Privacy policy
MinDrop is a private place for your ideas. We use your information to run the features you choose. We don't sell it, we don't use it for ads, and you can delete everything at any time.
What we collect
You give us:
- Account: email address, display name, optional profile photo, time zone, and a password (stored only as a salted hash by our authentication provider).
- Your content: drops, notes, to-dos, reminders, notebooks, handwriting and drawings, tags, comments, links, photos, files and anything else you save.
- Texts and email you send in: if you turn on Text or Email-to-drop, the phone numbers and email addresses you allow and the messages and attachments you send to your MinDrop address or number.
- Things you connect: if you choose to, Apple Calendar events (only from calendars you pick, and only if you turn on Show on the website), Apple Reminders, and Kindle Scribe notebooks.
- Support and feedback: bug reports, ideas and any screenshot you choose to attach.
Collected automatically:
- Device and security data: sign-in times, IP address, device and browser type (used for your sign-in history and to stop abuse), and push-notification tokens so we can deliver reminders and Live Activities.
- Basic usage counts: anonymous page-view counts without cookies or cross-site identifiers.
- Diagnostics: error logs needed to keep the service working.
On your device only: the iOS app uses your approximate location to show the weather on Today. It is rounded to about 1 km, sent only to a weather service, and never stored in your account. Voice you speak to Mia is turned into text by Apple's speech recognition; MinDrop doesn't receive or keep audio recordings.
How we use it
- To run MinDrop: save and sync your board across devices, send reminders, notifications and Live Activities, turn texts and emails into drops, and show your calendar in Today.
- To provide optional AI features such as Mia and handwriting review (see AI features).
- To secure accounts, prevent fraud and abuse, and enforce our Terms.
- To answer support requests and improve the product using aggregated, non-identifying information.
- To comply with law.
We do not sell or rent your personal information, share it for cross-context behavioral advertising, track you across other companies' apps or websites, or show ads.
AI features
Mia and other AI features are optional. When you use them, the text you send (for example what you type or say to Mia, a text message you ask Mia to file, or handwriting you ask us to read) and the parts of your board needed to answer are sent to a third-party AI service provider that processes it on our behalf to generate a response.
- We ask for your permission in the app before Mia is first used, and you can withdraw it at any time in Settings.
- Our AI providers are contractually limited to processing your content to provide the service to us. We don't permit them to sell it or use it for advertising.
- AI output can be wrong. Review what Mia drafts before relying on it.
- Please don't send sensitive information (like health, financial account or government ID numbers) to AI features.
MeetDrop meeting recordings
If MeetDrop is on for your account, you can record a meeting in the iOS app to get a transcript, summary and action items.
- The audio is never kept. The recording is streamed through MinDrop's servers to a transcription service provider without being saved. The copy on your phone is deleted once it's uploaded, and the provider's copy (audio and transcript) is deleted as soon as the transcript is returned.
- The transcript is then sent to our AI service provider to write the summary and action items (see AI features).
- Only the text (transcript, summary, action items and any speaker names you add) is saved to your account, encrypted with your board. Delete a meeting anytime to remove it.
- Consent: many places require everyone's permission before a conversation is recorded. You're responsible for telling people and getting any consent the law requires before you record. The app reminds you each time.
Text messages (SMS/MMS)
If you add a phone to MinDrop's Text feature, we use that number to verify it, receive texts you send to your MinDrop number and reply when you ask (for example GET or FIND). Message frequency varies. Message and data rates may apply. Reply STOP to opt out or HELP for help.
We do not sell, rent or share mobile phone numbers or SMS opt-in consent with third parties or affiliates for their marketing or promotional purposes. Phone numbers are shared only with our messaging carrier partners as needed to deliver messages. See the SMS terms.
Storage and security
Data is encrypted in transit (HTTPS). Your board is additionally encrypted at rest with a per-account key, and integration secrets are encrypted and never shown again after saving. We use two-step sign-in, rate limiting and breached-password checks to protect accounts, and we separate administrative systems from customer data. No service is perfectly secure, so use a strong, unique password and turn on two-step sign-in.
For offline use, the apps keep a copy of your board on your device (browsers use IndexedDB; the iOS app uses protected app storage excluded from device backup). Signing out or deleting your account clears it on that device; clear other devices separately.
Retention and deletion
We keep your content while your account is active. Deleted drops go to Recently deleted and are removed permanently after 30 days or when you empty it.
You can permanently delete your account anytime: in the iOS app under Settings → Delete account, or on the web under Settings → Account → Delete account. This immediately removes your account, board, attachments, phones, integrations, feedback and push tokens from our active systems. Security logs and backups expire on their normal schedule (generally within 30 days) unless we must keep them longer by law.
Your privacy rights
Depending on where you live (including California and other US states, the EEA, UK and Switzerland), you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict certain processing, to withdraw consent, and to appeal our decision on your request. You can use most of these directly in the app (edit, export as CSV, delete account). For anything else, email [email protected] with the subject “Privacy request”. We'll verify it's you and respond within the time required by law (usually 30–45 days). We will not discriminate against you for exercising your rights.
California: in the last 12 months we collected the categories described in What we collect (identifiers, customer records, internet activity, approximate geolocation, and user content) for the business purposes above. We have not sold or shared personal information, and we do not use or disclose sensitive personal information for purposes that would give you a right to limit it.
EEA/UK: we process your information to perform our contract with you (running MinDrop), based on your consent (optional features like AI and calendar sharing, which you can withdraw anytime), and for our legitimate interests in securing and improving the service. Your information is processed in the United States; where required we rely on appropriate safeguards such as Standard Contractual Clauses. You can also complain to your local data protection authority.
Children
MinDrop is not directed to children under 13 (or the minimum age in your country), and you must be at least that age to create an account. If you believe a child has given us personal information, contact us and we'll delete it.
Changes
We may update this policy as MinDrop changes. We'll change the effective date above and, for material changes, tell you in the app or by email before they take effect.
Contact
Questions or requests: [email protected].