GuideMind Privacy Policy v1.0

1. Controller

This Privacy Policy explains how Softina ("Company", "we", "us") processes personal data when you use GuideMind.

Contact: privacy@softina.fi

2. Data We Process

2.1 Account and identity data

• Firebase user identifier (UID)
• authentication status (guest/registered)
• email (if provided for email/password auth)

2.2 Guide data

• guide content you create/edit (model name/type/brand, sections, safety notice)
• timestamps (created/updated)

2.3 Input data for generation

• photos and text submitted for generation
• metadata needed to process requests

2.4 Device/app telemetry

• app version, platform, locale
• crash diagnostics (Crashlytics)
• analytics events (aggregated product metrics)

2.5 Legal acceptance events

• Terms/Privacy acceptance timestamps and versions
• waiver acceptance events (e.g., hide-disclaimer waiver)
• waiver acceptance for first saved instruction text edit
• related audit fields (app version, platform, locale)

3. How We Use Data

We process data to:

• provide and maintain the Service,
• generate and display guides,
• synchronize your guides across sessions/devices,
• enforce usage limits and premium entitlements,
• monitor reliability and prevent abuse,
• comply with legal obligations,
• keep evidence of legal acceptance actions.

4. AI Processing and Photos

• User-submitted photos are processed through backend proxy for generation workflows.
• Product requirement states stream-only handling for photos (no permanent photo storage by default in app backend storage).
• AI-generated output can be inaccurate; users must verify against official sources.

5. Legal Basis (jurisdiction-dependent)

Depending on applicable law, processing may be based on contract performance, legitimate interests (security, reliability, abuse prevention), legal obligations, and consent where required.

6. Data Retention

Current target retention policy:

• AI operational logs: up to 14 days (no PII by design target),
• legal acceptance records: retained as required for legal defensibility and compliance,
• account/guide data: retained until account deletion or as legally required.

Exact retention windows must be finalized with counsel and reflected in production policy.

7. Sharing and Processors

We may use service providers (processors), including:

• Firebase (Auth, Firestore, Functions, Analytics, Crashlytics),
• OpenAI (AI generation APIs),
• Adapty (subscription management),
• Apple/Google (billing and platform services).

We share only data necessary for service operation, security, and compliance.

8. International Transfers

Data may be processed in countries other than your own depending on our infrastructure/providers. We apply appropriate safeguards required by law.

9. Your Rights

Subject to applicable law, you may have rights to access, correction, deletion, restriction or objection, data portability, and complaint to a supervisory authority.

10. Account Deletion

You can request account deletion from the app. Product requirement: delete auth identity and associated user data from primary systems, subject to legal retention requirements.

If you cannot access the app, GuideMind may also provide a public account-deletion request page or support contact flow for store-compliance purposes.

11. Children

The Service is not intended for children under the minimum legal age in applicable jurisdictions.

12. Changes to Privacy Policy

We may update this Privacy Policy. If changes are material, renewed in-app acceptance may be required before continued use.

13. Contact

Privacy contact: privacy@softina.fi
Legal contact: privacy@softina.fi
Address: Lösmäntie 25A, 83500 Outokumpu, Finland