Next Daily FuseGet the app

Privacy Policy

Last Updated: 29/10/2026

1. Who we are

Mindfuse is operated by Mindfuse B.V., Noordersingel 177, 2651 LJ Berkel en Rodenrijs, the Netherlands, which is the controller of your personal data under the EU General Data Protection Regulation (GDPR). Contact: [email protected].

Chamber of Commerce (KvK) number 91402174, VAT number NL865644895B01. See our Imprint.

This policy covers the Mindfuse app and the mindfuse.io website. It explains what we process, why, who helps us, how long we keep it, and what your rights are.

2. The short version

  • Your calls are not recorded. We do not store or analyse what is said.
  • You sign up with your phone number. We use it as the key of your account, to prevent abuse and for safety. The people you talk to never see it.
  • We ask your date of birth to make sure you are 18 or older.
  • We keep some information about calls (when they happened, how long they lasted, technical quality), but not their content.
  • After a conversation, the app saves a Weave for you: a picture made from how loud each voice was over time, never from the audio or the words. You can delete any Weave, and they are deleted with your account.
  • If someone is reported, we keep safety records, even after an account is deleted, to protect other people.
  • We note which link or channel brought you to Mindfuse (for example "youtube"), to see which channels work. We do not use an advertising ID for this and do not track you across other apps or websites.
  • We do not sell your data, and we do not show ads.
  • You can delete your account in the app at any time.

3. What we collect and why

A. Your account

  • Your phone number. You sign up by entering it and confirming a code we send by text message (through Firebase Authentication, a Google service). Your phone number is the key of your account record. We also use it to stop abuse (for example, so a free trial can only be used once per number), and in safety and moderation records. It is never shown to the people you talk to.
  • Your email address, if you choose to add one in the app (optional). We send one message to confirm it, and we use it for your account only: recovery, security notices, the end of your free days and purchase confirmations. If you tick "Also send me the Sunday note", we also send one email a week. If you are a paying member, we may occasionally email you about Mindfuse. Every email that is not about your account has an unsubscribe link. Emails are sent through Resend. Your email is never shown to the people you talk to. You can remove it in the app at any time.
  • Your date of birth, which you enter once at sign-up so we can check that you are 18 or older. If you are under 18, you cannot use Mindfuse. In that case we keep a record that this phone number is not eligible, so the block cannot be avoided by signing up again.
  • Optionally, why you want to use Mindfuse (your usage intent), including any text you type in the "other" option. You can skip this question.
  • Basic account status, such as whether you have had a conversation, when you were last active, and your notification settings.

B. Calls and matching

  • Calls are not recorded, and audio is not stored or analysed. The app does check, as a technical signal, whether audio is flowing in a call (not what is said), so we can tell real conversations from failed connections.
  • Calls are peer-to-peer: the audio goes directly between your device and the other person's device, encrypted by the WebRTC standard. To set up a direct connection, the two devices exchange network information, including IP addresses. When a direct connection is not possible, the audio is relayed through Cloudflare's TURN service, which then processes your IP address. Google's STUN servers are used to help devices find a route to each other.
  • Matching is anonymous. To match people and run calls, we process temporary matching and connection records with an internal account id.
  • Call information (metadata): match ids, when a call connected and ended, how long it lasted, the countries of both people (worked out from the country code of each phone number, on our server), and a rough time-zone offset (taken from your phone's time-zone setting) so the app can show the other person's time of day.
  • Call diagnostics, such as connection type, platform (iOS or Android), app version, whether a relay was used, and why a connection failed. We use these to make calls more reliable.
  • A record of which accounts have been matched with each other (by internal id, not phone number), with when they were matched and connected. We use it to confirm, when someone is reported, that the two people really did talk.

C. Reports, blocks and safety

  • When you report someone, the report contains the category you chose, the reason you typed, your phone number, the internal id of the person you reported, the time and, where available, the match id.
  • When you block someone, we store the block so you are not matched again.
  • For serious reports, we keep a safety record with the non-content facts about the match (for example when it happened and how long it lasted), both people's phone numbers and countries, and the outcome. Our safety team is alerted about serious reports and reports that someone may be at risk.
  • A record of every moderation decision: the account it is about, the decision, the reason, and the state of the account just before it, so the decision can be checked and reversed.
  • Records of suspensions and bans, and counts of how often an account has been reported and by how many different people.
  • If you are suspended and send an appeal in the app, we store your appeal text, your internal account id, which suspension it is about, when you sent it, your app version, and our answer. An appeal does not contain your phone number.

