MindVault Privacy Policy

Last updated: January 26, 2026

Our Privacy Commitment

MindVault is built with a privacy-first approach. Your documents remain under your control, and we design our systems to minimize data access, collection, and retention.

We do not sell personal data, show advertisements, or use your personal documents for profiling or public AI model training.

1. Information We Collect

1.1 Account Information

Phone number (used for OTP-based authentication)
Email address (optional, used for account recovery and communication)
Name (optional, for personalization)

1.2 Device & Technical Information

We may collect limited technical information such as device model, operating system version, app version, and crash reports. This data is used solely for security, troubleshooting, and improving app reliability.

1.3 User Content & Metadata

MindVault primarily stores documents and content on your device. Depending on features you enable, we may process or store limited metadata such as:

Document type or category
Document title or user-defined tags
Reminder dates
Non-sensitive structural indicators (e.g., whether a document contains an expiry date)

We do not ordinarily store document images, full extracted text, or sensitive personal identifiers unless required to deliver a feature you explicitly enable.

1.4 Payment Information

Payments are processed by third-party payment providers such as the Apple App Store (iOS) and Razorpay (Android). We do not store credit card numbers, bank account details, or payment credentials.

2. How We Process Your Data

2.1 On-Device Processing (Default)

By default, most document processing occurs on your device, including scanning, classification, and information extraction. Your content remains under your control unless you enable optional features.

2.2 Optional Cloud Features

MindVault offers optional encrypted cloud-based features for continuity, such as device recovery or cross-device access. These features are disabled by default and are enabled only with your explicit consent.

When enabled, limited server-side processing may occur strictly to deliver the requested functionality.

3. Data Security

We use industry-standard security safeguards to protect your data, including encryption, access controls, and monitoring. Access to production systems is restricted and logged.

While no system can guarantee absolute security, we take reasonable and appropriate steps to protect your information.

4. Data Sharing

4.1 What We Do Not Do

We do not sell personal data
We do not show advertisements
We do not profile users for marketing
We do not use personal documents for public AI training

4.2 Limited Sharing

We may share limited data with trusted service providers strictly to operate the app (such as cloud infrastructure, email delivery, or payment processing). These providers act on our instructions and are bound by confidentiality obligations.

We may disclose information if required by law or a valid legal request, limited to the data we have access to.

5. Your Rights

5.1 Under India’s DPDP Act, 2023

Right to access personal data
Right to correction of inaccurate data
Right to erasure of personal data
Right to withdraw consent for optional features
Right to grievance redressal

5.2 Under GDPR (Where Applicable)

Right to access, rectification, and erasure
Right to data portability
Right to restrict or object to processing
Right to lodge complaints with supervisory authorities

6. Data Retention

Account information is retained until you delete your account
Server-side metadata is deleted within a reasonable period after account deletion
Documents stored locally on your device remain under your control

7. Children’s Privacy

MindVault is not intended for use by children under 13. We do not knowingly collect personal data from children. If you believe a child has provided personal information, please contact us for removal.

8. Consent Management

Within the app, you can manage and withdraw consent for optional features such as:

Cloud backup and continuity features
Email-based document ingestion (if enabled)

Consent can be changed at any time through the app settings.

9. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via the app or email (if provided). Continued use of the app after changes constitutes acceptance.

10. Contact & Grievance Redressal

Privacy Contact: privacy@zasyaonline.com
Grievance Officer (India): grievance@zasyaonline.com

ZasyaOnline Private Limited
Chennai, Tamil Nadu, India