MindScriptBack to MindScript

Privacy Policy

Last updated: November 7, 2026

MindScript ("we", "our", "us") operates the MindScript website at mindscript.studio and the MindScript mobile apps for iOS and Android. This policy explains what information we collect, how we use it, who we share it with, and the choices you have.

1. Information We Collect

Account Information

  • Email address and password, used to create your account and sign in
  • Your name, if you enter one when you sign up on the website (optional)
  • Profile details you choose to add on the website, such as a username, display name, bio and profile photo (optional). Details on your public profile can be seen by other visitors

Content You Create

  • Track titles and the scripts you write
  • Your audio choices: voice, background music, solfeggio and binaural settings, duration and loop settings
  • Playlists and how you organize your library
  • Cover artwork: a template you pick, or a photo you choose from your device's photo library, which we upload to our storage
  • The finished audio files we render for you

Voice Recordings (Optional)

If you choose to create your own voice, we collect:

  • The voice sample you record with your microphone or upload as an audio file
  • The name you give your voice
  • A record of your consent: the statements you confirmed, the consent version and the time
  • A short preview clip of your voice reading a fixed sentence, so you can hear it in the voice picker

Purchases

  • What you bought, the amount, the platform, and the payment or store transaction ID
  • On the website, a Stripe customer ID, so checkout is faster next time

Usage and Device Data

  • Listening activity: which track you played, play, pause, skip, seek and complete events, how long you listened, and your device platform and operating system version
  • Practice days and streaks, worked out from your listening activity and your device's time zone
  • Crash reports and performance data from the website and the apps
  • Standard server logs from our hosting providers, such as IP address, browser type and request time

Notifications and On-Device Data (Mobile)

  • If you allow notifications, a push token for your device, so we can tell you when a track is ready
  • Daily practice and streak reminders are scheduled on your device. Your reminder settings stay on your device
  • Tracks you download for offline listening are saved on your device
  • If you join the Marketplace waitlist, we store your account email so we can tell you when it opens

2. How We Use Your Information

  • Create and secure your account
  • Turn your scripts and settings into audio tracks (see Section 4)
  • Create and maintain your personal voice, if you choose to make one
  • Show your library, playlists and downloads on the website and in the apps
  • Process purchases and deliver what you bought
  • Send account and service emails: email verification, password reset, purchase confirmations and track-ready notices
  • Send the push notifications you allow, and show your practice streaks
  • Find and fix bugs, and understand how the website and apps are used
  • Prevent fraud and abuse, and enforce our Terms of Service

We do not sell your personal information, and MindScript does not show ads. The mobile apps do not track you across other companies' apps or websites.

3. Who We Share Information With

We share information only with the service providers that help us run MindScript, and only what each one needs for its role:

  • Supabase: account sign-in, database and file storage
  • Vercel: hosts the website and our server API
  • Heroku: runs the server that renders your audio
  • OpenAI: generates speech from your script for standard voices
  • ElevenLabs: generates speech from your script for premium voices, and creates and hosts personal voices from your voice sample
  • Stripe: processes card payments on the website
  • Apple App Store and Google Play: process in-app purchases in the mobile apps
  • RevenueCat: manages and verifies in-app purchases for the mobile apps
  • Expo: delivers push notifications and app updates to the mobile apps
  • Resend: sends account and service emails
  • Sentry: crash reporting and error diagnostics for the website and apps
  • Google Analytics: measures how visitors use the website

Each provider handles data under its own privacy policy. We may also share information when the law requires it.

4. Voice Data and AI Processing

MindScript uses third-party AI voice providers to turn your scripts into speech. In the mobile apps, before your first track or edit, we tell you what is sent and who receives it, and we ask your permission. Nothing is sent to them unless you agree.

