Your first conversation is one Daily Fuse awayGet the app

Privacy Policy

Last Updated: 16/10/2026

1. Who we are

Mindfuse is operated by Joeri Bonnevits in the Netherlands, who is the controller of your personal data under the EU General Data Protection Regulation (GDPR). Contact: [email protected].

This policy covers the Mindfuse app and the mindfuse.io website. It explains what we process, why, who helps us, how long we keep it, and what your rights are.

2. The short version

  • Your calls are not recorded. We do not store or analyse what is said.
  • You sign up with your phone number. We use it as the key of your account, to prevent abuse and for safety. The people you talk to never see it.
  • We ask your date of birth to make sure you are 18 or older.
  • We keep some information about calls (when they happened, how long they lasted, technical quality), but not their content.
  • After a conversation, the app saves a Weave for you: a picture made from how loud each voice was over time, never from the audio or the words. You can delete any Weave, and they are deleted with your account.
  • If someone is reported, we keep safety records, even after an account is deleted, to protect other people.
  • We do not sell your data, and we do not show ads.
  • You can delete your account in the app at any time.

3. What we collect and why

A. Your account

  • Your phone number. You sign up by entering it and confirming a code we send by text message (through Firebase Authentication, a Google service). Your phone number is the key of your account record. We also use it to stop abuse (for example, so a free trial can only be used once per number), and in safety and moderation records. It is never shown to the people you talk to.
  • Your date of birth, which you enter once at sign-up so we can check that you are 18 or older. If you are under 18, you cannot use Mindfuse. In that case we keep a record that this phone number is not eligible, so the block cannot be avoided by signing up again.
  • Optionally, why you want to use Mindfuse (your usage intent), including any text you type in the "other" option. You can skip this question.
  • Basic account status, such as whether you have had a conversation, when you were last active, and your notification settings.

B. Calls and matching

  • Calls are not recorded, and audio is not stored or analysed. The app does check, as a technical signal, whether audio is flowing in a call (not what is said), so we can tell real conversations from failed connections.
  • Calls are peer-to-peer: the audio goes directly between your device and the other person's device, encrypted by the WebRTC standard. To set up a direct connection, the two devices exchange network information, including IP addresses. When a direct connection is not possible, the audio is relayed through Cloudflare's TURN service, which then processes your IP address. Google's STUN servers are used to help devices find a route to each other.
  • Matching is anonymous. To match people and run calls, we process temporary matching and connection records with an internal account id.
  • Call information (metadata): match ids, when a call connected and ended, how long it lasted, the countries of both people (worked out from the country code of each phone number, on our server), and a rough time-zone offset (taken from your phone's time-zone setting) so the app can show the other person's time of day.
  • Call diagnostics, such as connection type, platform (iOS or Android), app version, whether a relay was used, and why a connection failed. We use these to make calls more reliable.
  • A record of which accounts have been matched with each other (by internal id, not phone number), with when they were matched and connected. We use it to confirm, when someone is reported, that the two people really did talk.

C. Reports, blocks and safety

  • When you report someone, the report contains the category you chose, the reason you typed, your phone number, the internal id of the person you reported, the time and, where available, the match id.
  • When you block someone, we store the block so you are not matched again.
  • For serious reports, we keep a safety record with the non-content facts about the match (for example when it happened and how long it lasted), both people's phone numbers and countries, and the outcome. The founder is alerted about serious reports and reports that someone may be at risk.
  • Records of suspensions and bans, and counts of how often an account has been reported and by how many different people.
  • If you are suspended and send an appeal in the app, we store your appeal text, your internal account id, which suspension it is about, when you sent it, your app version, and our answer. An appeal does not contain your phone number.

D. Notifications

  • If you allow notifications, we store your device's push token (Firebase Cloud Messaging) and your notification settings. We use them to tell you when someone is looking for a conversation, to send Daily Fuse and event reminders, and to send occasional reminders to come back. We avoid sending them during night-time quiet hours, based on an estimate of your local time from your country.
  • You can turn notifications off in the app or in your phone's settings at any time.

E. Payments

  • Purchases are handled by the Apple App Store or Google Play. We never see your card or bank details.
  • We use RevenueCat to manage subscriptions. RevenueCat receives your internal Mindfuse account id and your purchase records (such as which product, when it started and when it renews or ends), and we keep a copy of your current access status.

