Privacy Policy
Effective 15 September 2026. (Previous version: 11 August 2026.)
Mind Clutter ("Mind Clutter", "we", "us") is operated from Ontario, Canada. This policy explains what happens to what you write.
Contact: support@getmindclutter.com
The short version
Your thoughts are stored on your phone, encrypted. We cannot read them.
Three things leave your device, and only these:
- The text you ask us to sort, sent to an AI model so it can be categorized, and sent back. We do not keep it.
- An encrypted backup, if you turn backup on. It is encrypted on your phone with a key we never receive, so to us it is meaningless bytes.
- Your account identity — your email address, held by our sign-in provider.
We do not sell your data. We do not share it with advertisers. We do not use what you write to train AI models.
What stays on your device
Everything you write is stored in an encrypted database (SQLCipher) on your phone: your dumps, the items they were sorted into, moods, check-ins, streaks, due dates and notification settings.
Voice capture is done by your phone's own speech recognizer. The audio never leaves your device and is never recorded or stored — only the text it produces, and only on your device.
What leaves your device, and when
When you sort a dump
The text of that dump is sent over an encrypted connection to our server, which passes it to Azure OpenAI (Microsoft) to be categorized. The result comes back and is stored on your phone.
The model also tidies what it gives back: it corrects spelling, grammar and mis-heard words so each item reads as a clean sentence, and it writes in the language you used — it never translates. Your original dump is kept exactly as you wrote it, alongside the tidied items, and you can edit any item yourself.
- Our server does not store the text and does not write it to any log.
- We do not use it to train any model. Azure OpenAI does not train on customer data.
- However: Microsoft may retain prompts and responses for up to 30 days for abuse monitoring, where they can be reviewed by authorized Microsoft personnel only if a request is flagged as abusive. This is a standard Azure OpenAI feature. We have not applied for an exemption yet. If that changes, this policy will be updated.
When you use "Ask your thoughts"
Your question is answered only from what you have written. The selection of which thoughts are relevant happens on your device. Only the handful of thoughts chosen to answer that one question are sent, under the same terms as above. We never send your whole history.
When you use "What first?"
To suggest what to do next, the text of your open tasks, reminders and people to get back to is sent, along with when each is due, how long it has been waiting, and today's mood if you logged one. Same terms as above.
If you turn on "Plan around today's calendar", which is off unless you switch it on, the app also sends when you are busy for the rest of today, as clock times only (for example 13:00 to 14:30). It never sends what your events are: no titles, people, places or notes leave your phone. Our server refuses a request that tries to include anything more. The app reads your calendar only at the moment you ask for a plan with this turned on.
When you use meaning-based search
The text being indexed is sent to Azure OpenAI to produce an embedding (a list of numbers). The embedding is stored on your device. Same terms as above.
When you turn on backup and sync
Backup and sync is a Premium feature, included in the free trial. Your data is encrypted on your phone using a key derived from your recovery code, then the encrypted blob is uploaded.
We never receive your recovery code and cannot recover it for you. If you lose it, your backup cannot be decrypted by us, by you, or by anyone else. This is deliberate.
If your trial ends or your subscription lapses, syncing stops immediately and the app deletes the encrypted blob from our servers a few days later. The delay is deliberate: a subscription can look inactive for a moment when the app cannot reach the store, and we would rather wait than delete something we cannot put back. Nothing on your phone is touched — your thoughts, check-ins and history all stay where they are, and CSV export stays free so there is always a way to get everything out. Subscribe again and the app will offer to turn backup back on, with a new recovery code.
What we store on our servers
| What | Where | Why |
|---|---|---|
| One encrypted backup blob per account | Microsoft Azure Blob Storage, Canada Central | So you can restore, and sync across your devices |
| Your account: email address, sign-in method, account creation date | Clerk | So you can sign in and so we know when your trial started |
| Subscription status, and your account email | RevenueCat, and Apple/Google | So we know whether you have paid, and so we can find your subscription when you write to us about it |
| Nothing else | — | We hold no copy of your thoughts we can read |
The backup blob is stored under an opaque account identifier. We cannot decrypt it.
We do not store your thoughts in readable form on any server, at any time.
Who else processes your data
| Processor | What they handle | Where |
|---|---|---|
| Clerk | Email address, authentication | United States |
| Microsoft Azure | Our API, encrypted backups, AI processing | Canada |
| Apple / Google | Payment, subscription management | Global |
| RevenueCat | Subscription status, email address | United States |
Payment card details are handled entirely by Apple and Google. We never see your card number.
This website
getmindclutter.com is a plain set of static pages. It is worth stating exactly what that means, because "we take your privacy seriously" is what every site says.
- No cookies. We set none, of any kind. There is no cookie banner because there is nothing to consent to.
- No analytics and no trackers. No Google Analytics, no pixels, no session recording, no advertising tags, no A/B testing scripts.
- No third-party requests. Fonts, images, styles and scripts are all served from our own domain. Nothing on the page causes your browser to contact another company — including Google Fonts, which would otherwise send your IP address to Google before you had agreed to anything.
- No forms. There is nothing to submit, so there is nothing to collect.
Our web host keeps standard server logs (IP address, time, page requested, browser user-agent) for a short period for security and to keep the site running. We do not use those logs to build a profile of you and do not combine them with anything in the app.
Sign-in with Google or Apple
If you sign in with Google or Apple we receive your email address and, where provided, your name. We do not receive your password, your contacts, or anything else from those accounts.
If you use Sign in with Apple and choose "Hide My Email", we only ever see Apple's relay address, which is the intended behaviour.
How long we keep things
- Encrypted backup: until you delete it, delete your account, or your Premium subscription ends. We also delete any backup blob that has not been written to for 12 months, automatically — if a phone has not synced in a year, the copy is not doing anybody any good.
- Account record: until you delete your account.
- AI processing: not retained by us. See the 30-day Microsoft abuse monitoring note above.
Deleting everything
In the app: Settings → Account → Delete account. This deletes your account record and your encrypted backup blob. Data on your own device is removed when you uninstall the app or clear its data.
You can also email support@getmindclutter.com and we will do it.
Your rights
Depending on where you live you may have the right to access, correct, export, or delete your personal data, to withdraw consent, and to complain to a regulator.
- Canada (PIPEDA): you may complain to the Office of the Privacy Commissioner of Canada.
- EU/UK (GDPR): our lawful basis is performance of a contract (running the app you asked for) and legitimate interests (keeping it secure and working). You may complain to your local supervisory authority.
- California (CCPA/CPRA): we do not sell or share personal information as those terms are defined.
To exercise any of these, email support@getmindclutter.com.
Because we cannot read your encrypted content, an access request can return your account record and your encrypted blob, but we cannot decrypt the blob for you.
International transfers
We are in Canada. Some processors are in the United States. Where data is transferred out of the EU/UK, our processors rely on Standard Contractual Clauses.
Children
Mind Clutter is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has given us data, email us and we will delete it.
Security
Data on your device is encrypted at rest. Traffic to our servers uses TLS. Backups are end-to-end encrypted with AES-256-GCM using a key derived on your device and never transmitted.
No system is perfectly secure, and we do not claim otherwise.
Changes
If we change this policy materially we will notify you in the app before the change takes effect. The effective date above always reflects the current version.
Contact
support@getmindclutter.com Mind Clutter — Ontario, Canada