D. Notifications

  • If you allow notifications, we store your device's push token (Firebase Cloud Messaging) and your notification settings. We use them to tell you when someone is looking for a conversation, to send Daily Fuse and event reminders, and to send occasional reminders to come back. We avoid sending them during night-time quiet hours, based on an estimate of your local time from your country.
  • You can turn notifications off in the app or in your phone's settings at any time.

E. Payments

  • Purchases are handled by the Apple App Store or Google Play. We never see your card or bank details.
  • We use RevenueCat to manage subscriptions. RevenueCat receives your internal Mindfuse account id and your purchase records (such as which product, when it started and when it renews or ends), and we keep a copy of your current access status.

F. App analytics, crash reports and security

  • Our own usage events (for example: which onboarding step you reached, that you started a search and how it ended, that you saw an offer). These are stored in our own database with an install id and, once you are signed in, your account id. Before sign-up they can include the country calling code you selected.
  • Crash reports through Firebase Crashlytics, which include technical information about your device, the app version and what went wrong.
  • Firebase App Check, which uses Google Play Integrity (Android) and Apple App Attest (iOS) to check that requests come from the real Mindfuse app. This protects against fraud, such as abuse of text-message sign-up codes.
  • Usage counters to prevent abuse, such as limits on how often an account can be matched or use the call relay.

G. Feedback and support

  • If you send feedback in the app, we store your message, the category, your platform and app version, your internal account id and, if you give it, your email address so we can reply. We keep feedback for support and safety, also after you delete your account (see section 9).
  • If you email us, we keep the email to answer you.

H. Weaves (your conversation keepsakes)

  • After a conversation of at least a minute, the app saves a "Weave" record. It is what the app draws your Weave from. It contains:
    • how loud each voice was over the course of the conversation, as a series of loudness levels. This is never audio and never words: nobody can hear or work out what was said from it;
    • the timing of the turns, meaning who was speaking when, and how often you went back and forth;
    • when the conversation started and how long it lasted;
    • the local time offset of both of you, so the Weave can show each person's time of day;
    • the country of the other person (worked out on our server from the country code of their phone number) and whether they were a subscriber. Never their phone number, name, account id or anything else that identifies them;
    • a number chosen by chance (a seed) and some drawing settings, so your Weave looks the same every time, and details such as how many conversations you have had and your Founding Member number if you have one;
    • optionally, a private note you write on a Weave. Only you can see it.
  • The record is stored under your account in our database (with a copy on your phone so the app works quickly), and only your account can read it. The other person gets their own Weave of the same conversation, which includes the loudness of both voices, your country and your time of day, but nothing that identifies you.
  • To fill in the other person's country, our server keeps a short note per account of your most recent matches (the other person's country, whether they were a subscriber and when you were matched). Only your account can read it.
  • First Light. Your very first Weave is marked as your First Light, and there is only one per person. To keep it that way, we store that your account has one, and a record keyed on a one-way coded (hashed) form of your phone number that does not contain the number itself.
  • You can delete any single Weave in the app at any time, together with its note.