F. App analytics, crash reports and security

  • Our own usage events (for example: which onboarding step you reached, that you started a search and how it ended, that you saw an offer). These are stored in our own database with an install id and, once you are signed in, your account id. Before sign-up they can include the country calling code you selected.
  • Crash reports through Firebase Crashlytics, which include technical information about your device, the app version and what went wrong.
  • Firebase App Check, which uses Google Play Integrity (Android) and Apple App Attest (iOS) to check that requests come from the real Mindfuse app. This protects against fraud, such as abuse of text-message sign-up codes.
  • Usage counters to prevent abuse, such as limits on how often an account can be matched or use the call relay.

G. Feedback and support

  • If you send feedback in the app, we store your message, the category, your platform and app version, your internal account id and, if you give it, your email address so we can reply. We keep feedback for support and safety, also after you delete your account (see section 9).
  • If you email us, we keep the email to answer you.

H. Weaves (your conversation keepsakes)

  • After a conversation of at least a minute, the app saves a "Weave" record. It is what the app draws your Weave from. It contains:
    • how loud each voice was over the course of the conversation, as a series of loudness levels. This is never audio and never words: nobody can hear or work out what was said from it;
    • the timing of the turns, meaning who was speaking when, and how often you went back and forth;
    • when the conversation started and how long it lasted;
    • the local time offset of both of you, so the Weave can show each person's time of day;
    • the country of the other person (worked out on our server from the country code of their phone number) and whether they were a subscriber. Never their phone number, name, account id or anything else that identifies them;
    • a random number (a seed) and some drawing settings, so your Weave looks the same every time, and details such as how many conversations you have had and your Founding Member number if you have one;
    • optionally, a private note you write on a Weave. Only you can see it.
  • The record is stored under your account in our database (with a copy on your phone so the app works quickly), and only your account can read it. The other person gets their own Weave of the same conversation, which includes the loudness of both voices, your country and your time of day, but nothing that identifies you.
  • To fill in the other person's country, our server keeps a short note per account of your most recent matches (the other person's country, whether they were a subscriber and when you were matched). Only your account can read it.
  • First Light. Your very first Weave is marked as your First Light, and there is only one per person. To keep it that way, we store that your account has one, and a record keyed on a one-way coded (hashed) form of your phone number that does not contain the number itself.
  • You can delete any single Weave in the app at any time, together with its note.

I. Invites and referral codes

  • You can invite friends with a personal link (mindfuse.io/i/ followed by a short code). The code is random and is not your phone number or account id. We store which account each code belongs to.
  • When someone signs up through your invite, we record that you invited them, when, and how the invite is going (for example whether they have had their first 5-minute conversation). We use this only to give both of you the bonus conversations, and to count how many invites you have been rewarded for.
  • To prevent abuse, such as inviting yourself, we check invites against your own account and phone number, and we keep a one-way coded (hashed) form of the invited person's phone number, and of a device id if the app sends one, so the same phone or device cannot be counted twice. These coded records do not contain the number itself. An invite is refused if either account is suspended or banned.
  • Bonus conversations and any extra unlimited time you earn are stored with your access status.
  • If you visit an invite link without the app, the invite page shows the code so you can enter it in the app yourself. The page does not store it.

We do not use your location from your phone's GPS, your contacts or your photos. The "country" we use comes from your phone number's country code, worked out on our server, and your time of day comes from your phone's time-zone setting. We never use GPS or your IP address to work out where you are.

4. What the other person sees

The person you talk to hears your voice. They do not see your name, phone number, photo or a profile. In some screens, such as the post-call screen and The Weave keepsake card, the app shows them the country you are in (based on your phone number) and your time of day, and shows you theirs. If you choose to share The Weave card, it goes wherever you share it.

Each of you keeps your own Weave of a conversation you had together. Theirs includes the loudness pattern of both voices, the turn timing, your country and your time of day, but not your phone number, name or any other identity. Your private notes are never shown to them.

