Privacy Policy

MingDao Mindfulness | Last updated: June 13, 2026

In short: Your practice data — stats, preferences, and reflection journal — stays on your device. We do not advertise, track, or sell your data. To provide AI, voice, image, and speech features, content you actively send is processed by our backend and by OpenAI and ZenMux. We store only minimal, expiring usage metadata on our server (no conversation content), and you can erase it in-app at any time.

1. Who We Are

MingDao Mindfulness is developed and operated by Maurice Wen.

Contact: maurice_wen@proton.me

2. What Data We Collect

Data Stored on Your Device Only Never sent to us

Data	Purpose	Storage
Practice statistics	Track streak, meditation minutes, sessions	On-device (UserDefaults)
Onboarding preferences	Personalize content	On-device
Reflection journal	Your written reflections	On-device
Language preference	Chinese or English display	On-device
Subscription status	Access tier	Managed by Apple (StoreKit 2)

Your reflection journal and practice history are never uploaded unless you explicitly send a specific reflection into an AI feature.

Data Processed When You Use AI / Voice / Image / Speech

Data	Recipient	When
Text you send (a question or a reflection you choose to share)	Our backend → ZenMux (`openai/gpt-5.5`)	AI text features
Microphone audio	Our backend issues a short-lived token → OpenAI Realtime	Only during a voice session
A style prompt (no personal content)	Our backend → OpenAI	Image generation
Text to be spoken	Our backend → OpenAI	Text-to-speech
Subscription receipt (Apple StoreKit JWS) + a per-install subscriber token	Our backend	Verify entitlement; meter usage
Trial device identifier + IP address	Our backend	Grant / rate-limit the free trial
Payment info	Apple	When you subscribe

Important — who processes your AI content: Text features use ZenMux (model openai/gpt-5.5). Voice, image, and speech features use OpenAI. We do not use Google or any advertising/analytics provider, and we do not store the content of your AI conversations, voice audio, or generated results on our server.

3. How We Use Data

On-device personalization & progress: onboarding choices, streaks, minutes, and reflections are computed locally on your device
AI text features: text you actively submit is sent via our backend to ZenMux (openai/gpt-5.5) only when you tap an AI feature
Voice / image / speech: audio, a style prompt, or text is sent via our backend to OpenAI only while you use that feature
Entitlement & fair-use metering: we verify your Apple subscription and count usage against your plan, keyed to a per-install subscriber token (not your name or email)
Notifications: local iOS notifications only; no push server

We do not use your data for advertising, profiling, selling, or AI training.

4. Data Sharing

We do not sell, rent, or trade your personal data. Data is shared only to deliver the features you use:

OpenAI — microphone audio (voice), a style prompt (images), and text (speech). No name, email, or contact identifier attached.
ZenMux — the text you submit to AI chat (model openai/gpt-5.5). No name, email, or contact identifier attached.
Apple — processes payment and subscription. We never see your card details.

Our backend runs on Cloudflare Workers and receives your subscription receipt, a device trial identifier, and your IP (for trial abuse-control). It stores only short-lived usage metadata (see §5).

5. Data Retention and Deletion

On-device data: persists until you delete the app or clear app data in iOS Settings. We cannot access it remotely.
Server-side usage metadata: only minimal, automatically-expiring records — trial state, plan-usage counters, top-up grants, abuse-control counters — keyed to a per-install subscriber token, device trial identifier, and (for trial) IP. No conversation content.
AI content in transit: processed in real time by OpenAI / ZenMux under their retention policies; we keep no copies.

To delete everything: use the in-app delete option (it calls our DELETE /v1/account endpoint to purge server-side records), then delete the MingDao Mindfulness app to remove all on-device data.

6. Your Rights

All Users

Access: your practice data is on your device; server-side records are limited to the §5 usage metadata
Deletion: use the in-app delete for server-side records; delete the app for on-device data
Opt-out of AI: don't use AI / voice / image / speech features; no content is sent

EU Users (GDPR)

Legal basis: consent (AI/voice/image features) and contractual necessity / legitimate interest (entitlement and abuse-control). You may exercise erasure in-app or by contacting us, and you may lodge a complaint with your data protection authority.

California Users (CCPA/CPRA)

We do not sell or share personal information or use it for cross-context behavioral advertising. You may request disclosure and deletion of the §5 usage metadata.

7. Children's Privacy

We do not knowingly collect data from children under 13 (under 16 in the EU). If you believe a child has provided data through the AI features, contact us and we will delete it.

8. Security

On-device data is protected by iOS built-in security (passcode, Face ID/Touch ID, hardware encryption). All network calls (to our backend, OpenAI, and ZenMux) use HTTPS/TLS. Our backend stores only minimal, expiring usage metadata — no conversation content and no reflection journal — limiting the impact of any server-side incident.

9. International Transfers

When you use AI / voice / image / speech features, the relevant content is sent to our backend (Cloudflare's global network) and to OpenAI and ZenMux, whose servers may be outside your country. These providers offer safeguards for international transfers. No other international transfers occur.

10. Changes

We will update this policy when data practices change. Material changes will be communicated through an in-app notice.

11. Contact

Email: maurice_wen@proton.me