Privacy Policy
Effective: June 25, 2026
Last Updated: July 15, 2026
TL;DR (Summary)
We believe privacy is a right. Here's the short version:
- We collect minimal data — No email, no real name required. You're identified by an auto-generated ID.
- Your ideas are anonymous — Other users cannot see who submitted what.
- We don't sell your data — Our business may be funded through subscriptions, paid features, or other means — not by selling your information.
- We use AI — Anthropic Claude processes round content to generate ideas / play as an AI participant (no personal identifiers sent).
- We use analytics, including session replay — We use Google Analytics and PostHog (which records anonymized recordings of your interactions) to understand and improve the app.
- We translate content — Questions and ideas may be sent to Google Cloud Translation.
- Notifications are opt-in — If you turn on notifications, we store a push token (via Firebase Cloud Messaging) to send re-engagement pings. You can turn them off anytime.
- You have control — You can delete your data anytime.
Please read the full policy below for complete details.
1. Introduction
OneMind ("we," "our," or "us") operates OneMind — a group idea game and decision tool — at onemind.life (the "Service"). A group answers a question by submitting ideas and voting on them head-to-head until one idea wins. This Privacy Policy explains how we collect, use, store, protect, and share your personal information when you use our Service.
OneMind is designed for anonymous participation. We collect minimal data by design.
Data Controller: Joel Castro, operating as OneMind
Contact: joel@onemind.life
2. Information We Collect
2.1 Information You Provide
| Data Type | Description | Required? |
|---|---|---|
| Display Name | A nickname visible to other participants in chats you join | Optional |
| Ideas / Propositions | Text you submit during rounds (max 300 characters) | When participating |
| Votes / Ratings | Your head-to-head picks among other participants' ideas | When participating |
2.2 Information Collected Automatically
When you use OneMind, we automatically collect:
| Data Type | Description | Purpose |
|---|---|---|
| Device Identifier | A randomly generated UUID stored on your device | Identify your session |
| IP Address | Your network address | Security, abuse prevention, general location |
| Device Information | Browser type, operating system, device type | Service optimization |
| Usage Data | Pages viewed, features used, interactions | Analytics, improvement |
| Session Recordings | Anonymized recordings of your interactions with the app (via PostHog session replay) | Product analytics, debugging |
2.3 Information We Do NOT Collect
- ❌ Email address (unless you voluntarily provide one in the future)
- ❌ Real name
- ❌ Phone number
- ❌ Precise GPS location
- ❌ Payment card details (processed directly by Stripe)
- ❌ Biometric data
- ❌ Government IDs
2.4 Notifications (Opt-In)
If you choose to enable notifications, your browser or device generates a push subscription token through Firebase Cloud Messaging (Google), which we store solely to send you opt-in re-engagement notifications (for example, when a new round opens in a chat you've joined). Notifications are strictly opt-in, and you can revoke them at any time in your browser or device settings.
3. How We Use Your Information
We use your information for the following purposes:
| Purpose | Legal Basis (GDPR) |
|---|---|
| Provide the Service — Enable you to join chats, submit propositions, and participate in consensus | Legitimate interest / Contract performance |
| Generate AI Propositions — Process chat topics and content through AI | Legitimate interest |
| Improve the Service — Analyze usage patterns to make OneMind better | Legitimate interest |
| Send Notifications — Deliver opt-in re-engagement notifications | Consent |
| Prevent Abuse — Rate limiting, spam prevention, security | Legitimate interest |
| Process Payments — Facilitate credit purchases through Stripe (if enabled) | Contract performance |
| Comply with Law — Respond to legal requests | Legal obligation |
We do NOT use your information for:
- ❌ Selling to third parties
- ❌ Targeted advertising
- ❌ Profiling for marketing
- ❌ Training AI models on your personal data
4. AI-Generated Content
OneMind uses AI (Anthropic Claude) to generate propositions in chats where this feature is enabled.
What data is sent to the AI:
- Chat topic and description
- Previous consensus winners (proposition text only)
- Current round propositions (text only)
What is NOT sent to the AI:
- Your device identifier
- Your display name
- Your IP address
- Any personal identifiers
AI-generated propositions participate in voting like human propositions and are not visually distinguished.
