Your Privacy Matters
We are committed to protecting the privacy of families and children using MindJoy. This policy explains how we collect, use, and safeguard your data.
Last updated: February 17, 2026
Data We Collect
We collect only the minimum data necessary to provide our services.
Account Information
Name, email address, and password when you create an account.
Children's Profiles
First name, age, and avatar chosen by the parent. We never collect unnecessary information about children.
Usage Data
Mission completions, XP earned, and app interaction patterns to improve the experience.
Location Data
Only when Geo Safety features are explicitly enabled by the parent. Location is never shared with third parties.
Device Information
Device type, operating system, and app version for technical support and compatibility.
How We Use Your Data
Your data is used exclusively to provide and improve MindJoy services.
- Providing personalized missions and educational content
- Enabling Geo Safety features when activated by parents
- Improving app performance and user experience
- Sending important account and service notifications
- Providing customer support when you contact us
Children's Privacy
COPPA & AADC Compliance
MindJoy takes children's privacy extremely seriously. We comply with the Children's Online Privacy Protection Act (COPPA) and the Age Appropriate Design Code (AADC).
- We require verifiable parental consent before collecting any data from children under 13.
- We collect only the minimum data necessary for the app to function.
- We never show targeted advertising to children.
- We never sell children's personal information to third parties.
- Parents have full control over their children's data and can request deletion at any time.
- All content and features are designed to be age-appropriate.
Your Data Rights
Under GDPR and applicable privacy laws, you have the following rights:
Right of Access
Request a copy of all personal data we hold about you.
Right to Rectification
Request correction of inaccurate personal data.
Right to Erasure
Request deletion of your personal data ("right to be forgotten").
Right to Data Portability
Receive your data in a structured, machine-readable format.
Right to Restriction
Request that we limit how we process your data.
Right to Object
Object to processing of your personal data for specific purposes.
GDPR Data Request
You can request an export of all your personal data or exercise any of your data rights by contacting us.
Send your request to:
privacy@mindjoy.world
We will respond to your request within 30 days as required by GDPR.
Account Deletion
You can request complete deletion of your account and all associated data at any time.
To delete your account, go to Settings > Account > Delete Account in the app, or send an email to:
privacy@mindjoy.world
Account deletion is permanent and cannot be undone. All data including children's profiles, mission history, and XP will be permanently removed within 30 days.
Data Security
We implement industry-standard security measures to protect your data:
- All data is encrypted in transit (TLS 1.3) and at rest (AES-256).
- Strict access controls limit who can access personal data.
- Continuous security monitoring and regular audits.
- In case of a data breach, we will notify affected users within 72 hours as required by GDPR.
Third-Party Services
We use a limited number of trusted third-party services:
- Cloud hosting (encrypted servers in EU)
- Privacy-focused analytics (no personal data shared)
- Secure payment processing (we never store card details)
- Push notification delivery service
Contact Us
If you have questions about this privacy policy or your data:
privacy@mindjoy.world
Changelog
February 17, 2026 — Initial privacy policy published.