Privacy Policy

1. Introduction & Scope

Legal Operating Entity: This Privacy Policy ("Policy") governs the privacy practices of CrossTech Solutions ("Company", "we", "us", "our"), an Indian legal entity operating the brand Conscious Living and its flagship digital sanctuary Mind Space ("Mind Space", "App", or "Service").

Cross-Platform Scope: This Policy applies to all users accessing or interacting with Mind Space via Android (native runtime via Capacitor), iOS, Web applications and Progressive Web Apps (accessible at mindspace.consciousliving.app), or associated backend APIs and cloud services.

By downloading, installing, registering an account with, or utilizing the Service, you consent to the data collection, storage, and processing practices detailed herein. If you do not consent with any term in this Policy, you may use Mind Space exclusively in local offline Guest Mode or discontinue use of the Service.

2. Categories of Information We Collect

The categories of data collected depend upon whether you utilize Mind Space in offline Guest Mode or enable optional cloud synchronization. Mind Space is engineered as a local-first application where your sanctuary functions fully on your device without mandatory account creation.

a) Account Credentials & Profile (Optional)

When setting up an optional account or enabling cloud synchronization across devices, we collect:

• Identity & Credentials: Your email address, encrypted authentication tokens, and display name. If you register via Google Sign-In, we receive authentication tokens, your name, and email verified by Google OAuth.
• Profile Customization: Custom username handle (@handle), avatar profile image, custom profile bio, and optional contact phone number stored in your profile configuration.

b) Journal, Memory & Wellness Data

The core content you create within your personal sanctuary:

• Journal Entries & Reflections: Personal diary entries, long-form reflections, and daily thoughts you type or dictate.
• Developer Code Snippets: Code blocks, technical reflections, and programming language tags (e.g., JavaScript, Python, TypeScript, HTML, CSS) stored with syntax formatting.
• Memory Categories & Tags: Color-coded categorization tags including Personal, Creative, Work, Health, Family, Travel, Idea, and Gratitude.
• Mood Ratings & Check-ins: Daily emotional check-in ratings and emoji selections (e.g., Happy, Peaceful, Fantastic, Tired, Creative, Reflective).
• Journaling Streaks & Activity Grids: Unbroken journaling streak counters, milestone achievements, and 365-day year-to-date (YTD) activity visual grids.

c) Voice Recordings (Ephemeral Voice Dictation)

When you actively activate the Voice Dictation microphone feature, your spoken audio stream is temporarily captured for speech-to-text conversion. The audio stream is transmitted ephemerally via TLS 1.3 to Groq's high-speed inference engine (Whisper large-v3). Raw voice recordings are processed in runtime memory and are never stored on our servers or retained by third parties once transcription completes.

d) Ambient Weather & Geolocation Context

Mind Space's Wellness Insights dashboard provides localized atmospheric and weather context. With your explicit device permission, approximate latitude and longitude are retrieved on-device via Capacitor Geolocation solely to query the public Open-Meteo API directly from your device. We do not transmit, log, or store your GPS coordinates on our servers.

e) Technical & Device Telemetry

To maintain app stability and compatibility across mobile hardware:

• Device hardware model, manufacturer, and screen resolution.
• Operating system version (Android OS, iOS, or web browser user agent).
• Capacitor native runtime identifiers and unique installation UUIDs.
• Interface preferences: warm blush minimalist theme selection, font scale, and light/dark display state.
• Anonymized diagnostic crash reports and system error telemetry.

f) Application Permissions

Mind Space requests only the permissions strictly required to provide its features:

3. Purpose & Legal Basis for Data Processing

CrossTech Solutions processes personal data only for lawful, transparent, and defined operational objectives:

• Core Service Delivery: Organizing, indexing, tagging, searching, and displaying your private journal entries, developer code snippets, and memory records.
• Streak & Habit Continuity: Calculating unbroken journaling streaks, streak milestones, and rendering 365-day YTD visual consistency graphs.
• Voice Dictation Transcription: Converting spoken voice audio into editable textual notes using Groq's Whisper large-v3 speech recognition model.
• AI Reflection Synthesis: Synthesizing unstructured diary thoughts into empathetic AI summaries and compassionate reflection letters upon user request via Groq LLaMA models.
• Ambient Wellness Context: Fetching real-time local atmospheric conditions to enrich journaling insights via Open-Meteo.
• Cloud Synchronization & Security: Authenticating accounts via Firebase Auth, maintaining encrypted backups in Firestore, and enforcing strict per-user data isolation.
• Statutory & Legal Compliance: Adhering to obligations under the Digital Personal Data Protection (DPDP) Act 2023, the Information Technology Act 2000, and the Information Technology Rules 2021.

4. Artificial Intelligence (AI) Data Handling & Safeguards

Mind Space uses modern AI inference models to assist your journaling without compromising your privacy. We hold an unyielding standard regarding how AI models interact with your personal memories.

Ephemeral Groq API Processing

When you activate Voice Dictation or request an AI reflection/summary:

• Your payload (voice audio or memory text) is transmitted over TLS 1.3 encrypted channels directly to Groq's high-speed inference processing units (LPUs).
• Voice audio is converted to text using Whisper large-v3; reflection synthesis is performed using LLaMA 3.1.
• Under Groq's commercial API enterprise terms, payloads are processed ephemerally in volatile memory and purged immediately after the output token stream is returned to your device.

User Choice & 100% Offline Capability

AI features in Mind Space are entirely opt-in. If you prefer not to use AI, you can type entries manually without sending any data over the network. You can also operate Mind Space in completely offline Guest Mode at any time.

