This Privacy Policy describes how ProbableMind ("we", "our", or "us") collects, uses, and shares information when you use our website at probablemind.com and the related services (collectively, the "Service"). By using the Service you agree to the practices described here.
1. Information we collect
Information you provide
- Account data. When you sign up we receive your email address, a display name, and (if you sign in via Google) your Google profile picture. You may optionally add a country, gender, birth date, and topic interests in your profile settings.
- Content. The questions, hypotheses, evidence, and maps you create or save inside the app.
- Communications. Messages you send us (e.g. support requests).
Information collected automatically
- Usage data. Pages visited, features used, approximate timestamps, and basic device information (browser, OS, screen size).
- Cookies. We use first-party cookies that are strictly necessary to keep you signed in and to remember your preferences (such as theme). We do not use third-party advertising cookies.
Information from third parties
- Authentication providers. If you sign in with Google, we receive your name, email, and avatar URL from Google via OAuth. We do not receive your password.
- Payment processors. If you subscribe to a paid plan, our payment processor sends us a customer identifier and subscription status. We never receive or store your full card number.
2. How we use information
- To provide, maintain, and improve the Service.
- To authenticate you and protect your account.
- To personalize what you see (for example, to surface maps related to topics you marked as interests).
- To produce aggregated, anonymized statistics — for instance, how different age groups reason about uncertainty. Individual users are never identifiable in these statistics.
- To detect, prevent, and respond to abuse, fraud, or security incidents.
- To communicate with you about your account, security alerts, and (rarely) product news. You can opt out of non-essential email at any time.
3. Legal bases (EEA / UK users)
If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases under the GDPR / UK GDPR:
- Contract — to provide the Service you have asked us for.
- Legitimate interests — to keep the Service secure, debug, and analyze aggregate usage.
- Consent — for any optional profile fields (country, gender, birth date) and for marketing email.
- Legal obligation — when we must retain or disclose information to comply with the law.
4. Sharing
We share information only in these circumstances:
- Service providers who run our infrastructure on our behalf (hosting, database, email delivery, payment processing). They are bound by contract to use the data only to provide their service to us.
- Legal compliance — when required by valid legal process or to protect the rights, property, or safety of ProbableMind, our users, or the public.
- Business transfers — if we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different policy.
We do not sell your personal information.
5. Public content
Maps you choose to publish are visible to anyone with the link. Your display name and avatar are shown alongside content you make public. Your email address, birth date, and country are never shown publicly.
6. Retention
We keep account data for as long as your account is active. If you delete your account, we delete or anonymize your personal information within 30 days, except where we are required to retain it for legal or accounting purposes (typically up to 7 years for billing records).
7. Your rights
Depending on where you live, you may have the right to access, correct, delete, port, or restrict the processing of your personal information, and to withdraw consent. You can exercise most of these rights directly from your profile settings, or by emailing privacy@probablemind.com. You also have the right to lodge a complaint with your local data protection authority.
8. Security
We use TLS in transit, encrypted storage at rest, hashed passwords (handled by our authentication provider), and restricted administrative access. No system is perfectly secure; we encourage you to use a strong, unique password and to enable any additional protections offered by your identity provider.
9. Children
The Service is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.
10. International transfers
We are based in the United States and our infrastructure may process data in the United States and other countries. Where required, we use appropriate safeguards (such as the European Commission's Standard Contractual Clauses) for international transfers.
11. Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes we will notify you (for example, by email or by an in-app notice) before the changes take effect. The "Last updated" date at the top of this page always reflects the current version.
12. Contact
Questions about this policy? Email privacy@probablemind.com.