I. Invites and referral codes

  • You can invite friends with a personal link (mindfuse.io/i/ followed by a short code). The code is unique and is not your phone number or account id. We store which account each code belongs to.
  • When someone signs up through your invite, we record that you invited them, when, and how the invite is going (for example whether they have had their first 5-minute conversation). We use this only to give both of you the bonus conversations, and to count how many invites you have been rewarded for.
  • To prevent abuse, such as inviting yourself, we check invites against your own account and phone number, and we keep a one-way coded (hashed) form of the invited person's phone number, and of a device id if the app sends one, so the same phone or device cannot be counted twice. These coded records do not contain the number itself. An invite is refused if either account is suspended or banned.
  • Bonus conversations and any extra unlimited time you earn are stored with your access status.
  • If you visit an invite link without the app, the invite page shows the code so you can enter it in the app yourself. The page does not store it.
  • Keeping invites fair. When you redeem an invite code, our server stores a short record under your internal account id with the internal id of the person who invited you, the time, and, where available, a network code. The network code is a one-way coded (hashed) form, made with a secret key (a salt), of only the first part of the IP address the request came from: the first three of the four numbers of an IPv4 address (the /24 network), or the first three groups of an IPv6 address (the /48 network). The full IP address is not stored, and the code cannot be turned back into it. Today the server takes this address from the network information sent with the request; we are changing this so it uses only the address the request actually reaches our server from. We use the record only to spot abuse of invite rewards, for example several invited accounts redeeming from the same network, or many invites redeemed within one day. If that happens, the first reward is held until a person reviews it and then either gives it or cancels it. The record is never used for anything else and never shared, and it is deleted automatically after 30 days.

J. Where you found Mindfuse (install source)

  • We want to know which channels bring people to Mindfuse, for example a video on TikTok or YouTube, or an invite. For that, the app keeps only the name of the source, and only the first one it sees:
    • on Android, the source and campaign names (utm_source, utm_medium and utm_campaign) in the Google Play install referrer, which is set when you install through one of our links, such as mindfuse.io/go/youtube;
    • on any phone, a mindfuse.io/go/<source> link that opens the app (the source is the word after /go/), or an invite link (recorded as "invite", without the code).
  • The app saves this on your phone and, after you sign in, sends it once to our server. The server stores it with your account (internal account id) together with how it was found (install referrer, link, or none) and the time. It is stored only once and never overwritten, and only for accounts created in the previous 7 days. If there is no source, we store "none". On iPhone the App Store does not pass the source to the app, so it is usually "none" there. The source is also recorded once in our own usage events (see F).
  • We look at these sources only as totals per source (for example, how many new accounts came from one channel), to decide where to spend our time.
  • We do not use an advertising identifier (such as Apple's IDFA or Google's advertising ID), a hardware identifier or your IP address for this. We do not combine it with data from other companies' apps or websites, we do not use it for advertising, and we do not share it. It is not tracking in the sense of Apple's App Tracking Transparency, which is why the app does not ask for that permission.
  • It is deleted when you delete your account.

K. Today's world (conversation lines on the globe)

  • The globe on the Home screen can show recent conversations on Mindfuse as lines between two countries, and can point out a line that was just added. A line is made only after a connected conversation of at least one minute.
  • Each line holds only the two countries (worked out on our server from the country code of each phone number), the end time rounded down to 10 minutes, and how many conversations share that pair of countries and time. It never holds a name, a phone number, an account id, a city, how long the conversation lasted or anything that was said.
  • Lines appear a few minutes after the conversation ends: a delay of 2 to 6 minutes that varies on purpose, plus up to a minute of processing. A country is shown only once it has a minimum number of conversations in the period shown; until then its lines are held back. If a report linked to the conversation exists when its line is due to appear, the line is left out.
  • The lines of the last few days (currently 7) are visible to everyone who is signed in to the app. Older lines are removed. Our server also keeps the same country-pair list, including the lines that are held back, for that period only, where no user can read it. To build the lines, it keeps a short queue entry per conversation (the two countries, the rounded time and the match id, used only to check for reports). It is deleted as soon as the line is processed, and at the latest after 2 days.
  • A line contains no identifiers. Still, in a country with very few people on Mindfuse, someone who already knows that a particular person uses Mindfuse might guess that a line involves them.

L. The member thank-you figure

  • The app can show members a thank-you figure for the month, such as how many people talked without paying for every paying member. It is made from totals only: the number of conversations this month, the number of different people who had at least one conversation of a minute or more without a paid membership (free or on a trial), and the number of active memberships.
  • To count each person only once, our server stores a marker for that month made from a one-way coded (hashed) form of your internal account id. The marker holds nothing else (no phone number, country or conversation details) and is deleted automatically 40 days after the month ends. Monthly conversation totals are stored without any id.
  • Only the totals are visible in the app, to people who are signed in.

