Privacy Policy

Last updated: February 10, 2026

Our Principle

Mind Protocol is built on a simple belief: your data belongs to you. We collect the minimum necessary to provide our services, we never sell your data, and we give you full control over what you share.

What We Collect

  • Account information: Name, email address, and messaging platform identifiers (e.g. Telegram chat ID) when you register.
  • Biometric data (optional): If you choose to connect a Garmin device, we access heart rate, stress, HRV, sleep, and body battery data through the Garmin Connect API. This data is stored locally on our infrastructure and never shared with third parties.
  • Wallet addresses (optional): If you provide a Solana wallet address for $MIND token interactions.
  • Messages: Messages you send to our bot are processed to generate responses. Conversation history is stored to maintain continuity.
  • Connected services (optional): If you link Gmail, Spotify, or other services, we access only the scopes you explicitly authorize. Credentials are never stored — only OAuth tokens.

How We Use Your Data

  • To provide personalized AI-assisted wellness insights based on your biometrics
  • To maintain conversation continuity across sessions
  • To send you notifications and responses via your preferred messaging platform
  • To improve our services (aggregated, anonymized data only)

We do not use your data for advertising, profiling, or sale to third parties.

Data Storage & Security

Your data is stored on our private infrastructure. Biometric data, conversation logs, and OAuth tokens are encrypted at rest. We do not use third-party analytics or tracking services on this platform.

Third-Party Services

We integrate with the following services at your request:

  • Garmin Connect: Biometric data access (heart rate, stress, sleep, HRV)
  • Google (Gmail): Email reading (gmail.readonly scope only)
  • Spotify: Listening activity (read-only scopes)
  • Telegram: Message delivery and bot interaction
  • WhatsApp (Meta): Message delivery via Cloud API

Each integration requires your explicit consent and can be revoked at any time.

Your Rights

You have the right to:

  • Access all data we hold about you
  • Delete your account and all associated data
  • Disconnect any linked service at any time
  • Export your data in a portable format
  • Opt out of any optional data collection

Data Deletion

You can request deletion of all your data at any time. See our Data Deletion page for instructions. We process deletion requests within 30 days.

Children

Mind Protocol is not intended for users under 16 years of age. We do not knowingly collect data from children.

Changes

We may update this policy as our services evolve. Significant changes will be communicated through our messaging channels. Continued use of Mind Protocol after changes constitutes acceptance.

Contact

For privacy-related questions or data requests, contact us via Telegram at @manemus_mind_protocol_bot or email privacy@mindprotocol.ai.