Last updated: 15 April 2026
This Privacy Policy explains how MindFuddle (“we”, “us”, “our”) collects, uses, stores, and shares personal data when you use our website and platform.
If you have any questions about this Privacy Policy or how we handle your data, you can contact us at:
Email: koley.ops@gmail.com
This Privacy Policy applies to personal data we collect when you:
Depending on how you use the service, we may collect the following types of personal data.
If you purchase a paid plan, payments are processed by Stripe or another payment provider. We do not store full card details ourselves.
We may receive limited billing information such as:
We collect personal data:
We use personal data to:
Where the UK GDPR (United Kingdom General Data Protection Regulation) applies, we rely on one or more of the following lawful bases:
We process your personal data where necessary to provide the service you signed up for, such as creating your account, letting you log in, saving your practice sessions, and providing paid features.
We may process your data where it is reasonably necessary for our legitimate interests, including securing the platform, preventing fraud or abuse, diagnosing issues, improving reliability, and defending legal claims, provided those interests are not overridden by your rights and freedoms.
We may process your data where necessary to comply with legal obligations, including tax, accounting, and law enforcement requirements.
If we rely on consent for any specific activity, such as non-essential cookies or similar technologies, we will ask for it where required.
The service uses artificial intelligence tools to generate chat responses, feedback, scoring, summaries, or related outputs based on the content you submit during practice sessions.
This means your submitted messages and related content may be processed by third-party artificial intelligence service providers acting on our behalf in order to deliver the service.
AI-generated output may be imperfect, subjective, or inaccurate and should be reviewed critically.
We use strictly necessary cookies or similar technologies for authentication, security, session management, and essential payment or billing flows.
We do not currently rely on non-essential advertising or marketing cookies.
For more detail, please see our Cookie Policy.
We do not sell your personal data.
We may share personal data with trusted service providers who help us operate the service, such as providers for:
These providers may include services such as Supabase, Vercel, Stripe, and third-party artificial intelligence providers used to run the platform.
We may also share data where required by law, to enforce our terms, to protect our rights or users, or in connection with a business sale, merger, or reorganisation.
Some of our service providers may process personal data outside the United Kingdom.
Where personal data is transferred internationally, we take steps intended to ensure appropriate safeguards are in place where required by applicable law.
We keep personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the service, comply with legal obligations, resolve disputes, enforce agreements, and maintain appropriate business and security records.
Retention periods may vary depending on the type of data and why we need it. For example, we may keep account data while your account remains active, keep billing records for longer where required for legal, tax, or accounting purposes, and retain technical or security logs for a shorter period unless we need them for investigating abuse, fraud, or incidents.
Depending on where you are located, you may have rights in relation to your personal data, including the right to:
If you are in the United Kingdom, you can complain to the Information Commissioner’s Office if you believe your data has been handled unlawfully.
We use reasonable technical and organisational measures intended to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
The service is not intended for children under 18, and we do not knowingly collect personal data from children below that age.
If you believe a child has provided us with personal data, contact us and we will investigate.
We may update this Privacy Policy from time to time. When we do, we will post the updated version on this page and update the “Last updated” date above.
If you have questions, requests, or concerns about this Privacy Policy or your personal data, contact us at:
Email: koley.ops@gmail.com