Privacy Policy

1. Who we are

Mindkraft ("we", "us") is a life-gamification app available at mindkraft.life. It lets you track habits and activities, earn XP, build streaks, make commitments you stake a virtual currency on, take on friends head-to-head, and share progress with people you add. This policy explains what information Mindkraft collects, how it is used, who can see it, and the controls you have over it.

The short version: we collect what the app needs to work, we don't run ads, we don't sell your data, and we don't share it with anyone except the service providers listed in section 7 and the people you choose to connect with. We do run basic product analytics — see section 2.

2. Information we collect

Account information

Mindkraft uses Sign in with Google (via Firebase Authentication). When you sign in we receive your Google account's name, email address, profile photo, and a unique account identifier. You can set a different display name inside the app, which is what other users see.

What you create

Your account document holds the whole of your app state: dimensions, paths and activities; every completion you log, with its timestamp and XP; levels, streaks and streak shields; quests and their structure; planner entries; rewards you define; your map (the "Web") including the goals you type into it; chart and display settings; your timezone; and your balance of Grit, the app's in-app currency, along with a ledger of how it was earned and spent. Once a day a snapshot of all of it is saved alongside it as a restore point.

Social data

If you use the social features, we also store: your friend code; your friends list; friend requests you send or receive; Pacts and Versus Challenges you take part in, including each side's chosen activities, targets, progress counters and the Grit staked; gifts sent and received; and, if you opt into leaderboards, a published board naming the people you are scored against. Section 6 sets out exactly what other people can see.

Push notifications

If you turn on notifications, your browser creates a push subscription — an endpoint URL at your browser vendor's push service, plus a pair of encryption keys — and we store it on your account so we can deliver notifications to that device. It is used for reminders you set, mode nudges, gifts, Pacts (including progress nudges), friend requests, and Versus Challenges.

To be accurate about one thing: turning reminders off in the app does not by itself remove the stored subscription. The subscription is deleted when your browser's push service reports it as no longer valid — for example after you revoke notification permission, clear site data, or uninstall the app. If you want it removed sooner, revoke notification permission in your browser, or email us (section 12).

Analytics and automatically collected information

Mindkraft has no ads and no advertising trackers. It does include Google Analytics for Firebase, which records a small number of named product events — opening a category explainer, jumping to a search result, creating an activity reminder, composing a quest, and starting or ending a mode — together with the standard information the Google Analytics SDK collects, such as an app-instance identifier, device and browser type, approximate location derived from IP address, and session activity.

Separately, the providers that run our infrastructure may log ordinary request metadata such as IP address and browser type. That includes our host, Google Firebase, and the two content delivery networks the app loads its typeface and icon set from (Google Fonts and unpkg) — loading a page from them necessarily reveals your IP address to them.

3. How we use your information

• To run the app — storing and syncing your activities, XP, streaks, quests, modes and settings across your devices.
• To power the social features — showing your profile to other Mindkraft users, delivering friend requests, and running the Pact, Versus Challenge, gifting and leaderboard mechanics.
• To send notifications — the reminders you configure, and the social and mode events listed in section 2.
• To generate your map and compose quests — see section 4.
• To keep your data recoverable — the daily restore point, and any export you trigger.
• To understand how the app is used — the product analytics described in section 2.

We do not use your data for advertising or profiling, and we do not sell it.

4. AI features

Two features use a third-party AI model, both of them the Claude Haiku model from Anthropic, called through Anthropic's API from our servers:

• Weaving your map — generating the tech-tree of suggested practices that grows out of the activities you already track.
• Composing a quest — turning something you describe into a structured quest built mostly out of your existing activities.

What is sent: the text of the request you typed, the names and descriptions of your activities, your dimension and path names, the goals you have written on your map, and related numbers — completion counts, streak lengths, typical XP values, and which suggestions you have previously rejected.

What is not sent: your name, your email address, your account identifier, your friend code, your friends list, and your social data. The request carries the content described above and nothing that identifies you.

Both features run only when you explicitly ask for them. Anthropic processes the request under its own privacy policy.

