Privacy Policy

Effective date: 10 October 2026 · Last updated: 10 October 2026
App: MindForge (iOS and Android)

Who we are

MindForge is operated by Weavo, Kerkhoflaan 1, 9761 CV Eelde, Netherlands (“we”, “us”). Weavo is the data controller for personal data processed through the MindForge app and its API. Privacy contact: info@weavo.nl.

What this app does

MindForge is a mobile cognitive practice app with short sessions for working memory, problem solving and pattern recognition. It is for entertainment and self-directed practice. It is not a medical device, does not diagnose or treat any condition, and does not measure IQ.

Information we collect

We collect only what is needed to run sign-in, sync your progress, handle optional subscriptions and, on the free tier when ads are enabled in the build, show ads.

Account and identity

DataSourceStoredPurpose
Sign-in account identifierSign in with Apple, Google Sign-InMindForge APICreate and secure your account
Email address (if provided)Apple or GoogleMindForge APIAccount identification and support
Display name (if provided)Apple or Google, or your profileMindForge APIShow a friendly name in the app
Locale (if provided)Apple or GoogleMindForge APIOptional profile field
Session tokensIssued by our API after sign-inYour device’s secure storageKeep you signed in

Training and progress

DataStoredPurpose
Completed sessions (time, skill, exercise, results)MindForge APISession history, skill scores, progress
Skill scores and progress signals (e.g. streaks)MindForge APIHome and Progress screens
Cached skill scores and an onboarding flagYour deviceOffline fallback; avoid repeating the intro

Subscriptions (MindForge Pro)

Payments are processed by the Apple App Store or Google Play. We never receive your card number. We process the subscription product and platform, the purchase receipt the app sends us for verification, and entitlement status (for example Pro active, trial end time).

Advertising (free tier)

When production AdMob ad unit IDs are supplied at build time (ADMOB_* dart-defines), the free tier may show ads from Google AdMob, only on the Home screen and between sessions — never during an exercise and never on results. Builds without those defines do not initialize the AdMob SDK and do not show ads. Pro subscribers see no ads. When ads are shown, Google may collect device and advertising-related data under Google’s Privacy Policy.

What we do not collect

No health or medical data, no precise location, no contacts, photos, microphone or camera, no push notification tokens, and no third-party analytics or crash-reporting SDKs.

How we use information

We do not sell your personal data, and we do not use training data to diagnose conditions or measure IQ.

Legal bases

We rely on contract (providing the app you signed up for), legitimate interests (keeping the service secure and working), legal obligation where applicable, and consent where the law requires it (for example personalised ads).

Retention

DataRetention
Account and profileUntil you delete your account
Training sessionsUntil you delete your account. The history shown in the app depends on your tier: Free shows completed sessions from the last 14 local calendar days, up to 10 sessions (whichever limit applies first); Pro shows 365 local calendar days, up to 200 sessions (whichever limit applies first).
Session tokens on deviceUntil sign-out, account deletion or expiry
Local cachesUntil you clear app data or delete your account

Account deletion

Delete your account any time in the app under Settings → Delete account. This removes your account and all associated data from our database (profile, sign-in identities, sessions, progress, entitlements and tokens) and clears progress cached on your device. You can also email info@weavo.nl. Cancel any active subscription separately in your App Store or Google Play settings.

Sharing and hosting

RecipientRole
AppleSign in with Apple; App Store subscriptions
GoogleGoogle Sign-In; Google Play subscriptions; AdMob on the free tier when enabled at build time

The MindForge API and database run on servers managed by Weavo. We may disclose information where required by law or to protect rights and safety.

International transfers

We operate the MindForge API on servers managed by Weavo. Apple and Google may process data in various countries under their own safeguards, such as Standard Contractual Clauses or the EU–US Data Privacy Framework where applicable.

Your rights

Under the GDPR you may request access, correction, deletion, restriction, portability, or object to processing, and withdraw consent at any time. Contact info@weavo.nl. You may also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or your local supervisory authority.

Children

MindForge is not directed at children below the age of digital consent in their country without parental consent.

Security

All API traffic uses HTTPS and tokens are kept in your device’s secure storage. No system is perfectly secure; please report concerns to info@weavo.nl.

Changes

We may update this policy. The current version is always at mindforge.weavo.nl/privacy with its effective date. We will give additional notice of material changes where the law requires.

Contact

Weavo, Kerkhoflaan 1, 9761 CV Eelde, Netherlands · info@weavo.nl