Privacy Policy
Effective 16 October 2026
This policy explains what Mindtier (“we”, “us”), operated by Manik Rana, collects when you use the Mindtier mobile app and website, why we collect it, and the choices you have. We built Mindtier to need very little data: there are no ads, no advertising identifiers and no selling or sharing of personal data.
Summary
- You can play without creating an account. We assign a random, anonymous account ID.
- We store your game results and ratings so your rank works across sessions and devices.
- Email is optional and only used to sign in and protect your progress.
- Payments are handled by Google Play or the Apple App Store. We never see your card details.
- You can delete your account and data at any time from the app or our website.
Information we collect
| Data | Why | Required? |
|---|---|---|
| Anonymous account ID (random identifier created on first launch) | To save your ratings and results and sync them | Yes |
| Gameplay data: games played, scores, accuracy, difficulty reached, ratings and their history, timestamps | To calculate your rank, run the Daily Challenge leaderboard, duels and weekly leagues (if you join), and detect cheating | Yes |
| Email address | Only if you choose to save your progress to an email, so you can sign in on another device | No |
| Display name | Only if you set one; shown to friends in duels, on leaderboards and to your weekly league group | No |
| Purchase status (which plan is active and when it renews or expires) | To unlock Mindtier Pro on your account | Only for Pro |
| App usage events (e.g. “session completed”, “paywall viewed”), without device identifiers | To understand which features work and improve the app. You can turn this off in Settings. | No |
| Push notification token | Only if you allow duel notifications; used to tell you when a friend plays your duel | No |
| Crash diagnostics (error details, app version, device model and OS version) | To find and fix crashes | No — only when crash reporting is enabled in the app |
Individual answers are used on our servers to verify each game and are not stored; we keep the per-game summary. We do not collect your location, contacts, photos, microphone or camera data, and we do not use advertising IDs or cross-app tracking.
Reminders and notifications
Daily reminders, the weekly recap and trial-ending reminders are scheduled locally on your device. If you allow notifications when you create or play a duel, we store a push notification token for your device so we can tell you when the other player finishes. You can turn notifications off at any time in your device settings; deleting your account removes the token.
Playing in your browser
The Daily Challenge at /play works the same way as the app: it signs you in anonymously, keeps your progress in your browser’s local storage and sends your verified result to the leaderboard. Clearing your browser data removes the local copy; to delete the server copy, use our account deletion page.
Service providers
We use a small number of processors who handle data on our behalf under contract:
- Supabase — database and sign-in. Data is stored in the Asia-Pacific (Seoul) region.
- Vercel — hosts our website and the API that verifies game results.
- RevenueCat — manages subscription status. It receives your anonymous account ID and purchase receipts from the store.
- Google Play / Apple App Store — process payments under their own privacy policies.
- Email delivery provider — sends sign-in codes if you add an email.
- Sentry — crash reporting, when enabled.
- Expo push service (with Google Firebase Cloud Messaging and Apple Push Notification service) — delivers duel notifications if you allow them.
We do not sell personal data and do not share it for advertising.
How long we keep data
We keep your account data while your account exists. When you delete your account, your profile, ratings, results, leaderboard, league and duel entries are deleted immediately from our live database, and removed from backups within 30 days. Aggregated statistics that cannot identify you may be kept. Requests submitted through our website are processed within 30 days.
Your rights
Depending on where you live (for example under the GDPR, UK GDPR or CCPA/CPRA), you may have the right to access, correct, export or delete your personal data, and to object to or restrict certain processing. You can delete your account yourself in Settings → Account → Delete account or on our account deletion page. For anything else, email support@example.com. You may also complain to your local data protection authority.
Legal bases (EEA/UK): performance of a contract (running the game and your account), legitimate interests (fraud prevention, crash fixing and product analytics, which you can opt out of), and consent where we ask for it (for example notifications).
Children
Mindtier is not directed to children under 13 (or the minimum age in your country) and we do not knowingly collect their personal data. If you believe a child has given us data, contact us and we will delete it.
Security
Data is encrypted in transit (TLS). Access to the database is restricted by row-level security so each account can only read its own data; game results are verified on our servers before they affect ratings.
International transfers
Our providers may process data outside your country. Where required, transfers are protected by appropriate safeguards such as Standard Contractual Clauses.
Changes
We will update this policy if what we collect changes, and show the new effective date above. Material changes will be highlighted in the app.
Contact
Manik Rana. Email: support@example.com.