5. Cookies, Storage & Tracking Technologies

Mind Space rejects invasive commercial web tracking practices in favor of privacy-first local storage:

• Offline-First Device Storage: We use browser LocalStorage, IndexedDB, and Capacitor native sandbox storage to persist your local habit database, memory records (mind_memories_v1), mood maps (mind_mood_v1), and profile settings directly on your device.
• Authentication Session Tokens: Encrypted authentication tokens are managed securely via Firebase Authentication to keep you signed in without storing plain-text passwords.
• Zero Ad Trackers & Pixels: We do not embed third-party advertising pixels, commercial surveillance scripts, marketing cookies, or tracking SDKs. We do not participate in behavioral cross-site advertising networks.

6. Data Sharing & Third-Party Service Providers

No Data Monetization: We do not sell, rent, trade, lease, or monetize your personal data, journal thoughts, or memory archives to advertisers, data brokers, or commercial marketers under any circumstances.

Data is shared only with verified infrastructure partners strictly necessary to provide the features you choose to enable:

7. Data Retention & Account Lifecycle

We believe that you alone should control the lifespan of your thoughts and memories:

• Active Accounts: Your journal records, memories, code snippets, and mood logs remain stored and accessible for as long as your account remains active.
• Guest Mode Lifecycle: In Guest Mode, all data is confined strictly to your device's local application sandbox. If you uninstall the app or clear browser storage without exporting, your data is erased immediately.
• Instant Danger Zone Wiping: Mind Space provides a self-service Danger Zone in the app's Profile & Settings screen:
  • Clear All Data: Instantly wipes all locally stored memories, mood entries, and cache from your device.
  • Delete Account: Irrevocably purges your profile, authentication credentials, and all synchronized Firestore cloud database entries.
• Backup Expiration: When you initiate account or data deletion, active records are expunged immediately. Any residual encrypted system disaster-recovery backups are completely overwritten and purged within 30 days.

8. Security Architecture & Safeguards

CrossTech Solutions implements multi-layered organizational and technical defenses to safeguard your personal sanctuary:

• Encryption in Transit: All communications between Mind Space and backend services or AI inference engines are enforced via Transport Layer Security (TLS 1.3 / HTTPS).
• Encryption at Rest: Cloud data synchronized to Firebase Firestore is protected with industry-standard AES-256 bit hardware encryption at rest.
• Per-User Security Boundaries: Server-enforced Firebase Firestore Security Rules validate user authentication tokens on every query, guaranteeing that users can read, query, or modify only their own isolated data partition (/users/{uid}/*).
• Local OS Sandboxing: On native Android and iOS devices, local databases are shielded within the operating system's application sandbox, inaccessible to other apps.

9. Your Rights & Data Control

Under the Digital Personal Data Protection (DPDP) Act 2023 and international privacy benchmarks, you have explicit rights regarding your digital persona:

• Right to Access & Review: You can review all your saved memories, tags, code snippets, mood history, streaks, and profile details directly in the app at any time.
• Right to Data Portability (JSON Export): You are never locked in. You can download an unencrypted, complete archive of your memories and mood logs as a standard my-memories.json file anytime from Profile → Data and Privacy → Export My Memories.
• Right to Correction & Updation: You can edit, correct, re-tag, or update any journal entry, mood record, profile bio, avatar, or handle directly through the interface.
• Right to Erasure & Account Deletion: You have the right to permanently wipe all personal data via the in-app Danger Zone ("Delete Account") or by submitting a written request to our Grievance Redressal Officer.
• Right to Withdraw Consent: You can revoke cloud sync at any time in Profile settings to revert Mind Space to a 100% offline local sanctuary. You may also revoke device permissions (Microphone, Camera, Location, Notifications) at any time via your device settings.
• Right of Grievance Redressal: You have the right to accessible grievance redressal provided by CrossTech Solutions, as detailed in Section 13.
• Right to Nominate: In accordance with the DPDP Act 2023, you have the right to nominate an individual who, in the event of death or incapacity, shall exercise your rights.

10. Children's Privacy

Mind Space is designed for adults and young adults seeking personal clarity and mindfulness. The Service is intended for individuals aged 18 and above (or aged 13 and above with verifiable consent from a parent or legal guardian).

We do not knowingly collect, solicit, or process personal data from children under 13 years of age. If we learn that personal data of a child under 13 has been collected without verifiable parental consent, we will take immediate measures to permanently delete that information from our active databases and servers. If you believe a minor under 13 has registered an account, please contact our Grievance Redressal Officer.

11. Third-Party Links & External Services

Mind Space and its official website may contain links to external web resources (such as mindspace.consciousliving.app, Conscious Living educational articles, or partner technical documentation).

This Privacy Policy applies solely to Mind Space and the services operated by CrossTech Solutions. We do not exercise control over external third-party sites, and we encourage you to review their respective privacy statements before sharing personal information.

12. Policy Amendments & Updates

We may amend this Privacy Policy periodically to reflect enhancements in app architecture, evolving AI models, or statutory amendments under Indian and international law.

When modifications occur, we will update the Effective Date and Version number at the top of this document. For significant or material changes affecting your rights, we will provide prominent notice via in-app banners or notification to your registered email address prior to the change becoming effective. Your continued use of Mind Space after the revised date signifies your acceptance.

13. Grievance Redressal Mechanism & Contact Information

In compliance with the Information Technology Act 2000, the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules 2021, and the Digital Personal Data Protection (DPDP) Act 2023, CrossTech Solutions has appointed a designated Grievance Redressal Officer to address privacy inquiries, rights requests, and data protection concerns.