We do not use your location from your phone's GPS, your contacts or your photos. The "country" we use comes from your phone number's country code, worked out on our server, and your time of day comes from your phone's time-zone setting. We never use GPS or your IP address to work out where you are.

4. What the other person sees

The person you talk to hears your voice. They do not see your name, phone number, photo or a profile. In some screens, such as the post-call screen and The Weave keepsake card, the app shows them the country you are in (based on your phone number) and your time of day, and shows you theirs. If you choose to share The Weave card, it goes wherever you share it.

Each of you keeps your own Weave of a conversation you had together. Theirs includes the loudness pattern of both voices, the turn timing, your country and your time of day, but not your phone number, name or any other identity. Your private notes are never shown to them.

5. Our legal bases

  • Contract (providing the service you signed up for): your account, phone verification, matching and calls, call metadata needed to run calls, payments and your access status, your Weaves and First Light, and invites and the bonus conversations they earn.
  • Legitimate interests (keeping people safe and the service working): the age check and the under-18 block, reports, blocks, moderation and safety records, anti-abuse and anti-fraud measures (including the trial record, the First Light and invite records, the invite network check, App Check and usage limits), security, call diagnostics, crash reports and our own usage analytics to improve Mindfuse, including the install source (which channel brought you), and showing the community what is happening on Mindfuse through today's world lines and the member thank-you figure. We have weighed these interests against your privacy; you can object (see section 10).
  • Consent: push notifications (which you allow in your phone and can turn off at any time), and analytics cookies on our website. You can withdraw consent at any time; this does not affect what happened before.
  • Legal obligation: for example keeping records the law requires, and responding to lawful requests from authorities.

6. Who we share data with

We do not sell your data. We share it only with:

  • Google (Firebase and Google Cloud): sign-in and text-message codes, our database, server functions, push notifications, Crashlytics and App Check. Also Google's STUN servers for call setup.
  • Cloudflare: the TURN relay for calls that cannot connect directly, and hosting of our website.
  • Cloudflare also runs our matching server, which receives your internal account id, your IP address and the technical data needed to connect a call.
  • RevenueCat: managing subscriptions and purchases.
  • Hetzner (Germany): a server we rent that runs our automated moderation system and other background jobs. It reads the moderation data described in section 3C from our database.
  • Anthropic (United States): the AI model our automated moderation system uses to assess reports and appeals (see section 12). For each case it receives the report category, the reporter's own words with email addresses, phone numbers and social media handles removed, facts about the match and the account's moderation history, all under internal ids. It never receives phone numbers, names or call audio.
  • Stripe: processing payments for subscriptions bought on our website (name, email or phone number entered at checkout, and payment details, which we never see).
  • Apple and Google, as app stores: they process your purchases and app store account under their own privacy policies.
  • Website services: Google Analytics (only with your consent), Resend (sending account emails and our weekly email), Formspree (our affiliate application form) and Featurebase (our public feedback board). See section 11.
  • Authorities, when the law requires it, or when it is needed to protect someone's life or safety, for example in cases of child exploitation.

The person you talk to is not someone we "share" data with, but they do hear your voice and may see your country and time of day (see section 4).

7. Data outside the EU

Some of the service providers above are based in, or process data in, the United States and other countries outside the European Economic Area. Where that happens, we rely on the safeguards the GDPR allows, such as the EU-US Data Privacy Framework where the provider is certified under it, and/or the European Commission's Standard Contractual Clauses. You can email us for more information about these safeguards.

