Privacy Policy

Tamind ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, why we collect it, and how we use and protect it when you use the Tamind Chrome Extension and related services (collectively, the "Service").

By using Tamind, you agree to the collection and use of information as described in this policy. If you disagree, please do not use the Service.

1. Information We Collect

We collect only what is strictly necessary to provide the Service. We do not sell your personal data.

1.1 Information from Google Sign‑In (OAuth)

When you authenticate with Google, we receive and store the following from your Google profile:

• Your email address
• Your display name
• Your profile picture URL (avatar)
• A unique Google ID (used only to identify your account; never exposed to third parties)

We do not receive or store your Google password or any other Google account data.

1.2 Usage & Account Data

• Your subscription plan (Free, Pro, or Pro Plus)
• Your generation usage count and quota
• Your Lemon Squeezy subscription ID (when you subscribe to a paid plan)

1.3 Content You Generate

When you trigger an AI generation, the following is stored and linked to your account:

• The URL and title of the source webpage
• The extracted text from the webpage (used solely to generate your requested content)
• The AI-generated result (summary, quiz, flashcards, key points, elaboration, or podcast script)
• For podcasts: the generated audio file (stored in a private, authenticated storage bucket)
• The action type, status, and timestamp of each generation

All generation data is private to your account. Access requires a valid authentication token — no generation can be accessed by another user.

1.4 Information We Do NOT Collect

• We do not track your general browsing history
• We do not collect data from pages you visit without explicitly triggering a generation
• We do not use cookies for tracking or advertising
• We do not collect payment card details (payments are handled by Lemon Squeezy)

2. How We Use Your Information

• Authentication: Your Google profile data is used to create and manage your account and issue secure session tokens (JWT).
• Service delivery: Extracted text is sent to our AI providers to generate the content you request and is not used for any other purpose.
• Quota management: Usage count and plan data are used to enforce free tier limits and manage your subscription.
• History archive: Generation records are stored so you can revisit and re-export your results.
• Service improvement: Aggregate, anonymised usage statistics may be used to improve the Service.

3. Third‑Party Services

Tamind relies on the following third-party services. Each has its own privacy policy:

We only share the minimum data required by each provider. We do not sell or rent your data to any third party.

4. Data Security

• All data is transmitted over HTTPS/TLS.
• Authentication is enforced via signed JWT tokens. Your user identity is always verified server-side — the client never has authority over user identification.
• Generation data is accessible only to the authenticated user who created it. Every API request is verified against your token before any data is returned.
• Podcast audio files are stored in a private Supabase Storage bucket with authenticated access.
• We do not log or store raw JWT tokens.

5. Data Retention

• Your account data is retained for as long as your account is active.
• Generation records (history) are retained to support the Archive feature. You may delete individual entries from the Archive.
• If you delete your account, all associated data (profile, generations, audio files) is permanently deleted within 30 days.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data (your name and avatar sync automatically from Google on each login)
• Delete your account and all associated data
• Export your generation history
• Object to certain processing

To exercise any of these rights, contact us at privacy@tamind.app.

7. Children's Privacy

Tamind is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page. Continued use of the Service after changes constitutes acceptance of the updated policy.

9. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us: