Privacy Policy

Last updated: 13 October 2026

This Privacy Policy explains how VERIA ("we", "us" and "our") handles information when you use Mind Mappr on Android, the web or Windows, visit the VERIA website, or contact us. Features and data handling can differ by platform and version. Our privacy contact is support@veria.in.

Information you provide

When you create or use an account, we process account identifiers, your email address, authentication information, and profile details such as a username or profile image that you choose to provide. Sign-in and password recovery are handled through Firebase Authentication. If you use Google sign-in, we receive the account information made available through that sign-in process, not your Google password.

Mind Mappr processes the content you enter or save, including tasks, descriptions, schedules, subtasks, notes, folders, formatting, mind maps and their connections. It also processes related settings and activity records, such as completion status, reminder settings, focus sessions, points and rewards. Files or images you choose to attach or upload are processed for the feature you use.

If you contact support, submit feedback or use a linked reporting form, we receive the information you send, including your contact details and any attachments. Please provide only what is needed for your request.

Guest use, local storage and account syncing

Guest content is primarily stored on your device or in your browser's local storage. Local drafts, cached content, preferences and pending changes may also be stored on the device to support editing and recovery. Clearing app data, clearing browser storage, uninstalling the app or losing access to the device can remove local-only work.

Signing in enables supported content to be stored and synced through our backend. If you choose to move from guest use to an account, supported guest records may be transferred to that account through the migration flow. Syncing requires a connection and does not mean that every local change has already reached the server.

Guest mode does not mean that no information leaves your device. Network requests, analytics, advertising and AI features can still involve service providers. Guest AI requests may use a separate anonymous authentication identifier for access control and usage limits.

Usage, diagnostic and technical information

We use Google Analytics for Firebase and PostHog to understand product use and identify problems. Information may include an account or installation identifier, app and device version, device model, country or region information, the screen being viewed, feature selections, save and error outcomes, notification interactions, ad interactions, and focus activity. Counts, timing, presence flags and predefined outcome codes help us understand whether features work.

The current Android PostHog integration is designed to exclude task titles and descriptions, note bodies, selected text, search queries, AI prompts and responses, passwords, authentication tokens and private URLs from its event payloads. PostHog session replay is disabled in that integration. These limits describe that analytics integration; they do not prevent content from being sent when you deliberately sync it, ask an AI tool to process it or include it in a support request.

Hosting, authentication, security and other providers may process IP addresses, browser or device information, request timestamps and technical logs needed to deliver, secure and troubleshoot their services.

How we use information

We use information to provide and maintain Mind Mappr; authenticate accounts; save, sync and recover content; operate reminders and focus tools; process points, rewards and usage allowances; respond to support requests; measure reliability and product use; deliver advertising where supported; and detect misuse or protect the service. We also use it where necessary to meet legal obligations or resolve disputes.

We do not provide advertisers with routine access to private task or note content through the advertising integration. User content is not public merely because it is stored in an account.

Gemini and AI features

AI features are optional. When you request AI-assisted writing, formatting, correction or mind map generation, the prompt and relevant content supplied to that feature are sent through our backend to Google Gemini. This can include note text, existing map context or document text you choose to provide. Generated results may be saved if you apply or keep them.

Google's processing depends on the service and billing configuration. Its Gemini API terms explain that unpaid-service inputs and outputs may be used for product improvement and reviewed by humans; paid-service inputs and outputs are not used for that improvement, but may be retained for abuse prevention and legal purposes. We do not make an unconditional promise that AI submissions are never retained, reviewed or used by a provider. Avoid submitting sensitive or confidential information unless you are comfortable with the applicable processing terms.

Advertising and rewarded ads

Supported editions use Google AdMob for advertising. Google's Mobile Ads SDK may collect and share IP addresses, device or advertising identifiers, product interactions and diagnostic information for advertising, measurement and fraud prevention. An IP address may be used to estimate general location. Processing and personalization depend on the provider, device settings, available consent controls and applicable law.

If you choose a rewarded ad, the ad provider reports whether the required viewing conditions were met so that the app can grant the relevant allowance or reward. Declining a rewarded ad does not itself submit your notes or tasks to an advertiser. You can manage available advertising controls in your device or Google account settings.

Permissions, notifications and device access

Notification and alarm permissions support task reminders and supported service notifications. Focus mode can use a foreground service while a timer is running. Notifications can display task information you enter, so consider your device's lock-screen and notification privacy settings.

Photo, file or camera access is used only where the particular feature offers that action and you choose to use it. You can change available permissions in system settings. Refusing a permission can limit the related feature without changing your rights under this policy. We do not need your precise location to provide the core task, note, mind map or focus features.

Who receives information

We use service providers to operate the service. These include Google Firebase for authentication, backend storage, cloud functions, messaging and app verification; Google Analytics for Firebase and PostHog for analytics; Google AdMob for advertising; and Google Gemini for requested AI processing. Website hosting and support or reporting services process information needed for those functions. Providers may process data on infrastructure outside your place of residence.

We may also disclose information when required by law, to respond to a lawful request, to protect users or the service, or as part of a lawful transfer of the relevant service or assets. Any such transfer remains subject to applicable data-protection requirements. External websites and services linked from our pages have their own privacy practices.

Storage, retention and deletion

Account content is retained while needed to provide your account and the features you use, unless you delete it or request deletion. Local drafts and caches remain until removed by the app, browser, device settings or the relevant cleanup process. Content placed in Trash may remain recoverable until the applicable removal process completes.

You can use the available account-deletion flow or follow the instructions on our account deletion page. You may also contact support@veria.in. We may need to verify that you control the account before acting. The account-deletion process removes the account and associated supported backend records and uploaded files. It does not automatically erase copies you exported, shared with others or saved outside the service.

Limited technical, security, deletion-confirmation, support or legally required records may remain for the purpose that requires them. Backups and provider-held records may be removed through their respective retention processes rather than immediately. We do not state a single fixed retention period for every category of data.

Security and locked notes

We use access controls, protected network connections, app verification and backend authorization measures to protect information. Authorized personnel and providers may access information as needed for service operation, security, support or legal obligations. No system can guarantee absolute security.

Note locking controls access within the app. It should not be understood as a promise of end-to-end encryption or as preventing all authorized backend processing. Protect your account credentials and device, and keep separate copies of information you cannot afford to lose.

Your choices and privacy rights

You can manage supported content and profile settings, use available export and deletion tools, change device permissions, and remove local browser or app data. Some choices can affect functionality or remove local-only work.

Depending on the law that applies to you, you may have rights to access, correct, delete or receive a copy of personal information; restrict or object to processing; withdraw consent where processing relies on consent; or complain to the relevant data-protection authority. Send requests to support@veria.in. We will assess and respond under applicable requirements, including any lawful exceptions. Withdrawing consent does not undo processing that was lawful before withdrawal.

Children and eligibility

App-store content ratings describe the suitability of content; they do not replace legal requirements for account use, consent or third-party services. Where applicable law requires parental authorization for a child's data, that requirement must be met. AI features are subject to the AI provider's eligibility rules. If you believe a child has provided personal information without the required authorization, contact us so that we can investigate and take appropriate action.

Changes and contact

We may update this policy when our services or data handling change. The date above identifies the current version. Where a change requires notice or consent under applicable law, we will take the required steps. This policy is a description of our practices, not a blanket request for consent.

For privacy questions, requests or concerns, contact support@veria.in.

Provider information: Firebase privacy and security, Google Privacy Policy, PostHog Privacy Policy, and Google Mobile Ads data disclosures.