last updated October 15, 2026
mindscrul collects only what it needs to work. We don't show ads, we don't sell your data, and we don't track you across other apps or websites.
Account: your email address, username and password. The password is stored hashed, never in plain text.
Profile: your avatar, and whether your account is public or private.
What you post: photos, videos, text, text overlays, the sound you choose, and the date a photo was taken, read from the photo itself. We don't collect your location, and location metadata is removed from photos before they're uploaded.
What you do with others: likes, gold hearts, mood reactions, comments, saved posts, shares, follows, arms (hand holds), direct messages and notifications.
Safety: reports you make and accounts you block.
Scrolling: your brains, the scroll session in progress, and the day your current run of mindful days began, so they follow your account if you switch phones.
Your notes, your mood checks, your "instead of scrolling" list, and your theme are stored only on your device.
Public account: anyone using mindscrul can see your posts. Private account: only your followers can. Your username and avatar are always visible so people can find you.
Direct messages are visible to the people in the conversation. They are stored on our servers but are not end-to-end encrypted.
People you block can't see your posts, and you won't see theirs.
Only to run mindscrul: showing posts and reactions, sending notifications, keeping accounts secure, and reviewing reports. We don't use your data for advertising or sell it to anyone.
To learn which parts of mindscrul actually help, we record a small set of in-app events: signing up, starting a scroll session, leaving one early or letting it run out, the intention you pick before scrolling, making a post, and filing a report. These are linked to your account id, never your email or username.
We don't record your screen, what you type, or the content of your posts and messages.
Our database, sign-in and file storage are hosted by Supabase, which processes this data on our behalf and only as we instruct.
Usage statistics are processed by PostHog, on servers in the United States, on the same terms.
If the app crashes, a crash report (what went wrong in the code, your phone model and iOS version, and your account id) is sent to Sentry, on servers in the United States, so we can fix it.
We keep your data while your account exists. Deleting your account in settings permanently removes your profile, posts, comments, reactions, follows and messages from our servers. Copies in backups are overwritten within 30 days.
Deleting the app removes the data stored on your phone.
mindscrul isn't for children under 13, and we don't knowingly collect their data. If you think a child under 13 has an account, contact us and we'll delete it.
You can see and change your profile, delete any post, and delete your account yourself in the app. To get a copy of your data, or for any other privacy request, contact us. Depending on where you live, you may have further rights under laws like the GDPR or CCPA, and we'll honor them.
If we change this policy in a way that matters, we'll tell you in the app first.
Contact: support@mindscrul.app