Mindheart Privacy Policy

PRIVACY POLICY — Mindheart

Effective Date: 30 September 2026

Welcome to Mindheart. Your privacy and safety are our top priorities. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use the Mindheart mobile application ("App") and related services.

By creating an account or using Mindheart, you agree to this Privacy Policy. If you do not agree, please do not use our App.

Information We Collect

To help you find genuine connections, we need to collect certain information about you.

A. Information You Provide to Us:

Account Data: Email address, password (stored as a hash, not in plain text), and username.

Profile Data: Date of birth (used to verify you are 18+ and calculate your zodiac sign), gender, sexual orientation, location (city and country only), photos, and biography.

Lifestyle & Preferences: Information you choose to share, such as religion, education, profession, relationship goals, smoking/drinking habits, fitness levels, and answers to profile prompts.

Chats & Communications: Messages you send to your matches. We process these securely to deliver them. We may review chat logs if a user is reported or for safety enforcement. If you use our premium translation features, your message text may be sent to third-party translation services (currently LibreTranslate and MyMemory) solely to return a translation.

B. Information Collected Automatically:

Device Information: Device ID, operating system, and app version. We use Device IDs to enforce permanent bans for users who violate our Community Guidelines, Terms of Service, or safety rules (including attempts to evade bans, attempts to register while under 18, or attempts to circumvent in-app screenshot and screen-recording protections).

Usage Data: How you interact with the App (e.g., swipes and matches).

Security and integrity signals: Technical information needed to operate login, sessions, rate limits, and abuse prevention. We do not run a separate “screenshot log” of every blocked capture attempt; if we later detect circumvention of screen-capture protections through reports, device signals, or investigation, we may retain related account and device records for enforcement.

C. Location:

When you choose to use device location, the App reads your coordinates, rounds them to about one decimal place, and sends that approximate location to our servers only to resolve a city and country (currently via OpenStreetMap Nominatim). We do not store precise GPS coordinates in our database. We store the resulting city and country on your profile. The App may keep the latest coordinates on your device so discovery can keep working. You can update location from the App.

D. Verification Data (Live Selfie):

To prevent fake profiles (catfishing) and bots, we require you to take a mandatory real-time selfie. This selfie is securely stored in a private vault and is never displayed on your public profile or shared with other users. Uploading this photo serves as your verification to access the platform. Our administrative team may access these photos solely for security audits, investigating user reports, or enforcing platform safety. We do not use automated facial recognition (AI) to process or match these verification images. Public profile photos are scanned by automated moderation tools (currently Google Cloud Vision) strictly for safety and policy compliance, not for face matching.

When a manual review decision is recorded for a promotional review or a male identity review, whether the account is approved or denied, we permanently delete that verification selfie from our database and from cloud storage. We do not keep the image for later audits. Until that decision, the selfie is available only to administrators for that review. If you delete your account before a decision is made, the selfie is deleted with the rest of your account data.

E. Photos and content you see in the App:

Other users’ profile photos, prompts, and messages are shown to you only inside the App for matching and conversation. That display is not a license to copy, screenshot, record, download, or republish their content outside Mindheart.

How We Use Your Information

We use your data to:

Create and manage your account.

Confirm that you are at least 18 years old.

Operate our discovery and matching features to show you relevant profiles.

Enable messaging between matched users.

Ensure the safety and security of our community (e.g., detecting bots, fraud, and harassment).

Enforce our Terms of Service and Community Guidelines (including permanent device bans and rules against capturing or redistributing other users’ content).

Apply technical protections against in-app screenshots, screen recording, screen mirroring, and recent-apps previews on Android (currently including FLAG_SECURE or equivalent window flags) so that other users’ photos, chats, and profile information are harder to copy off-device.

Process premium subscriptions and in-app purchases.

We do not use your verification selfie, private messages, or other users’ photos to train public generative-AI models.

In-App Screenshots, Screen Recording, and Visual Capture

Mindheart is currently offered as an Android application.

Why this matters: Profile photos, live selfies we store privately, and chat content are personal data. Unauthorized screenshots, recordings, or redistribution can expose users to harassment, impersonation, or non-consensual sharing of images.

