before it takes effect.

Questions

See Support.