1. Scope and contact
This policy describes how Minderloom, operated by Brandon Strumlauf ("Minderloom," "we," or "us"), handles information in the Minderloom Android and Wear OS applications and on minderloom.com. It applies to version 0.16.1 and later versions unless a newer policy is displayed.
Minderloom does not currently provide a Minderloom account system or operate a server that stores your conversation library. Most app information is stored in the app's private storage on your phone or watch.
Questions, privacy requests, and deletion requests may be sent to [email protected]. Please do not email recordings, full transcripts, passwords, access tokens, or other sensitive content.
2. Plain language summary
- Recording starts only after you use a visible control. The app does not silently restart recording after a process restart.
- Audio, transcripts, summaries, conversation metadata, Daily Focus items, and memory indexes stay in private app storage by default.
- Minderloom does not automatically upload ambient audio.
- Optional Google Tasks and Drive features operate only after you connect Google and start the relevant action.
- Direct Google Drive transcript backups are encrypted before upload. Audio is not included.
- Minderloom has no advertising SDK, does not create an advertising profile, and does not sell personal information.
- You can delete local data in the app. External calendar items, Google Tasks, Drive backups, and user-selected backup files must be managed in those services or locations.
3. Information Minderloom handles and why
| Information | How it is used | Default location | Your control |
|---|---|---|---|
| Audio recordings | Transcription, speaker separation, and review after you start capture and choose local processing. | Private phone or watch storage; transferred between your paired devices through the Wear OS Data Layer. | Delete recordings, choose a retention period, or enable deletion after successful processing. |
| Transcripts, summaries, actions, and conversation metadata | Conversation review, reminders, Daily Focus, search, pinned memory, and Conversation Lens. | Private phone storage. | Edit a transcript, delete a conversation, or delete all local data. |
| Anonymous speaker timing and optional voice profiles | Distinguish speakers during import and, only with separate enrollment, match a locally named speaker. | Private phone storage. Enrolled voice embeddings are encrypted with Android Keystore. | Use anonymous labels, apply conversation-only names, or delete individual or all profiles. |
| Daily Focus, reminders, and pinned memories | Show Now, Next, Later, and context-based reminder checkpoints. | Private phone storage. | Edit, complete, move, or delete each item. |
| Selected message notifications | Detect clear requests and optional tone cues from only the people you selected. | AES-GCM encrypted private phone storage for up to 90 days. | Remove a monitored person, disable monitoring, revoke notification access, or delete local data. |
| Diagnostic events | Identify crashes and app failures using timestamps, component and event codes, exception types, and code locations. | Private phone and watch storage for up to seven days. | Export or delete phone logs in Settings. Logs do not contain audio, transcripts, contact names, reminder text, tokens, or prompts. |
| Website request data | Deliver the public website and protect its availability. Cloudflare, our website hosting provider, may process IP addresses, browser and device information, and request logs. | Cloudflare systems. Visiting the website does not give the host access to recordings or transcripts stored in the app. | This website does not include advertising trackers or optional visitor analytics. Cloudflare's privacy policy covers its processing of website request data. |
Calendar
If you grant Android calendar permission, Minderloom can write a reviewed reminder to a calendar you select after you confirm the action. Minderloom does not operate a server that receives calendar content. Deleting Minderloom data does not delete calendar entries already written to your calendar.
Document-provider backups
If you select a folder through Android's system picker, Minderloom can save conversation text as readable Markdown or an encrypted .mloom file. Audio is not included. Encryption uses AES-256-GCM with a key retained in Android Keystore. Clearing app data or uninstalling the app may make encrypted backups unrecoverable in this release.
Biometric or device-credential lock
Minderloom can ask Android to verify a strong biometric or device credential before private screens open. Minderloom does not receive or store your biometric template, passcode, or unlock secret. The app keeps only a short in-memory unlocked state.
4. Google user data
Google integration is optional. If you choose to connect it, Minderloom requests only the Google Tasks scope needed to create tasks and the Google Drive appDataFolder scope used for app-private backup files. The app does not request general access to all files in your Drive.
- Access: Authorization occurs through Google's consent flow. OAuth access tokens are held in memory for the requested operation and are not written to app preferences.
- Use: A task title is sent to Google only after you choose Create in Google Tasks. A transcript package is encrypted on your phone before you start a Drive backup.
- Storage: Encrypted Drive backup files are stored in Google's private app-data area. Minderloom does not receive a readable server copy.
- Sharing: Minderloom does not sell Google user data, use it for advertising, or disclose it to data brokers.
- Revocation: You can revoke access from Minderloom's Google integration screen or from your Google Account's third-party connections page.
