Privacy Policy

Effective date: 25 August 2026 | Last updated: 25 August 2026

This Privacy Policy explains what data the Mindora mobile application ("Mindora", "the App", "we", "us") collects, why we collect it, and the choices you have. Mindora is a sleep-tracking and sleep-improvement app. It reads health data you have already recorded on your device and turns it into sleep scores and personalised insights.

The short version. We collect health data only to show you your own sleep analysis. We do not use health data for advertising, marketing, or data mining. We do not sell it. We do not share it with any third party. Mindora contains no analytics SDK and no advertising SDK. You can revoke access or delete your account and all associated data at any time.

1. Health and fitness data

With your explicit permission, Mindora reads the following from Apple Health (HealthKit) on iOS and Health Connect on Android:

Data type	Why we read it
Heart rate	Overnight heart-rate trend shown on the sleep detail screen
Resting heart rate	Baseline for recovery and sleep-quality scoring
Heart rate variability (HRV)	Recovery and stress indicator in your sleep score
Respiratory rate	Breathing-stability component of the sleep score
Body temperature	Sleep-environment and recovery analysis
Wrist temperature during sleep (iOS 16+)	Same as above, when your device records it
Sleep analysis / sleep sessions	Time asleep, sleep stages, time to fall asleep, sleep timeline

We do not read blood oxygen (SpO₂), blood pressure, blood glucose, menstrual or reproductive health, medications, clinical records, or any other health category not listed above.

Where this data goes

Health data read from HealthKit / Health Connect is transmitted over HTTPS to our own server at api.mindora316.com, where it is used to compute your sleep score and generate your personalised sleep analysis. It is associated with your account so that your history is available when you sign in on another device.

Our commitments regarding health data

Health data is used solely to provide the features of the App to you.
Health data is never used for advertising, marketing, or data mining.
Health data is never sold, rented, or transferred to data brokers, information resellers, insurers, or employers.
Health data is never shared with third parties without your explicit consent.
We do not use health data to build advertising profiles or to train models for unrelated purposes.
You can revoke Mindora's access at any time in iOS Settings → Health → Data Access & Devices → Mindora, or in the Health Connect settings on Android. Revoking access stops further reads immediately; to remove data already uploaded, delete your account (see §7).

This use is limited to providing and improving the features you see in the App, consistent with Apple's HealthKit requirements and Google's Health Connect Limited Use policy.

2. Account and profile data

Data	Purpose	Required?
Email address	Creating your account, signing in, security notices, account-deletion verification codes	Required
Nickname, avatar	Displaying your profile inside the App	Optional
Gender, date of birth	Age- and sex-adjusted reference ranges in sleep analysis	Optional
Height, weight	Normalising physiological metrics	Optional
Phone number	Contact and account-security verification	Optional
Shipping address (recipient name, phone, address)	Only if you order a physical Mindora device; used for fulfilment	Optional

Every optional field can be left blank, cleared, or edited at any time from Profile inside the App.

3. Device and connection data

Device identifier and model — to keep you signed in and to associate a Mindora hardware device with your account.
Bluetooth and local-network pairing information — used only on your own device and local network to discover and connect to your Mindora hardware. We do not use Bluetooth or local-network access to determine your location or to track you.
App version and language — to return correctly localised content and to diagnose compatibility problems.

We do not collect precise or background location. If you choose to use the address auto-fill feature, location is read once, in the foreground, at the moment you tap it, and is not stored by us.

4. Subscriptions and payments

Mindora offers auto-renewing subscriptions. Purchases are processed entirely by Apple's App Store or Google Play. We never see or store your card number, bank details, or billing address. We receive only the subscription status (which plan, whether it is active, and when it expires) needed to unlock features.

5. Third parties

Mindora integrates no third-party analytics SDK, no advertising SDK, no crash-reporting SDK, and no social-media SDK. Your data is not shared with advertisers, data brokers, or analytics providers.

The only external parties involved in operating the service are:

Apple and Google — for app distribution and for processing subscription payments, under their own privacy policies.
Our hosting provider, which supplies the servers on which your data is stored. The provider acts strictly as a processor on our instructions and does not use your data for its own purposes.

We may disclose data if we are legally required to do so by a valid legal process, or where necessary to protect the rights, safety, or property of our users or of ourselves.

6. Security and retention

All communication between the App and our servers uses HTTPS/TLS.
Credentials and session tokens are stored in the operating system's secure storage (iOS Keychain / Android EncryptedSharedPreferences), not in plain files.
Access to production data is restricted to personnel who need it to operate the service.

Retention. Account data, profile data, and uploaded health data are retained for as long as your account exists. When you delete your account, we delete or irreversibly anonymise this data within 30 days, except where a longer period is required by law (for example, transaction records needed for tax or accounting purposes).

7. Your rights and how to delete your data

You may access, correct, export, restrict, or delete your data, and withdraw consent at any time.

Deleting your account inside the App: Side menu → Settings → Delete Account. For your protection this is a two-step process: we send a verification code to your registered email or phone, and the account is deleted only after you enter that code. Deletion removes your account, profile, and all uploaded health data from our servers.

Deleting your account from the web: see Account & Data Deletion.

Health data that remains in Apple Health or Health Connect belongs to those systems and is not deleted by us — you can remove it there directly.

To exercise any other right, write to support@mindora316.com. We respond within 30 days.

8. If you are in the European Economic Area or the United Kingdom (GDPR)

Our legal bases for processing are:

Consent (Art. 6(1)(a) and, for health data as a special category, Art. 9(2)(a)) — for reading and analysing your health data. You may withdraw consent at any time by revoking the permission or deleting your account.
Performance of a contract (Art. 6(1)(b)) — for account creation, authentication, and subscription entitlement.
Legal obligation (Art. 6(1)(c)) — where retention is required by law.

You have the right to access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with your local supervisory authority. Data controller — Shanghai Genesis Technology Co.,Ltd — contact: support@mindora316.com.

Our servers are located outside the EEA. Where we transfer personal data internationally, we rely on your explicit consent and apply appropriate safeguards.

9. If you are a California resident (CCPA/CPRA)

You have the right to know what personal information we collect and why, to request deletion, to request correction, and to be free from discrimination for exercising these rights.

We do not sell or share your personal information, and we have not sold or shared it in the preceding twelve months. We do not use or disclose sensitive personal information (including health data) for purposes other than providing the App's features to you.

10. Children

Mindora is not directed at children. You must be at least 16 years old to create an account. We do not knowingly collect personal information from anyone under 16. If we learn that we have done so, we will delete it promptly. If you believe a child has provided us with data, contact support@mindora316.com.

11. Changes to this policy

If we make material changes we will update the effective date at the top of this page and, where the change is significant, notify you inside the App before it takes effect. Continuing to use Mindora after a change takes effect means you accept the updated policy.

12. Contact

Mindora is operated by Shanghai Genesis Technology Co.,Ltd ("we", "us"), which is the data controller responsible for the personal data described in this policy.

Shanghai Genesis Technology Co.,Ltd (上海创生纪科技有限公司)
Room 1501, Block A, China Overseas Center, Putuo District
Shanghai 200062, China
Email: support@mindora316.com