5. Our legal bases

  • Contract (providing the service you signed up for): your account, phone verification, matching and calls, call metadata needed to run calls, payments and your access status, your Weaves and First Light, and invites and the bonus conversations they earn.
  • Legitimate interests (keeping people safe and the service working): the age check and the under-18 block, reports, blocks, moderation and safety records, anti-abuse and anti-fraud measures (including the trial record, the First Light and invite records, App Check and usage limits), security, call diagnostics, crash reports and our own usage analytics to improve Mindfuse. We have weighed these interests against your privacy; you can object (see section 10).
  • Consent: push notifications (which you allow in your phone and can turn off at any time), and analytics cookies on our website. You can withdraw consent at any time; this does not affect what happened before.
  • Legal obligation: for example keeping records the law requires, and responding to lawful requests from authorities.

6. Who we share data with

We do not sell your data. We share it only with:

  • Google (Firebase and Google Cloud): sign-in and text-message codes, our database, server functions, push notifications, Crashlytics and App Check. Also Google's STUN servers for call setup.
  • Cloudflare: the TURN relay for calls that cannot connect directly, and hosting of our website.
  • RevenueCat: managing subscriptions and purchases.
  • Stripe: processing payments for subscriptions bought on our website (name, email or phone number entered at checkout, and payment details, which we never see).
  • Apple and Google, as app stores: they process your purchases and app store account under their own privacy policies.
  • Website services: Google Analytics (only with your consent), Formspree (our website sign-up and application forms) and Featurebase (our public feedback board). See section 11.
  • Authorities, when the law requires it, or when it is needed to protect someone's life or safety, for example in cases of child exploitation.

The person you talk to is not someone we "share" data with, but they do hear your voice and may see your country and time of day (see section 4).

7. Data outside the EU

Some of the service providers above are based in, or process data in, the United States and other countries outside the European Economic Area. Where that happens, we rely on the safeguards the GDPR allows, such as the EU-US Data Privacy Framework where the provider is certified under it, and/or the European Commission's Standard Contractual Clauses. You can email us for more information about these safeguards.

8. How long we keep data

  • Your account data: until you delete your account.
  • Live call and matching records: deleted automatically shortly after the call, in most cases within about a day.
  • Safety and moderation records (reports, safety records, suspensions and bans): for as long as needed for safety and legal reasons, and reviewed periodically. These are kept even after the accounts involved are deleted, so that people who harm others cannot simply start again.
  • The under-18 record and the free trial record for a phone number: kept after account deletion so these protections cannot be bypassed. Neither contains your date of birth.
  • Your recent free-conversation use: when you delete your account, we keep a short record of when you used free conversations in the last 30 days, your bonus conversation totals (how many you were given and used) and, if you have one, when extra unlimited time from an invite ends. It is stored under a one-way coded (hashed) form of your phone number, without the number itself. We keep it for fair use and to prevent abuse, so deleting an account and signing up again does not reset your free conversations. If the same number signs up again, the record is moved to the new account and deleted straight away. Otherwise it is deleted automatically within about 31 days of deleting your account. Only if extra unlimited time from an invite was still running is it kept longer: until about 30 days after that time ends.
  • Weaves and their notes: until you delete them or your account. Your invite records: until you delete your account.
  • The coded (hashed) First Light and invite records for a phone number or device, and the list of past invite codes: kept after account deletion, so a First Light or an invite cannot be claimed twice and an old code never points to a new account. None of these contain your phone number.
  • Diagnostics and analytics: kept while they are useful to improve Mindfuse. We review these periodically.
  • Feedback and appeals: kept for support and safety, also after account deletion. You can ask us to remove them (see section 9).
  • Purchase records: kept by Apple, Google and RevenueCat under their own rules, and as long as tax and accounting law requires.

9. Deleting your account

You can delete your account in the app under Account, then Delete. For your security we ask you to confirm with a code sent to your phone. When you delete your account, we delete:

  • your profile, including your date of birth and notification settings;
  • our copy of your access status;
  • blocks you made;
  • your call and connection records and your presence status;
  • all your Weaves, including your private notes, and the note of your recent matches used to make them;
  • your invite details (your code settings and invite counts) and the record of who invited you;
  • your app usage events;
  • your sign-in account, including your phone number in Firebase Authentication.