- Deletion: Revoke access to stop future operations. Delete Google Tasks in Google Tasks. Delete Drive app data through available Google account controls or contact support for guidance.
Minderloom's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
Google user data obtained through Tasks or Drive is not used to develop, improve, or train generalized or non-personalized artificial intelligence or machine-learning models.
5. Selected message monitoring
Message monitoring is off until you accept an in-app disclosure, choose contacts through Android's contact picker, and separately grant notification access. Minderloom filters supported Google Messages, Samsung Messages, and compatible AOSP Messages notification details before storing content. It does not request SMS history permission, does not import prior messages, and does not request broad contact access.
Only new notifications connected to the contacts you selected are retained. Matching text is encrypted locally for up to 90 days and is not sent to a cloud model. Clear direct requests may be summarized into Daily Focus when automatic text heartbeat is enabled. Uncertain tone cues stay review-only and are never turned into tasks automatically.
Monitoring stops when you disable the feature, revoke notification access, or remove the monitored contact. Messages whose notifications are fully disabled cannot be observed.
6. AI and model processing
On-device processing
Local transcription uses model files bundled with the app. Optional downloaded open models can support semantic search, speaker analysis, and text assistance. Gemini Nano may run through Android AICore while the app is visible. Content processed by these supported on-device paths stays on your phone, though AICore or model setup may require a one-time network download.
Optional model downloads use Android DownloadManager. The model host receives ordinary network information, such as an IP address and request metadata. Minderloom verifies the expected file size and SHA-256 digest before using a downloaded model.
Optional endpoints
If you configure a local-network endpoint or a private HTTPS gateway for Reminder Partner, only the text you submit through that feature is sent to the endpoint you configured. Ambient audio and stored conversations are not sent to that endpoint. The endpoint operator's policy applies to text you intentionally send.
Automated observations
Conversation Lens can highlight exact wording for reflection. It is not a lie detector and does not determine intent, truthfulness, mental state, relationship quality, or whether abuse occurred. Transcription errors, missing context, quotations, humor, and ordinary conflict can produce inaccurate or incomplete observations.
Google-managed diagnostics
Optional Google ML Kit or AICore components may produce Google-managed operational metrics or diagnostics under Google's terms. Minderloom does not place audio, transcripts, messages, contacts, reminder text, or model prompts in its own diagnostic log.
7. Retention and deletion
Audio is retained according to the period you select. If automatic deletion after processing is enabled, Minderloom deletes source audio only after the transcript, conversation record, and anonymous speaker separation are saved successfully. If speaker separation is unavailable or fails, the app retains audio so processing can be retried.
Transcripts, summaries, actions, Daily Focus items, pinned memories, conversation metadata, and local search indexes remain until you delete a conversation, use Delete local data, clear app storage, or uninstall the app. Selected message content is retained for up to 90 days. Diagnostic events are retained for up to seven days.
Delete local data removes recordings, transcripts, summaries, search indexes, speaker analysis, encrypted named-speaker profiles, selected-message memory, monitored contacts, suggested actions, Daily Focus items, pinned memories, and conversation metadata. It does not delete:
- separately downloaded models, which have their own controls;
- calendar entries already written to an external calendar;
- Google Tasks;
- backup files already written to Google Drive or a selected external folder; or
- data held by an optional endpoint you configured.
See the complete data deletion instructions.
8. Security and your choices
Minderloom uses Android app-private storage, Android Keystore for supported encryption keys, encrypted storage for selected messages and enrolled voice embeddings, HTTPS for non-local configured endpoints, checksum verification for downloaded models, and same-signature Wear OS Data Layer transfer.
No technical system is risk-free. Protect your device with a strong screen lock, keep Android and the app updated, use app lock for private screens, review external backup locations, and do not share exported diagnostics without inspecting them.
Your controls include:
- starting and stopping every capture;
- choosing audio retention and automatic deletion;
- correcting or deleting individual conversations;
- enabling or disabling message monitoring, biometrics, models, backups, and Google access;
- deleting speaker profiles, models, diagnostic logs, and all local data; and
- revoking Android permissions in system settings.
9. Children, privacy rights, and policy updates
Minderloom is intended for adults age 18 and older. It is not designed for children, and we do not knowingly operate an account service that collects children's information.
Because most information is stored only on your device, we generally cannot retrieve, access, correct, or delete it for you. The in-app controls are the primary way to exercise those choices. If information connected to a support request is held by us or a service provider we control, you may ask about access, correction, or deletion by emailing [email protected]. We may need enough information to verify and complete the request.
We may update this policy when the app's features, providers, or legal obligations change. Material changes will be reflected by a new effective date and, where appropriate, an in-app notice. Continued use after an update is subject to the revised policy.