MindGate Privacy Policy

Last updated: 9 November 2026

MindGate is an app lock for iPhone. This policy explains what stays on your device, what is sent off it, who receives it and how to stop it.

Who we are. MindGate is operated by Diu Vladimir. You can reach us in the app under Settings > Contact support, or at mindanddiu@gmail.com.

What stays on your device

These are stored on your iPhone and are not sent to us:

• Vault photos and videos. They are encrypted on your device with a key kept in the iOS Keychain on that device. The vault folder is excluded from device backups.
• Your passcode and Face ID setting. The passcode is kept in the iOS Keychain on that device. Face ID is handled by iOS; MindGate never receives your face data.
• The apps you choose to lock. Apple's Screen Time framework gives MindGate opaque tokens instead of app names. We cannot see which apps you picked. Only the number of selected apps can be included in analytics.
• Your settings and the failed unlock attempt log.

What is sent off your device

Analytics (Amplitude and Firebase Analytics, by Google)

If "Share usage data" is on, which is the default, the app sends usage events to help us understand how MindGate is used and improve it. These include:

• screens viewed, sessions, app open and close, and actions such as locking apps or using the vault (for example, how many items were imported), without the content of those items;
• your answers in onboarding, including what you said you want to lock (for example private chats, photos and videos, banking and payments, social media, or apps your kids shouldn't open);
• the star rating you give (the text of a feedback or support message is not part of analytics; see below);
• device and app details such as a device or app-instance identifier, device model, iOS version, language and app version, plus your IP address, from which an approximate location (such as your country or city) can be derived.

MindGate does not use the advertising identifier (IDFA) and does not track you across other companies' apps or websites.

Crash reports (Firebase Crashlytics, by Google)

If the app crashes, a crash report is sent so we can fix the problem. It includes technical details about the crash, the device and the app, and an installation identifier. The "Share usage data" switch does not turn crash reports off.

Purchases (Apple and RevenueCat)

Subscriptions are processed by Apple. RevenueCat receives your purchase and subscription status together with a random app user ID, so the app can tell whether you have access. We do not receive your card details.

Feedback and support messages (Telegram)

When you send feedback or a support request from the app, the following is delivered through a Telegram bot to the developer's support chat: your message, the star rating if there is one, any contact details you chose to enter (email or Telegram handle), your app version, language, iOS version and your RevenueCat app user ID. Nothing is sent unless you tap send. This is separate from the "Share usage data" switch: if that switch is on, the message text is also recorded as an analytics event.

How to turn analytics off

Open Settings > Support & Feedback in MindGate and turn off Share usage data. Amplitude and Firebase Analytics stop receiving events from your device right away. You can withdraw your consent this way at any time, and doing so does not affect the rest of the app. Crash reports, purchases and any message you choose to send continue as described above.

How long we keep data, and how to delete it

• On your device. Vault items can be deleted in the app. Deleting MindGate removes its files, including the vault. iOS may keep the Keychain entries on that device; they are never sent to us.
• Analytics and crash data. Kept only as long as we need them to understand how the app is used and to fix problems, then deleted or aggregated.
• Feedback and support messages. Kept in the support chat only as long as we need them to answer you and improve the app. Ask us and we will delete them.
• Purchase records. Kept by Apple and RevenueCat as needed for your subscription and for legal and accounting purposes.

To ask us to access or delete data, or to withdraw consent to data already collected, write to us using the contact above. Because the app has no accounts, include details that help us find your data, such as the contact you used in a message. If we cannot match the data to you, we will tell you.

Third parties

We share data only with the services named in this policy: Amplitude, Google (Firebase Analytics and Crashlytics), RevenueCat, Apple and Telegram. We use them to run the app and do not sell your data. Each third party with which we share user data provides the same or equal protection of user data as stated in this policy and required by Apple's App Store Review Guidelines.

Children

MindGate is not directed at children under 13, and we do not knowingly collect their personal data. Some parents use MindGate to lock apps on a device a child can reach. If you believe a child has sent us personal data, contact us and we will delete it.

Changes

If this policy changes, we will update this page and the date at the top.

Contact

In the app: Settings > Contact support. Email: mindanddiu@gmail.com.