We keep:

  • safety and moderation records, as described in section 8;
  • the free trial record for your phone number;
  • a hashed record of your free-conversation use in the last 30 days and your bonus conversation totals, for fair use and abuse prevention, deleted automatically within about 31 days (or when you sign up again with the same number), as described in section 8;
  • the coded (hashed) First Light and invite records described in section 8;
  • the list of invite codes, which keeps pointing to your old internal id (not your phone number) so the code can never be given to someone else, and the invite records of people you invited, which belong to their accounts and show only your internal id;
  • if you were blocked for being under 18, a record that the number is not eligible;
  • blocks other people made of you. These are their safety choice, so they stay in place: if the same phone number signs up again, those people are still protected. To make that work, we keep a record linked to a one-way coded (hashed) form of your phone number, without the number itself;
  • feedback you sent (your message, the category, your internal account id and, if you gave it, your email address) and any appeals you sent (your appeal text and internal account id), for support and safety. To have your feedback or appeals removed, email [email protected] and tell us the email address you gave with it, or roughly when you sent it and what it was about, so we can find it. After deletion it is no longer linked to your phone number;
  • records that contain only an internal id (or no identifier at all) and no longer link to your phone number once your sign-in account is deleted, such as call diagnostics, records of past matches and event sign-ups;
  • purchase records held by Apple, Google and RevenueCat.

Deleting your account does not cancel a subscription. Cancel it in your App Store or Google Play settings to stop future payments.

10. Your rights

Under the GDPR you have the right to:

  • access the personal data we hold about you and get a copy;
  • have incorrect data corrected;
  • have your data erased;
  • restrict how we use your data;
  • receive your data in a portable format;
  • object to processing based on legitimate interests;
  • withdraw your consent at any time, where we rely on consent;
  • not be subject to a decision based only on automated processing that significantly affects you, and to ask for a person to review it (see section 12).

To use any of these rights, email [email protected] from any address and tell us the phone number of your account. We may ask you to confirm it is really you. We will respond within one month. Some rights have limits, for example we may keep safety records where we have a strong reason to.

You can also complain to a data protection authority. In the Netherlands this is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl). If you live elsewhere in the EU, you can also contact the authority in your country.

11. Our website

  • Hosting. mindfuse.io is hosted by Cloudflare, which processes your IP address and basic request information to deliver and protect the site.
  • Analytics. We use Google Analytics to understand how the site is used, for example which pages are visited and which app store links are clicked. Analytics cookies are only set if you click Accept in the banner. Until then, Google Analytics runs in a restricted mode without analytics cookies. You can change your choice by clearing this site's data in your browser.
  • Google News button. Our pages load a script from Google News that shows a button to add Mindfuse as a preferred source in Google. Loading it means Google receives your IP address and browser information.
  • Forms. If you sign up for our email letter or apply to our affiliate program, what you enter (such as your email address and, for affiliates, your name, channel and audience) is sent to Formspree, which forwards it to us. Our contact form does not send anything itself: it opens your own email app with a message to [email protected].
  • Feedback board. Our feedback page shows a board hosted by Featurebase, under its own privacy policy.
  • Live numbers. Some pages fetch anonymous statistics from our server, which means our server (on Google Cloud) receives your IP address.
  • Browser storage. The site stores your light or dark theme choice and your analytics choice in your browser's local storage. These are not sent to us.

12. Automated safety measures

To protect users quickly, some safety measures happen automatically based on reports, for example a temporary suspension from matching while a serious report is reviewed, or a ban when several different people who we can confirm actually spoke with someone report them. These measures are reviewed by a person. If one affects you, you can explain your side and ask for a review by emailing [email protected].

13. Children

Mindfuse is only for people aged 18 and older. We ask for your date of birth at sign-up and block anyone under 18, tied to their phone number so it cannot be reset by reinstalling the app. We do not knowingly process data of minors beyond what is needed to keep them out. If you believe a minor is using Mindfuse, please tell us at [email protected] or report them in the app.

14. Security

We protect your data with measures such as encrypted connections, encrypted call audio, access rules on our database, and App Check. No system is perfectly secure, so we cannot guarantee absolute protection. If something goes wrong, we will act on it and inform you and the authorities where the law requires.

15. Not a crisis service

Mindfuse is not therapy or an emergency service. If you or someone else is in danger, contact your local emergency number. The app lists helplines you can call.

16. Changes to this policy

We will update this policy when what we do changes. The date at the top shows the latest version. If a change matters for how we use your data, we will tell you in the app or by other reasonable means before it takes effect.

17. Contact

Questions, requests or concerns? Email [email protected].

Add Mindfuse as a preferred source on Google