8. How long we keep data

  • Your account data: until you delete your account.
  • Live call and matching records: deleted automatically shortly after the call, in most cases within about a day.
  • Safety and moderation records (reports, safety records, suspensions and bans): for as long as needed for safety and legal reasons, and reviewed periodically. These are kept even after the accounts involved are deleted, so that people who harm others cannot simply start again.
  • The under-18 record and the free trial record for a phone number: kept after account deletion so these protections cannot be bypassed. Neither contains your date of birth.
  • Your recent free-conversation use: when you delete your account, we keep a short record of when you used free conversations in the last 30 days, your bonus conversation totals (how many you were given and used) and, if you have one, when extra unlimited time from an invite ends. It is stored under a one-way coded (hashed) form of your phone number, without the number itself. We keep it for fair use and to prevent abuse, so deleting an account and signing up again does not reset your free conversations. If the same number signs up again, the record is moved to the new account and deleted straight away. Otherwise it is deleted automatically within about 31 days of deleting your account. Only if extra unlimited time from an invite was still running is it kept longer: until about 30 days after that time ends.
  • Weaves and their notes: until you delete them or your account. Your invite records: until you delete your account.
  • The coded (hashed) First Light and invite records for a phone number or device, and the list of past invite codes: kept after account deletion, so a First Light or an invite cannot be claimed twice and an old code never points to a new account. None of these contain your phone number.
  • Your install source (where you found Mindfuse): until you delete your account.
  • The invite network check record: deleted automatically 30 days after you redeem an invite, also if you delete your account sooner.
  • Today's world lines: shown and kept for the last few days (currently 7), then removed. The queue entry for each conversation is deleted once it is processed, and at the latest after 2 days.
  • The monthly marker used for the member thank-you figure: deleted automatically 40 days after the end of that month, also if you delete your account sooner. Monthly totals without any id are kept.
  • Diagnostics and analytics: kept while they are useful to improve Mindfuse. We review these periodically.
  • Feedback and appeals: kept for support and safety, also after account deletion. You can ask us to remove them (see section 9).
  • Purchase records: kept by Apple, Google and RevenueCat under their own rules, and as long as tax and accounting law requires.

9. Deleting your account

You can delete your account in the app under Account, then Delete. For your security we ask you to confirm with a code sent to your phone. When you delete your account, we delete:

  • your profile, including your date of birth and notification settings;
  • our copy of your access status;
  • blocks you made;
  • your call and connection records and your presence status;
  • all your Weaves, including your private notes, and the note of your recent matches used to make them;
  • your invite details (your code settings and invite counts) and the record of who invited you;
  • your app usage events;
  • your install source (where you found Mindfuse);
  • your sign-in account, including your phone number in Firebase Authentication.

We keep:

  • safety and moderation records, as described in section 8;
  • the free trial record for your phone number;
  • a hashed record of your free-conversation use in the last 30 days and your bonus conversation totals, for fair use and abuse prevention, deleted automatically within about 31 days (or when you sign up again with the same number), as described in section 8;
  • the coded (hashed) First Light and invite records described in section 8;
  • the invite network check record and the monthly marker for the member thank-you figure, until they are deleted automatically (after 30 days and 40 days after the month ends, as described in section 8). Neither contains your phone number;
  • the list of invite codes, which keeps pointing to your old internal id (not your phone number) so the code can never be given to someone else, and the invite records of people you invited, which belong to their accounts and show only your internal id;
  • if you were blocked for being under 18, a record that the number is not eligible;
  • blocks other people made of you. These are their safety choice, so they stay in place: if the same phone number signs up again, those people are still protected. To make that work, we keep a record linked to a one-way coded (hashed) form of your phone number, without the number itself;
  • feedback you sent (your message, the category, your internal account id and, if you gave it, your email address) and any appeals you sent (your appeal text and internal account id), for support and safety. To have your feedback or appeals removed, email [email protected] and tell us the email address you gave with it, or roughly when you sent it and what it was about, so we can find it. After deletion it is no longer linked to your phone number;
  • records that contain only an internal id (or no identifier at all) and no longer link to your phone number once your sign-in account is deleted, such as call diagnostics, records of past matches and event sign-ups;
  • purchase records held by Apple, Google and RevenueCat.

Deleting your account does not cancel a subscription. Cancel it in your App Store or Google Play settings to stop future payments.

10. Your rights

Under the GDPR you have the right to:

  • access the personal data we hold about you and get a copy;
  • have incorrect data corrected;
  • have your data erased;
  • restrict how we use your data;
  • receive your data in a portable format;
  • object to processing based on legitimate interests;
  • withdraw your consent at any time, where we rely on consent;
  • not be subject to a decision based only on automated processing that significantly affects you, and to ask for a person to review it (see section 12).

