Privacy Policy
Effective Date: 28 July 2026 · Last Updated: 28 July 2026
App-owner note: This page is maintained by MultiMind to answer common privacy and security questions about MultiMind. It describes the controls and practices we have currently enabled. It is not an independent certification, legal opinion, or guarantee.
Welcome to MultiMind ("MultiMind", "we", "our", or "us").
We are committed to protecting your privacy and handling your personal data transparently and securely. This Privacy Policy explains how we collect, use, disclose, store, and protect your personal data when you use the MultiMind website, applications, and related services (collectively, the "Service").
This Privacy Policy is intended to comply with the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the UK GDPR where applicable, and other relevant data protection laws.
By using the Service, you acknowledge that you have read this Privacy Policy.
1. Data Controller
The controller of your personal data is:
If MultiMind is later operated by a registered legal entity, this Privacy Policy will be updated with the company's legal name, registered office, and registration number.
2. Scope of this Policy
This Privacy Policy applies to:
- visitors of our website;
- registered users;
- subscribers;
- customers purchasing paid plans;
- anyone interacting with the MultiMind Service.
3. Personal Data We Collect
Depending on how you use the Service, we may collect the following categories of personal data.
3.1 Account Information
We may collect:
- email address;
- authentication provider;
- encrypted authentication identifiers;
- profile settings;
- account preferences;
- multi-factor authentication status.
We do not store your password if authentication is provided through a third-party identity provider (such as Google).
3.2 User Content
When using MultiMind, you may voluntarily submit:
- prompts;
- debate questions;
- follow-up chat messages;
- conversation history;
- AI-generated responses;
- selected AI models;
- selected AI roles;
- ratings and feedback;
- other content you choose to provide.
Please do not submit confidential, highly sensitive, medical, financial, or regulated information unless absolutely necessary.
3.3 Subscription and Billing Information
If you purchase a subscription, we process:
- subscription plan;
- subscription status;
- invoices;
- payment identifiers;
- usage quotas.
Payments are securely processed by Stripe. MultiMind never stores complete payment card numbers or CVV codes.
3.4 Technical Information
We automatically collect technical information including:
- IP address;
- browser type;
- operating system;
- device information;
- language settings;
- timestamps;
- session identifiers;
- security logs;
- diagnostic information.
3.5 Usage Information
We collect information about how you use the Service, including:
- debates created;
- AI models selected;
- features used;
- response generation;
- clicks;
- settings;
- error reports;
- performance metrics.
4. How We Use Your Personal Data
We process personal data for the following purposes:
- providing and operating the Service;
- authenticating users;
- generating AI debates;
- routing requests to selected AI models;
- maintaining conversation history;
- processing subscriptions and payments;
- allocating monthly usage quotas;
- providing customer support;
- improving product quality;
- monitoring performance;
- detecting abuse and fraud;
- ensuring security;
- complying with legal obligations;
- communicating important service updates.
5. Legal Basis for Processing
Where GDPR applies, we process personal data on one or more of the following legal bases.
Contract Performance — Article 6(1)(b) GDPR
We process data to:
- create and manage your account;
- provide AI debates;
- process subscriptions;
- provide customer support;
- deliver the Service.
Legitimate Interests — Article 6(1)(f) GDPR
We process certain information for our legitimate interests, including:
- fraud prevention;
- abuse prevention;
- cybersecurity;
- product improvement;
- infrastructure monitoring;
- service reliability;
- maintaining debate history;
- enforcing our Terms of Service.
Consent — Article 6(1)(a) GDPR
Where required by law, we rely on your consent, including for optional cookies and marketing communications. You may withdraw consent at any time.
Legal Obligations — Article 6(1)(c) GDPR
We process information where necessary to comply with legal obligations, including tax, accounting, and regulatory requirements.
6. AI Processing
MultiMind allows users to compare and debate multiple AI models.
When you submit prompts, questions, or messages:
- your prompt;
- relevant conversation context;
- selected models;
- selected settings
are transmitted through OpenRouter to the selected AI model providers solely for generating AI responses.
