Privacy Policy

Last updated: March 2025  ·  Applies to all McMindmap users

1. Who We Are

McMindmap is a web-based knowledge management tool. When we say "McMindmap", "we", "us", or "our", we refer to the McMindmap service and its operators. For questions, contact us at [email protected].

2. Data We Collect

We collect the following categories of data:

• Account information — username, profile picture, and unique user ID provided by your OAuth provider (GitHub, Google, LinkedIn, or Discord) at sign-in
• Content data — mind maps, topic files, and notes you create and store in McMindmap
• Usage data — page views, API calls, and feature interactions for service improvement and abuse prevention
• Technical data — IP address, browser type, and session tokens required to operate the service securely

We do not collect passwords. Authentication is handled entirely by your chosen OAuth provider.

3. How We Use Your Data

We use your data exclusively to:

• Provide, operate, and improve the McMindmap service
• Authenticate your identity and secure your account
• Display your profile picture and username to other users when you share public content
• Detect and prevent abuse, fraud, and violations of our Terms of Service
• Send important service-related communications (e.g. security notices)

4. AI Features and Third Parties

McMindmap uses OpenAI's API to power AI-assisted features. When you use AI generation, the content of your prompt is sent to OpenAI for processing. OpenAI's own Privacy Policy applies to that data. We do not send your account credentials or private mind map content to OpenAI unless you explicitly trigger an AI feature with that content.

5. Data Storage and Security

Your data is stored securely using Supabase, a hosted database platform with industry-standard encryption at rest and in transit. Session tokens are stored in HTTP-only cookies to prevent client-side access. We apply rate limiting and authentication middleware to protect all sensitive endpoints.

6. Public vs. Private Content

Mind maps you mark as public are accessible to any McMindmap user and may appear in search results. Mind maps marked as private are only accessible to you when authenticated. You can change the visibility of your content at any time from the app.

7. Data Sharing

We do not sell your personal data. We share data only with:

• Supabase — for database hosting and storage
• OpenAI — for AI-assisted features (prompt content only, on explicit user action)
• OAuth providers — to verify your identity at login (GitHub, Google, LinkedIn, Discord)
• Legal authorities — if required by law or to protect the rights and safety of users

8. Cookies

We use HTTP-only session cookies to keep you signed in. These cookies are essential for the service to function and are not used for advertising or tracking across third-party sites. No third-party tracking or analytics cookies are set.

9. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Delete your account and all associated data at any time via Profile Settings → Delete Account
• Object to or restrict certain processing of your data

To exercise any of these rights, contact us at [email protected].

10. Data Retention

We retain your data for as long as your account is active. When you delete your account, all your personal data, mind maps, and content are permanently deleted from our systems. Backups may retain data for up to 30 days after deletion.

11. Children's Privacy

McMindmap is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes by posting a notice in the app. Continued use of McMindmap after changes are posted constitutes acceptance of the updated policy.

13. Contact

For privacy-related questions or requests, contact us at [email protected].