← mindscrul

privacy policy

last updated October 17, 2026

mindscrul collects only what it needs to work. We don't show ads, we don't sell your data, and we don't track you across other apps or websites.

What we store on our servers

Account: your email address, username and password. The password is stored hashed, never in plain text.

Profile: your avatar, and whether your account is public or private.

What you post: photos, videos, text, text overlays, who each post is for (your arms, your followers or everyone), and the date a photo was taken, read from the photo itself. We don't collect your location, and location metadata is removed from photos before they're uploaded.

What you do with others: likes, gold hearts, mood reactions, comments, saved posts, shares, follows, arms (hand holds), direct messages and notifications.

Safety: reports you make and accounts you block.

Scrolling: your brains, the scroll session in progress, the day your current run of mindful days began, and, while you've stepped away from scrolling, what you said you'd do and until when (cleared when the timer ends). These follow your account if you switch phones.

What stays on your phone

Your notes, your past mood checks, your "instead of scrolling" list, and your theme are stored on your device. Your weekly summary is worked out on your phone from them.

Who can see what

Public account: anyone using mindscrul can see your posts. Private account: only your followers can. Your username and avatar are always visible so people can find you.

Direct messages are visible to the people in the conversation. They are stored on our servers but are not end-to-end encrypted.

You can also limit any post to your arms or to your followers.

People you block can't see your posts, and you won't see theirs.

How we use it

Only to run mindscrul: showing posts and reactions, sending notifications, keeping accounts secure, and reviewing reports. We don't use your data for advertising or sell it to anyone.

Usage statistics

To learn which parts of mindscrul actually help, we record a small set of in-app events: signing up, finishing the walkthrough, opening the app, starting a scroll session and where you started it, leaving one early or letting it run out, the intention you pick before scrolling, your answer to the after-scroll mood check, stepping away (for how long, never what you wrote), making a post (photo, video or note), and filing a report. These are linked to your account id, never your email or username.

We don't record your screen, what you type, or the content of your posts and messages.

Service providers

Our database, sign-in and file storage are hosted by Supabase, which processes this data on our behalf and only as we instruct.

Usage statistics are processed by PostHog, on servers in the United States, on the same terms.

If the app crashes, a crash report (what went wrong in the code, your phone model and operating system version, and your account id) is sent to Sentry, on servers in the United States, so we can fix it.

Sign-up and password-reset emails are sent through Resend. Our website and our email forwarding run on Cloudflare.

Our website and waitlist

If you join the waitlist on mindscrul.app, we store your email address only to tell you when the beta opens. Email us and we'll remove it.

The website doesn't use cookies or analytics. Its fonts load from Google Fonts, which sees your IP address the way any website you load does.

Keeping and deleting your data

We keep your data while your account exists. Deleting your account in settings permanently removes your profile, posts, comments, reactions, follows and messages from our servers. Copies in backups are overwritten within 30 days.

Deleting the app removes the data stored on your phone.

Children

mindscrul isn't for children under 13, and we don't knowingly collect their data. If you think a child under 13 has an account, contact us and we'll delete it.

Your rights

You can see and change your profile, delete any post, and delete your account yourself in the app. To get a copy of your data, or for any other privacy request, contact us. Depending on where you live, you may have further rights under laws like the GDPR or CCPA, and we'll honor them.

Changes and contact

If we change this policy in a way that matters, we'll tell you in the app first.

Contact: [email protected]