For information on how Anthropic handles data, see: https://www.anthropic.com/legal/privacy
5. Third-Party Services
We use or may use the following third-party services to operate OneMind:
Supabase (Database & Authentication)
- Purpose: Stores chat data, propositions, ratings; provides anonymous authentication
- Data Shared: Device ID, usage data, content you create
- Location: United States
- Privacy Policy: https://supabase.com/privacy
Anthropic (AI)
- Purpose: Generates AI ideas / plays as an AI participant in game chats
- Data Shared: Chat topics, idea/proposition content (no personal identifiers)
- Location: United States
- Privacy Policy: https://www.anthropic.com/legal/privacy
Google Analytics (GA4)
- Purpose: Anonymous usage analytics
- Data Shared: Device ID, usage events, technical data
- Location: United States
- Privacy Policy: https://policies.google.com/privacy
PostHog (Product Analytics & Session Replay)
- Purpose: Product analytics, session replay (anonymized recordings of your interactions within the app), and error tracking
- Data Shared: Device ID, usage events, anonymized interaction recordings, technical data
- Location: United States
- Privacy Policy: https://posthog.com/privacy
Google Cloud Translation
- Purpose: Translates user-generated content (questions and ideas) between languages
- Data Shared: Question and idea text (no personal identifiers)
- Location: United States
- Privacy Policy: https://policies.google.com/privacy
Firebase Cloud Messaging (Google) — Push Notifications
- Purpose: Delivers opt-in push notifications to your browser or device
- Data Shared: Push subscription token, notification content (no personal identifiers)
- Location: United States
- Privacy Policy: https://firebase.google.com/support/privacy
Stripe (Payments) — If Enabled
- Purpose: Payment processing for credits (if you purchase premium features)
- Data Shared: Payment details (only if you make a purchase; we do not store these)
- Location: United States
- Privacy Policy: https://stripe.com/privacy
6. Anonymity in OneMind
OneMind is designed for anonymous participation:
- Propositions are anonymous — Other participants cannot see who submitted which proposition
- Ratings are private — Only aggregate results are shown
- AI propositions are unlabeled — AI-generated propositions appear identical to human ones
- No account required — You can participate without providing any personal information
Important: While propositions are anonymous to other users, they are linked to your device ID in our database for rate limiting and abuse prevention purposes.
7. Data Retention
| Data Type | Retention Period |
|---|---|
| Chat content (propositions, ratings) | Until chat expires or is deleted |
| Anonymous/inactive chats | 7 days after last activity |
| Analytics data | Up to 14 months (Google Analytics / PostHog) |
| Error logs | 90 days |
| Payment records | As required by law (typically 7 years) |
8. International Data Transfers
Your information may be transferred to and processed in the United States, where our service providers are located. The United States may not have the same data protection laws as your country.
For users in the European Economic Area (EEA), United Kingdom, or Switzerland: We rely on Standard Contractual Clauses approved by the European Commission for transfers to third-party service providers.
9. Your Rights and Choices
Regardless of where you live, you have the following rights:
| Right | How to Exercise |
|---|---|
| Access | Request a copy of your data |
| Deletion | Delete your data from our servers |
| Portability | Receive your data in a portable format |
| Opt-out of Analytics | Disable tracking |
Additional Rights for EEA/UK/Swiss Users:
- Right to rectification
- Right to restrict processing
- Right to object to processing
- Right to lodge a complaint with a supervisory authority
Additional Rights for California Residents (CCPA/CPRA):
- Right to know what personal information is collected
- Right to delete personal information
- Right to opt-out of sale (we do not sell your data)
- Right to non-discrimination
To exercise any of these rights, contact us at: joel@onemind.life
10. Cookies and Tracking Technologies
OneMind uses minimal cookies:
| Cookie/Technology | Purpose | Duration |
|---|---|---|
| Anonymous auth token | Maintain your anonymous session | localStorage (persistent) |
| Device ID | Identify your device (localStorage) | Persistent |
| Google Analytics (GA4) | Usage tracking | Per Google policy |
| PostHog | Usage tracking & session replay | Per PostHog policy |
| Push subscription (only if you enable notifications) | Deliver opt-in re-engagement notifications | Until you disable notifications |
We do not use advertising cookies or cross-site tracking.
11. Children's Privacy
OneMind is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us immediately.
12. Security
We implement reasonable security measures to protect your information:
- Encryption in transit (HTTPS/TLS)
- Encryption at rest (Supabase)
- Access controls and authentication
- Regular security reviews
However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by:
- Posting the new policy on this page
- Updating the "Last Updated" date
- Notifying you through the app (for material changes)
Your continued use of OneMind after changes constitutes acceptance of the updated policy.
14. Contact Us
Questions, concerns, or requests regarding this Privacy Policy?
Email: joel@onemind.life
Data Protection Inquiries:
Joel Castro
OneMind
Email: joel@onemind.life
This Privacy Policy is effective as of June 25, 2026, and was last updated July 15, 2026.