  • Scripts: when you create or edit a track, its script is sent to a voice provider to generate the speech. Standard voices use OpenAI. Premium voices and personal voices use ElevenLabs
  • Consent is required: creating your own voice is optional. Before you record, you must confirm every consent statement, including that the voice is your own, that you are 18 or older, and that your recording is sent to ElevenLabs, a third-party AI voice service. We do not create a voice without this consent, and we keep a record of it
  • Your sample: we keep your voice sample in private storage that only our servers can access, and send it to ElevenLabs to create your voice
  • Provider copies are temporary: ElevenLabs holds a copy of your voice only while we need it to render your audio. When it has been idle for a while, we delete the copy at ElevenLabs and re-create it from your stored sample the next time you make a track
  • Only for you: your voice appears only in your own account and is used only to make your tracks. Each account has one voice. Recording a new sample replaces it, and tracks you already made keep their audio
  • Deletion: you can delete your voice at any time (see Section 7)

OpenAI and ElevenLabs process this data under data processing terms that require them to keep it confidential and secure and to use it only to provide their service to us, which is at least the protection this policy describes. OpenAI does not train its models on this data, and we have turned off model training with ElevenLabs.

5. Payments

  • Website: you sign in or create an account before checkout. Payments go through Stripe Checkout. Stripe collects your card details directly, and we never see or store your card number
  • iOS and Android: purchases are made through the Apple App Store or Google Play with the payment method on your store account. RevenueCat confirms the purchase with the store and tells our servers it is valid. We do not receive your payment details
  • What we keep: a record of each purchase (product, amount, platform, and the Stripe or store transaction ID) so we can deliver your track, handle edits and help with support requests
  • All purchases are one-time purchases. There are no subscriptions

6. Analytics and Cookies

  • Sign-in cookies: the website uses cookies and browser storage to keep you signed in and remember your progress. These are required for the site to work
  • Google Analytics: the website uses Google Analytics 4, which sets cookies to measure page visits and how people use the site. You can block these cookies in your browser settings
  • Error replays: to diagnose errors, Sentry may record a replay of some website sessions, including clicks and what was shown on the page
  • Listening analytics: on the website and in the apps we record playback events (see Section 1) to count plays, show your streaks and improve MindScript. These are linked to your account
  • Mobile apps: the apps do not use advertising identifiers or tracking cookies. Crash reports from the apps are not linked to your account

7. Data Retention and Deletion

  • We keep your account data, tracks and voice for as long as your account is active
  • Crash reports, error replays and website analytics are kept by Sentry and Google Analytics under their retention settings

Deleting Your Voice

You can delete your personal voice from the voice picker in the website's track builder, or by deleting your account. Deleting your voice removes it from ElevenLabs and deletes your stored voice sample. Tracks you already made keep their audio. If you delete only your voice, we keep your consent record and a record that the voice was deleted until your account is deleted.

Deleting Your Account

You can request account deletion in the mobile app (Settings, Account, Delete Account) or on the website at mindscript.studio/delete-account. You confirm the request with your password.

  • Your account is scheduled for deletion 30 days after your request, and you are signed out
  • To cancel, sign back in within those 30 days. Signing in cancels the deletion automatically
  • At the end of that period an automated job permanently deletes your account and the personal data linked to it, including your profile, scripts, tracks and rendered audio, cover images, voice sample and voice, playlists, listening and streak history, and push token
  • We may keep purchase records where we need them for accounting, tax or fraud prevention
  • Records that Apple, Google or Stripe hold about your purchases are covered by their own policies

8. Data Security

We use encrypted connections (TLS), store sign-in tokens in your device's secure storage on mobile, and use row-level security policies on our database. Rendered audio and voice samples are kept in private storage, and audio is delivered through signed links that expire. Cover images, profile photos and voice preview clips are stored so that they can be loaded by anyone who has the link.

9. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your account and data
  • Request a copy of your data

You can delete your voice and your account yourself, as described above. For any other request, email us at the address below. You can also turn off notifications, or remove microphone and photo library access, in your device settings at any time.

10. Children's Privacy

MindScript is not directed to children under 13, and you must be at least 13 years old to use it. We do not knowingly collect personal information from children under 13. Creating a personal voice requires you to confirm that you are 18 or older. If you believe a child has given us personal information, contact us and we will delete it.

11. Changes to This Policy

We may update this policy from time to time. When we do, we will change the date at the top of this page. If we make significant changes, we will let you know by email or in the app.

12. Contact Us

For questions about this privacy policy or your data, contact us at zen@mindscript.studio.