MultiMind does not use your prompts to train its own AI models.
Third-party AI providers process submitted content according to their own privacy policies.
We recommend that you do not submit confidential or highly sensitive information when interacting with AI models.
7. Third-Party Service Providers
To operate the Service, we rely on carefully selected service providers.
Current providers include:
| Provider | Purpose |
|---|---|
| Lovable | Application hosting and infrastructure |
| Supabase | Database, authentication and storage |
| Stripe | Subscription management and payment processing |
| OpenRouter | AI request routing |
| Cloudflare | CDN, security and Turnstile verification |
Additional providers may be introduced as the Service evolves.
Each provider processes personal data only as necessary to provide its services.
8. International Data Transfers
Some of our service providers may process personal data outside the European Economic Area (EEA).
Whenever personal data is transferred internationally, we implement appropriate safeguards such as:
- European Commission Standard Contractual Clauses (SCCs);
- adequacy decisions;
- contractual protections;
- appropriate technical and organisational safeguards.
9. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy.
Typical retention periods include:
| Data Category | Retention |
|---|---|
| Account information | Until account deletion and any applicable legal retention period |
| Debate history | Until deleted by the user or account deletion |
| Subscription information | Duration of subscription and legal retention period |
| Billing records | As required by applicable tax and accounting laws |
| Security logs | As reasonably necessary for security and fraud prevention |
| Support communications | Until the support request has been resolved and for a reasonable period thereafter |
Following account deletion, personal data will be deleted or anonymised unless legal obligations require us to retain certain information.
10. Security
We implement appropriate technical and organisational measures designed to protect personal data, including:
- encrypted connections (TLS);
- authentication controls;
- role-based access controls;
- infrastructure monitoring;
- security logging;
- encrypted data storage where applicable;
- backups;
- abuse detection;
- vulnerability management.
Although we strive to protect your information, no method of electronic storage or transmission is completely secure.
11. Cookies
MultiMind uses cookies and similar technologies.
Essential Cookies
These cookies are necessary for:
- authentication;
- maintaining user sessions;
- security;
- fraud prevention;
- operation of the Service.
Essential cookies cannot be disabled.
Functional Cookies
Functional cookies remember user preferences and improve usability.
Analytics Cookies
Where analytics services are enabled, analytics cookies help us understand how the Service is used. Where required by law, analytics cookies are used only with your consent.
12. Your Rights
Depending on your location and applicable law, you may have the right to:
- access your personal data;
- correct inaccurate information;
- delete your personal data;
- restrict processing;
- object to processing;
- request data portability;
- withdraw consent;
- lodge a complaint with your local data protection authority.
To exercise your rights, contact us at: contact@multimind.pro.
We will respond within the timeframe required by applicable law.
13. Children's Privacy
The Service is intended for users aged 16 years or older.
We do not knowingly collect personal data from children.
If we become aware that personal data has been collected from a child in violation of applicable law, we will delete it as soon as reasonably possible.
14. Automated Decision-Making
MultiMind does not use personal data for automated decision-making that produces legal or similarly significant effects within the meaning of Article 22 GDPR.
15. Changes to this Privacy Policy
We may update this Privacy Policy from time to time.
Whenever material changes are made:
- we will update the Last Updated date;
- where required by law, we will notify users through the Service or by email.
Continued use of the Service after such updates constitutes acceptance of the revised Privacy Policy where permitted by applicable law.
16. Contact
For questions regarding this Privacy Policy or your personal data, please contact:
17. Supervisory Authority
If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with the supervisory authority responsible for data protection in your country of residence or place of the alleged infringement.
If you are located in the European Union, you may contact your national Data Protection Authority (DPA). A list of EU supervisory authorities is available on the website of the European Data Protection Board (EDPB).
18. Questions
If you have any questions about this Privacy Policy or how we process your personal data, please contact us at:
We will be happy to assist you.