Privacy Policy

Master Minds AI (the “Service”) is operated by [Your registered business name], [Street address, City, Postal code, Country]. For anything in this policy, contact us at [you@your-domain.com].

• Account details: your email address, your name if you give it, and your sign-in method. Passwords are stored only as a hash by our authentication provider; if you sign in with Google, we receive your email address and name.
• What you ask and what you are told: the text of your questions, the replies you receive, the sources listed with them, and the titles of your debate sessions.
• Purchase records: the plan, amount, currency, order identifier, payment status and the email address used at checkout. Card details are entered on the payment provider’s own checkout page and never reach us.
• Technical records: IP address, browser type, the pages requested and any error logs, kept by our hosting platform for security, fraud prevention and reliability.
• Library material (owner account only): the links, transcripts and text the owner adds to the library.
• Reviews you leave: the name you type, the star rating, the headline and the wording of the review. Reviews are published on the site and can be read by anyone.

We do not ask for your address or phone number, we do not build advertising profiles, and we do not use analytics, tracking pixels or cross-site advertising cookies.

• To provide the Service you asked for: sign you in, keep your history, answer your questions, and take payment (performance of our contract with you).
• To keep the Service secure and working: error logs, abuse prevention, rate limiting (our legitimate interests).
• To meet legal obligations: tax, accounting and responding to lawful requests.
• Where you have agreed, to send you service messages you opted into. You can withdraw that consent at any time.

We share personal information only with providers that make the Service work, and only what each one needs:

• Base44 — hosting, database, authentication and transactional email. Our app and its data live on this platform.
• Base44 Payments (operated on Wix Payments) — checkout, card processing and subscription billing. Wix’s own privacy terms apply to the payment page.
• Google (Gemini API) — your question, together with the library excerpts retrieved for it, is sent to generate the reply. Requests are made through the API and are not used by us to train models.
• Supadata — when the library has nothing on your question, a search query and public video references are sent to fetch public YouTube transcripts. No account details are sent.
• Authorities or advisers — where the law requires it, or to establish or defend legal claims.

We do not sell personal information, and we do not share it for cross-context behavioural advertising. There are no advertising or analytics partners to opt out of.

The replies you receive are generated by AI models from material you or the owner supplied. Your question and the retrieved passages are processed by the AI provider named above. Please do not paste confidential information, other people’s sensitive personal data, or anything you are not entitled to share. AI output can be incomplete or wrong, and should be checked before you rely on it.

We use only what is needed to keep you signed in and to remember simple interface preferences. See the Cookie Policy for the exact list.

• Account and debate history: while your account is open. Delete a debate yourself, or ask us to close the account, and the related records are removed.
• Reviews you leave: while the review is published. Ask us and we will remove it, along with the name shown on it.
• Purchase and tax records: kept for as long as accounting law requires (typically six to seven years).
• Technical logs: kept briefly, normally no longer than ninety days, unless needed to investigate abuse.

Depending on where you live, you may ask to see the personal information we hold about you, correct it, delete it, restrict or object to how it is used, receive a portable copy, or withdraw a consent you gave. California residents may also ask what categories of information we collect and disclose, and may use an authorised agent; we will not treat you differently for exercising these rights.

Write to [you@your-domain.com] from the address on your account. We may need to confirm your identity first, and we answer within the period the law allows (usually 30 to 45 days). If we cannot resolve a concern, you may complain to your local data protection authority.

Data is encrypted in transit, access is limited to what each provider needs, and account records are readable only by the account that created them. Our providers are based mainly in the United States, so your information may be processed there; where required, transfers rely on the providers’ standard contractual clauses and equivalent safeguards.

The Service is for people aged 16 and over and is not directed to children. If you believe a child has given us personal information, write to us and we will delete it.

If we make a material change, we will post the new version here with a new date and, where the change affects you significantly, tell you by email before it takes effect.