What we do technically: While the App is in the foreground, we intend to block or blank the device’s built-in screenshot, screen-recording, casting/mirroring, and recents-preview functions. These measures reduce risk; they cannot guarantee that every emulator, computer-level capture, or modified device will fail.

What you must not do: You must not capture, record, scrape, or export another user’s image, likeness, messages, or profile data from the App, or bypass our screen-capture protections. Doing so can be a Terms of Service violation and may lead to account and Device ID bans. Limited exceptions (for example, sending evidence of abuse privately to support@aurameetapp.com, or captures we make ourselves for moderation or legal compliance) are described in the Terms of Service.

We do not sell screenshots of you. Other users are contractually prohibited from screenshotting you; if someone still captures your content outside our controls, report it to us. We cannot retrieve copies held on another person’s device.

How We Share Your Information

We do not sell your personal data to third parties. We only share your information in the following situations:

With Other Users: Your profile information (photos, bio, prompts, lifestyle tags) is visible to other users on the App, inside the App. Visibility in-app is not permission for them to screenshot, record, or post your photos elsewhere.

With Service Providers: We share necessary data with trusted third parties who help us operate the App. This includes secure cloud hosting and object storage providers, geocoding services for city-level location (currently OpenStreetMap Nominatim), translation services for chat features (currently LibreTranslate and MyMemory), automated image moderation APIs (currently Google Cloud Vision) to detect explicit or unsafe content in public profile photos, and payment processors (currently Google Play Billing and RevenueCat).

For Legal Reasons: We may disclose your information if required by law, court order, or to assist in law enforcement investigations (including cases involving non-consensual intimate imagery or harassment that used captured in-app content).

Zero Tolerance Policy & Device Bans

Mindheart is a premium platform built on respect. If you are found violating our Community Guidelines or Terms of Service (e.g., harassment, hate speech, explicit content, scamming, fake profiles, registering or attempting to register while under 18, or circumventing screenshot/screen-recording protections), your account and Device ID will be permanently banned. In the event of a ban, we retain your Device ID and email address securely to prevent you from creating a new account.

No Refunds: If your account is banned due to a violation of our rules, any active premium subscriptions or in-app purchases will not be refunded by Mindheart, to the maximum extent permitted by law. Google Play may apply its own refund rules.

Data Retention and Deletion

We keep your personal information only as long as you have an active account, unless a longer period is needed for the purposes below.

Account Deletion: You can delete your account at any time through the App's Settings menu. Upon deletion, your profile will immediately disappear from the App, and your data (including photos and any verification selfie still waiting for review) will be permanently deleted from our active servers and cloud storage within 30 days, except for data we must retain for legal or security reasons (e.g., banned Device IDs and records needed to prevent ban evasion). A verification selfie is not kept after a promotional or male identity review decision; that image is deleted when the decision is recorded.

Enforcement records: If we ban an account or device for safety or Terms violations, including an under-18 registration attempt, we may keep the Device ID, email address where we have one, and limited incident notes longer than 30 days so the ban remains effective. We do not keep a public profile for that purpose.

Children's Privacy

Mindheart is strictly restricted to individuals who are 18 years of age or older. We do not knowingly allow anyone under 18 to create or keep an account.

If a date of birth shows that a person is under 18, we block registration or terminate the account immediately. We permanently ban the Device ID so the same device cannot sign up again, and we retain that Device ID for enforcement. We do not keep an under-18 public profile. Profile content that is not needed for the device ban is deleted.

International Data Transfers

Mindheart operates globally. Your information may be transferred to, and processed in, countries other than your own (including the United States and the European Union), depending on where our hosting, storage, geocoding, translation, moderation, and payment providers are located. By using the App, you consent to this transfer. We ensure appropriate safeguards are in place to protect your data in accordance with UK GDPR, EU GDPR, and other applicable laws.

Your Privacy Rights

Depending on your location (e.g., UK GDPR in the United Kingdom, GDPR in Europe, CCPA in California), you have the right to:

Access the personal data we hold about you.

Request correction of inaccurate data.

Request deletion of your data (subject to limited security retention, such as banned Device IDs).

Withdraw consent for specific data processing.

To exercise these rights, please contact us at the email address below.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make significant changes, we will notify you within the App or via email.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us at:

Email: support@mindheart.dating

Operator: Enes Sefa OLGUNÖZ (Mindheart)