To use any of these rights, email [email protected] from any address and tell us the phone number of your account. We may ask you to confirm it is really you. We will respond within one month. Some rights have limits, for example we may keep safety records where we have a strong reason to.

You can also complain to a data protection authority. In the Netherlands this is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl). If you live elsewhere in the EU, you can also contact the authority in your country.

11. Our website

  • Hosting. mindfuse.io is hosted by Cloudflare, which processes your IP address and basic request information to deliver and protect the site.
  • Analytics. We use Google Analytics to understand how the site is used, for example which pages are visited and which app store links are clicked. Analytics cookies are only set if you click Accept in the banner. Until then, Google Analytics runs in a restricted mode without analytics cookies. You can change your choice by clearing this site's data in your browser.
  • Google News button. Our pages load a script from Google News that shows a button to add Mindfuse as a preferred source in Google. Loading it means Google receives your IP address and browser information.
  • The Sunday note (weekly email). If you sign up for our weekly email, we store your email address, the date you signed up and confirmed, and the page you signed up on. We use it only to send you that weekly email, after you confirm your address through the link we send you. Every email has an unsubscribe link, and you can also unsubscribe at mindfuse.io/unsubscribe; we then stop sending it to you. The emails are sent by our processor Resend (servers in the EU), and the sign-up record is kept on Cloudflare.
  • Forms. If you apply to our affiliate program, what you enter (your email address, name, channel and audience) is sent to Formspree, which forwards it to us. Our contact form does not send anything itself: it opens your own email app with a message to [email protected].
  • Short links. Links such as mindfuse.io/go/youtube send you to the App Store or Google Play with the name of the source (here "youtube") added to the store link. The page itself stores nothing. What the app does with the source is described in section 3J.
  • Feedback board. Our feedback page shows a board hosted by Featurebase, under its own privacy policy.
  • Live numbers. Some pages fetch anonymous statistics from our server, which means our server (on Google Cloud) receives your IP address.
  • Browser storage. The site stores your light or dark theme choice and your analytics choice in your browser's local storage. These are not sent to us.

12. Automated safety measures

To protect users quickly, some safety measures happen automatically based on reports, for example a temporary suspension from matching while a serious report is reviewed. Reports and in-app appeals are then assessed by an automated moderation system that uses an AI model (provided by Anthropic, see section 6). It can decide on its own to warn an account, pause it from matching or ban it permanently. It decides only on conduct, never on opinions, and only on the report category, the reporter's own words, facts about the match and the account's history; it never hears a conversation. For the most serious categories (sexual content, threats or extremism, and reports that someone is under 18), a permanent ban can follow without an earlier pause, but only when at least two separate people who we can confirm actually spoke with that person report it and a second, independent automated review confirms it. In all other cases a permanent ban only follows an earlier suspension. A ban applies to the phone number: we keep it under a one-way coded (hashed) form of the number, so a new account with the same number is blocked too, also after the banned account is deleted. Every decision is logged and checked afterwards by a person, who can reverse it. We do this to keep users safe, which is our legitimate interest and necessary to provide the service under our Terms. If a decision affects you, you have the right to a review by a person, to explain your side and to contest it: email [email protected].

13. Children

Mindfuse is only for people aged 18 and older. We ask for your date of birth at sign-up and block anyone under 18, tied to their phone number so it cannot be reset by reinstalling the app. We do not knowingly process data of minors beyond what is needed to keep them out. If you believe a minor is using Mindfuse, please tell us at [email protected] or report them in the app.

14. Security

We protect your data with measures such as encrypted connections, encrypted call audio, access rules on our database, and App Check. No system is perfectly secure, so we cannot guarantee absolute protection. If something goes wrong, we will act on it and inform you and the authorities where the law requires.

15. Not a crisis service

Mindfuse is not therapy or an emergency service. If you or someone else is in danger, contact your local emergency number. The app lists helplines you can call.

16. Changes to this policy

We will update this policy when what we do changes. The date at the top shows the latest version. If a change matters for how we use your data, we will tell you in the app or by other reasonable means before it takes effect.

17. Contact

Questions, requests or concerns? Email [email protected].

Add Mindfuse as a preferred source on Google