Legal & privacy · Documentation

Privacy Policy

A quiet space for your routines, with clear boundaries for your data.

Last updated: Applies to: emptymind.app & the Empty Mind tracker No advertising trackers
01 / Philosophy — Foundations

1. A deliberate approach to privacy

Empty Mind is a habit and days-since tracker operated by RintStudio L.L.C., Kosovo. We are responsible for the personal information described in this policy. It covers our website and web app at emptymind.app.

We use your information to create and secure your account, save and sync your entries, remember your preferences, manage plan access, and answer your requests. We do not sell your personal information, share it for targeted advertising, or use advertising trackers, session replay, or third-party product analytics.

Where applicable data-protection law requires a legal basis, we rely on providing the service you request for account and tracking features; our legitimate interests in security, reliability, and responding to inquiries; legal obligations where required; and consent where a particular use requires it. You may withdraw consent for consent-based processing by contacting us.

Your routines are personal

We use your tracking records to run the tracker, not to build advertising profiles.

No ad tracking
02 / Ledger — Inventory

2. Information we collect

Some information comes from what you enter; some is needed to deliver a working, signed-in service.

Account information

Your email address, unique account ID, sign-in provider, and authentication records. If you sign in with Google, Firebase receives basic profile information such as your name, email, and profile picture. Firebase Authentication handles password credentials; we do not store plaintext passwords in the tracking database.

Tracking entries

Entry titles, types, start dates, creation times, colors, schedules, daily habit check-ins, and days-since break dates. Titles are your choice: avoid adding sensitive information you do not want stored in the cloud.

Backgrounds & preferences

Background-image URLs, viewing timestamps, and favorites are stored with your account. Your browser also remembers background settings, a pinned image, and your Focus or Grid view preference.

Service & support records

Plan status and related access records; messages and contact details you send us; and technical request information processed by our providers, such as IP addresses, browser details, request times, and security or error logs.

We do not request access to your contacts, microphone, camera, precise device location, or activity in other apps. Background viewing history is a feature of the tracker, rather than cross-site browsing history.

03 / Architecture — Storage

3. How data is stored & shared

Google Firebase & Google Cloud. We use Firebase Authentication for sign-in, Realtime Database for cloud records, and Firebase Hosting and Cloud Functions to deliver the service. Account-based database rules restrict ordinary users to their own records. Service infrastructure and authorized administration can process data as needed to operate, secure, and support the app.

Account-based cloud syncEncrypted in transit
▣Your browser◇Firebase▯Your other devices

This is not end-to-end encryption: the service can process stored records to provide its features.

Browser storage. Firebase uses browser storage to maintain your sign-in session. We use local storage for the preferences described above. These are functional uses; we do not set advertising or analytics cookies. You can clear site data in your browser, but this may sign you out or reset preferences and does not delete your cloud account.

Background images. The app requests images directly from Lorem Picsum and its image-delivery providers. Those providers receive your IP address and normal browser request information when an image loads. We do not send them your entry titles or account ID.

Icons. The app loads its icon stylesheet and font files from Cloudflare’s cdnjs service. Cloudflare receives technical request information, including your IP address and browser details, to deliver those files. See Cloudflare’s Privacy Policy.

Support email. Messages sent to our support address are handled through Gmail. Google processes those messages to deliver and store our correspondence.

Other disclosures. We may disclose information where reasonably necessary to comply with law, protect rights and service security, or transfer the service in a merger, acquisition, or business sale, subject to applicable privacy requirements. We do not provide your tracking entries to advertising networks or data brokers.

International processing. We operate from Kosovo. Our Google infrastructure includes services in the United States, and providers may process data in other countries. Where applicable law requires protections for international transfers, we rely on the relevant provider agreements and legally required safeguards, including standard contractual clauses where applicable.

Provider information: Google Privacy Policy · Firebase privacy and security.

04 / Control — Autonomy

4. Your data, retention & deletion

You can view, edit, and delete tracking entries in the app. We retain your account and cloud records while your account exists so that your history remains available. Background viewing history is limited to the most recent 1,000 stored images.

  • Access & a copy of your data

    Email emptymindsupport@gmail.com to request access or a copy. There is currently no self-service data-export button.

  • Delete your account

    Open the account menu and choose “Delete Account.” After you verify your sign-in, the deletion flow removes your tracking records, background history and favorites, plan-access records, and linked sandbox checkout records from our active database, then deletes your Firebase Authentication account.

Account deletion does not automatically erase support emails, provider-held records, operational logs or any provider backups. Such records may remain for the relevant provider’s retention period or where needed for security, legal obligations, or resolving disputes. We have not configured a separate backup-retention schedule. Some local preferences can remain on your device until you clear browser site data. If deletion fails or you need help, contact us.

Depending on the law that applies to you, you may also have rights to correction, erasure, portability, restriction, or objection to processing, and to complain to your local data-protection authority. Contact us to exercise these rights. We may need to verify account ownership and will respond within the period required by applicable law.

05 / Service — Boundaries

5. Payments, age limits & policy changes

Payments are not live

Paid subscriptions are in preparation. The current Paddle integration is a test sandbox. If you participate in checkout testing, Paddle receives your account ID and the information you enter in its checkout; we store linked transaction and subscription IDs, status, and access dates. Use test payment details only. See Paddle’s Privacy Policy.

For ages 16 & over

Empty Mind is intended for people aged 16 or older. We do not knowingly collect personal information from children under 16. If you believe a child has provided information, contact us so we can investigate and remove it as appropriate.

We will update this policy to explain live payment processing before paid subscriptions launch. Pricing and refund terms are described separately on our Pricing page and in our Refund Policy; this privacy policy does not establish a refund entitlement.

We may update this policy as the service or legal requirements change. The date at the top identifies the latest version. For material changes, we will provide an appropriate notice on the website or in the app, and seek consent where required.

06 / Contact — Resolution

6. Contact & privacy inquiries

For questions about this policy, data requests, or concerns about your privacy, contact the operator responsible for Empty Mind:

RintStudio L.L.C.

Kosovo
Email: emptymindsupport@gmail.com

Please write from the email linked to your account where possible. Do not include your password or payment-card details. We may ask for information needed to verify your request.

Mindfulness in every detail.

Your space for the routines that matter.

Return to app