This Privacy Policy explains how HMind (“HMind”, “we”, “us”) handles personal information when you use the HMind apps, website, account, optional cloud sync, sharing, subscriptions and support features. HMind is local-first: you can create, edit and save local .hmind files without an account. This policy applies when information is sent to us or our service providers.

Information you keep locally

Local maps and their contents remain in files and app-managed storage on your device unless you choose a connected feature such as sync, sharing or feedback. HMind does not receive a local map merely because you open or edit it. You control where local files are stored, moved and backed up. Images and other attachments may be copied into app-managed local storage so the document can continue to reference them.

Information we collect

Account and profile data. Account identifier, email address, display name, avatar when provided by you or an authorized social sign-in provider, email-verification state, authentication methods and session/security metadata when you create or manage an account.
Synced content. Maps, nodes, text, structure, settings, revision metadata and attachments you choose to sync. Local files remain your working copy; a connected copy is stored for cross-device sync.
Sharing data. The map content and attachments included in a share, link status, access role, password-protection state, expiration or revocation state, and limited security metadata needed to serve a read-only link. We do not store share passwords in readable form.
Subscription data. Product, plan, entitlement, transaction status, renewal/expiration state, store, currency and limited billing identifiers. The payment processor handles payment credentials; HMind does not receive or store your complete card number.
Support and feedback. The category, message, contact details you provide, and an optional attachment. If you choose to include client information or diagnostics, HMind sends the limited information shown by that control. Diagnostics are opt-in and are not intended to include your maps, file paths, account credentials or a persistent device identifier.
Technical and security data. IP address, request time, app/browser and operating-system information, session identifiers, error status, abuse-prevention signals and service logs generated when you use online features.
Optional website analytics. Only after you explicitly allow analytics, page URL and title, browser/device information, session identifiers, and limited event labels for authentication, checkout, subscription management, downloads and shared-map viewing. We do not send account details, map content, share tokens or payment data.

Sources of information

We receive information from you, from the HMind app or browser you use, and from third parties involved in a feature you request—for example an identity provider when you choose social sign-in, or a payment, app-store or subscription provider when you make or restore a purchase.

How and why we use information

Provide accounts, sync, sharing, subscription entitlements, downloads and support.
Authenticate users, protect sessions, prevent abuse and investigate security incidents.
Process purchases, restore entitlements and maintain transaction/accounting records.
Respond to requests, deliver service notices and troubleshoot user-reported problems.
Maintain and improve reliability using aggregate or de-identified information where practical.
With your consent, understand website usage and conversion paths through optional analytics.
Comply with law, enforce our agreements and protect users, HMind and others.

Where data-protection law requires a legal basis, we rely on performance of our contract, our legitimate interests in operating and securing HMind, compliance with legal obligations, and consent where the law or the feature requires it. You may withdraw consent for future processing where consent is the basis.

We disclose only the information needed for the relevant function, including to:

Communications providers for account verification, password reset and essential service messages.
Hosting and data-processing providers for connected profiles, synced documents, attachments, shares, feedback and secure service operation.
Identity providers when you choose social sign-in. They receive the authentication request and return the identity information you authorize.
Payment, app-store and subscription providers for checkout, purchase processing, entitlement activation, restoration, renewal and subscription management.
Content delivery and security providers for website and download delivery, availability and abuse prevention.
Analytics providers for limited website measurement only after you allow analytics.

We may also disclose information when required by law, to protect rights or safety, or in connection with a merger, financing, acquisition or transfer of the service, subject to appropriate notice and safeguards. We do not sell personal information and do not share it for cross-context behavioral advertising.

Shared links

Anyone who has a valid share link—and the password, when enabled—may view the shared map in a browser. Do not share sensitive information unless you intend the recipients to see it. A link may be copied by a recipient. Revoking a link prevents future access through HMind, but cannot erase copies or screenshots already made by a recipient.

International transfers

Our providers may process information in countries other than where you live. Where required, we use recognized transfer mechanisms and contractual safeguards. Local law and government access rules may differ between countries.

Retention

We retain account and connected content while your account or requested feature remains active, then delete or de-identify it when no longer needed. Retention may continue for backups, fraud prevention, security, dispute resolution, tax, accounting or other legal obligations. Transaction records are retained for the period required by the processor and applicable law. Revoked share records and security logs may be retained for a limited period to enforce revocation and investigate abuse.

Security

We use safeguards appropriate to the nature of the information, including encrypted transport, short-lived authentication tokens, access controls and row-level authorization for connected data. No system is completely secure. Protect your account credentials, keep independent backups of important local files and contact us if you suspect unauthorized access.

Your choices and rights

Use local editing without creating an account.
Enable or stop sync, revoke share links and choose whether to include diagnostics with feedback.
Access, correct or update available account information in the HMind account page.
Delete your account, or request access, correction, portability, restriction or objection by contacting the address below. We may need to verify the request before acting on it.
Cancel a subscription through the store or billing provider that processed it.
Allow, reject or later withdraw optional analytics through the website’s Cookie settings control.

Rights vary by location and may be subject to verification and lawful exceptions. California residents may also request the categories and specific pieces of personal information collected, deletion or correction, and may exercise applicable rights without discriminatory treatment. Because HMind does not sell personal information or share it for cross-context behavioral advertising, there is no sale/sharing opt-out required for those activities. You may appeal or complain to your local data-protection authority where applicable.

Children

HMind is a general-audience productivity service and is not directed to children under 13. We do not knowingly collect personal information from a child under 13 without legally valid parental consent. If you believe a child has provided personal information contrary to this policy, contact us so we can investigate and take appropriate action.

Changes

We may update this policy as HMind or applicable law changes. We will update the date above and provide additional notice when a change materially affects your rights or how we use personal information.

Contact

For privacy questions or rights requests, email support@hmind.app. Please do not send passwords, payment-card details or sensitive map contents by email.