Privacy Policy

At MindVault, we believe your brainwaves and biometric signals are the most private and intimate data you generate. Unlike traditional cloud-based health platforms, MindVault is engineered with a Local-First Architecture.

All raw electroencephalography (EEG 256 Hz), optical photoplethysmography and functional near-infrared spectroscopy (PPG/fNIRS 64 Hz), and inertial measurement data (IMU 52 Hz) received from your Muse S Athena or compatible BCI device are streamed, processed, and stored exclusively on your local machine by default. Your raw brainwave streams and real-time hemodynamic metrics are never transmitted to our cloud servers without your explicit, voluntary action.

We collect minimal, necessary information to provide our services and desktop application:

• * Account & Early Access Information: When you join our waitlist, request early access, or create an account, we collect your email address, operating system (Windows, macOS, Linux), intended role (researcher, developer, or educator), and any voluntary survey responses.
• * Support & Communications: If you submit an inquiry through our Contact Form or email us, we collect your name, email address, topic, and message content to provide customer service.
• * Product Analytics & Crash Reports: We may collect anonymized telemetry regarding desktop app launch times, hardware connection success rates, and fatal crash traces via privacy-respecting analytics tools (such as self-hosted PostHog). These diagnostic logs never contain raw EEG time-series, biometric recordings, or session audio.
• * Billing Information: If you purchase a license or subscription, transaction details are processed securely by our third-party payment processors (e.g., Stripe). MindVault does not store your full credit card numbers on our servers.

We use collected information solely for the following purposes:

• Delivering the Service: To verify your early access license, send operating-system-specific installation binaries, and notify you of software updates.
• Customer Support: To respond to technical inquiries, troubleshoot BLE connection errors, and assist with lab integrations.
• Product Improvement: To diagnose hardware compatibility issues and optimize DSP filter performance across various computer architectures.
• Legal Compliance: To prevent fraudulent access and comply with applicable tax and commercial regulations.

We do not sell, rent, or monetize your personal data. We partner only with reputable infrastructure providers who maintain strict data protection standards:

• * Resend: Transactional email delivery and waitlist notifications.
• * Supabase: Secure cloud database for waitlist management and account authentication.
• * PostHog: Anonymized product analytics and diagnostic event logging.
• * Stripe: Secure PCI-DSS Level 1 compliant payment processing.

Regardless of your geographic location, we extend comprehensive privacy rights to all users:

• * Right to Access: You may request a complete export of any personal data associated with your account.
• * Right to Rectification: You may update or correct your account details at any time.
• * Right to Erasure (Right to Be Forgotten): You can request the permanent deletion of your email address, waitlist records, and support tickets by contacting privacy@mail.usemindvault.com.
• * Local Data Control: Because session recordings (CSV, EDF, Parquet files) reside in your local filesystem, you retain total ownership and can delete, move, or archive your files without contacting us.

MindVault is designed strictly as a scientific research, biofeedback, and contemplative state exploration tool. MindVault is not a medical device, has not been evaluated or cleared by the U.S. Food and Drug Administration (FDA) or European Medicines Agency (EMA), and is not intended to diagnose, treat, mitigate, cure, or prevent any medical, neurological, or psychiatric illness.

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

• * Email: privacy@mail.usemindvault.com
• * General Support: hello@mail.usemindvault.com
• * Response SLA: Within 30 calendar days for formal GDPR/CCPA requests.