Privacy policy

Last updated 19 October 2026. Draft: this page describes how Mind Culture works today and will be refined with legal review.

Who we are

Mind Culture is a service for keeping, sharing and reflecting on what you listen to, read and watch. It is operated at mindculture.io. Questions about this policy go to hello@mindculture.io.

What we collect

Account details: your name, email address, username, optional phone number, and your sign-in credentials (stored only as a hash).
What you add: library items, notes, ratings, comments, bookmarks, playlists, goals, interests, contacts you enter, and anything you share.
How you use it: listening positions and completions, which items you open, and app events such as sign-ins. Sign-in and security events include your IP address.
Imports: if you import your podcasts from Spotify or another app, the list of shows you ask us to bring in.
Connected AI assistants: if you connect an AI assistant such as Claude, the name of the app and when you approved it, its access keys (stored only as hashes), and a log of each request it makes.
Device: on mobile, a push notification token when you allow notifications.

What other people can see

Nothing about your listening is visible to anyone unless you choose it. Your Mind Feed is shown to people you have accepted as followers, under the setting you pick on the Mind Feed page. People can find you only by the details you switch on under Profile and Security. A public profile is off by default. When you share an item, the people you share it with see your name and the item, and each recipient sees only their own response, never the other recipients’.

AI assistants you connect

You can connect an AI assistant, such as Claude through the Mind Culture connector, or another app that uses the Model Context Protocol (MCP). Nothing is connected until you sign in and approve it. When you ask it to, a connected assistant can read your own library, notes, starred items, collections, goals, interests, people, queue, contacts and groups, the podcasts you follow, your listening history and the transcripts of episodes in your library, and make the changes you ask for. It never sees other members’ data, your password or your sign-in codes. What it reads goes to that assistant’s provider (for Claude, Anthropic) under your own account with them and their privacy policy. Access tokens expire after an hour and refresh tokens after 30 days; request logs (which action, when, from which IP address) are deleted after 90 days. You can revoke a connected app at any time under Settings → User Data → Connected apps, and it loses access at once.

Services we use to run the product

Anthropic (Claude) generates insights, summaries, takeaways and suggestions. To do that we send it the content involved: transcripts, your goals and interests, your ratings and comments, the names of people or shows you ask about, and, for co-listening suggestions, the first names of contacts and the tips you wrote about them. We do not send your email address or password.
Deepgram transcribes audio and reads takeaways aloud. It receives the public audio URL of an episode and the text to read.
Resend delivers our email. Twilio delivers SMS if you verify a number. Expo delivers push notifications.
Unsplash, Wikipedia, YouTube, Google Books, Open Library, Apple’s podcast directory are queried with titles, names or links to fetch artwork, metadata and references.
Vercel hosts the application and Supabase hosts the database, both with encryption in transit and at rest.
Have I Been Pwned is checked when you set a password, using only the first five characters of a hash of it.

How long we keep things

Your account data is kept while your account exists. Ordinary event logs are deleted after 90 days and security logs after one year. Sign-in and reset links expire within a day and are removed a week later. When you delete your account, everything it holds is deleted, along with the logs, usage records and support messages tied to it, and your email address is removed from other members’ share and group records.

Your choices

Every email we send has a preference for it under Settings, and an unsubscribe link.
You can export everything in your account as JSON from Settings, and delete your account there or in the mobile app.
You can revoke any connected service or app at any time from Settings.
You choose who can find you, who can follow you, and what your followers see.

Changes

When this policy changes we update the date at the top. Material changes are announced in the app.