5. Where your data lives

Your account data is stored in Google Cloud Firestore in the asia-south1 region (Mumbai, India), and the server-side code that reads it runs in the same region. Requests to Anthropic's API and to the two content delivery networks named in section 2 are served from those providers' own infrastructure, which is outside that region.

A copy of your app data is also kept in your browser's local storage on each device you use, so Mindkraft can start quickly and keep working offline.

6. What other Mindkraft users can see

This section is deliberately specific, because "visible to friends" would understate it in one place.

• Your public profile is readable by any signed-in Mindkraft user, not only by your friends. It holds your display name, profile photo, friend code, level, total and weekly XP, your XP-per-hour figure, your category XP breakdown (the spider chart), your character title, your best streak, your number of active days, and your XP today. It has to be readable this way for friend codes to work at all — that is how someone who types your code finds you.
• Friends see the above through your profile card, and appear alongside you on leaderboards you have both opted into.
• Leaderboards publish a board naming the people you are scored against, readable by those people.
• A Pact partner sees the display name you had when the Pact was made, the activities and targets you committed to, and your progress against each of them.
• A Versus opponent sees the same kind of thing: the challenge's agreed requirements, your progress counter against each one, and your running total.
• Gifts carry your display name to the person you send them to.

Nobody else is ever given read access to your account document, your activity list, your completion history, your Grit balance or your friends list. Everything a partner or opponent sees about you is copied onto the shared Pact or Challenge record by your own device, and it is limited to counters and agreed names.

You choose whether to add friends, join leaderboards, or make a Pact or a Challenge. If you skip all of it, nothing about your progress reaches another user except the public profile described above, which exists from your first sign-in.

7. Who we share it with

We share data only with the service providers needed to run Mindkraft:

• Google Firebase — authentication, the Firestore database, server-side functions, and product analytics. See Firebase's privacy documentation.
• GitHub Pages — serves the app's static files. See GitHub's privacy statement.
• Anthropic — processes the two AI features described in section 4.
• Google Fonts and unpkg — deliver the typeface and icon set. They receive your IP address as part of serving those files.
• Your browser vendor's push service — Google, Mozilla or Apple, depending on your browser, delivers notifications to your device.

Beyond these, your data is shared only with people you choose to connect with in the app. We never sell your personal information, and we disclose it otherwise only if required by law.

8. Your controls

• Export — download a full JSON copy of your data at any time from Settings → Data.
• Import — replace your data with a previously exported file.
• Restore — roll back to the most recent daily snapshot.
• Reset All Data — clears your account document: activities, XP, levels, streaks, quests, planner, rewards, map and settings. Be aware of what it does not clear, because the button's own wording is broader than its effect: your reminders, your Grit ledger, gifts you have sent or received, your public profile (which is republished at level 1), any leaderboard board, and any Pact or Versus Challenge you have taken part in all survive it, as does your sign-in.
• Notifications — turn reminders on or off in Settings. See section 2 for what happens to the stored subscription.
• Social — you decide whether to add friends, opt into leaderboards, or enter a Pact or Challenge.
• Account deletion — there is no in-app delete button. Email us (section 12) and we will delete your account and the associated records.

9. Retention & security

Your data is kept for as long as your account exists. The automatic restore point keeps only the most recent daily snapshot; each day's overwrites the last.

Pact and Versus Challenge records are never deleted by the app, by design — they hold the record of Grit that was staked, and deleting one could strand it. They remain after the Pact or Challenge has ended, and after a Reset.

All traffic between your device and our services is encrypted in transit with HTTPS, and database access is restricted by per-user security rules enforced by Firestore. No online service can guarantee absolute security, but Mindkraft is built to hold the minimum it needs and to keep one user's data out of another's reach.

10. Children

Mindkraft is not directed at children under 13 (or the minimum age required in your country), and we do not knowingly collect personal information from them. If you believe a child has created an account, contact us and we will delete it.

11. Changes to this policy

If we change this policy, we will update the effective date at the top of this page. Material changes will be highlighted in the app. Continuing to use Mindkraft after a change means you accept the updated policy.

12. Contact

Questions, data requests, or concerns? Email us at [email protected].