What OwnMynd can see, and what it keeps.

Who we are

OwnMynd is a personal instrument for your writing voice (the Mynd Model). The website is https://ownmynd.com. Contact: privacy@ownmynd.com.

Scoring runs on a server we operate (cvi-api, hosted on Render). Accounts and stored metrics live in Supabase. We do not sell personal data. We do not show ads in the product.

Limited use (Chrome Web Store)

User data from the OwnMynd website and Chrome extension is used only to provide and improve OwnMynd scoring for that person. It is not sold. It is not used for unrelated advertising. It is not used to determine creditworthiness. Transfers to our processors (Supabase and Render) exist only to run the product.

Your account

When you sign up we store your email and a hashed password through Supabase Auth. You must be at least 18. We ask you to confirm that in-app without a birth date. We do not knowingly keep accounts for children under 18. Existing accounts are not deleted automatically.

Writing you give us

You paste or upload text on the website, or you choose text in the Chrome extension. That text is analyzed in memory to compute metrics. We do not store the writing as text after scoring. We do not send your writing to a language model.

What we do store on your account:

• Numbers about the writing (vocabulary range, sentence shape, and related metrics).
• Your writing score for that piece, when a baseline for that kind of writing exists.
• Your daily check results: which questions you got right, how many ideas you recalled, how sure you said you were, how long each answer took, how you said you slept and felt, how much you said you used AI the day before, whether you said you did it on your own, and the Mynd score built from them. Daily checks are never mixed with pasted writing.
• Not the words you type in a daily check. Typed answers and what you remember from the passage are scored when you submit and then thrown away. No AI model reads them.
• Check integrity counts: how many times and for how long you left the tab, how many pastes were blocked, and typing counts in the check’s text boxes (number of keys, deletions, pauses over two seconds, and bursts). Never which keys you pressed, and never anywhere outside a daily check.
• Key points you choose to add after scoring a piece (up to three short bullets). They are kept only until a daily check tests you on them, or 14 days at most, then deleted; only the recall score stays. They never go to research.
• Your answers to the setup questions (kinds of writing, how you use AI, school/work/personal).
• Labels you attach (writing type, how much AI was involved, whether it was typical, tired, rushed, and similar closed lists).
• Optional private notes you type. Those stay on your account only.
• Averaged baseline metrics per writing type, not the original samples.
• Names you invent for writing types.
• Settings, including whether you contribute to research.
• Whether you skipped or completed a short exercise. We do not store the words you wrote in it.

Copies of baseline words may remain in this browser on this site address so you can re-read what 100 means. A different browser, device, or site address does not have that copy. Those copies are never uploaded as a library to our servers.

Chrome extension

Single purpose: let you score writing you choose against your OwnMynd baseline.

The extension can show a small bubble on ordinary websites so it is there when you write. It does not scrape pages in the background. It does not keep a history of sites you visit. Highlight, paste, or use visible page text only after you open the panel. Google Docs often cannot yield a highlight; paste is the fallback. “Use entire page” is hidden on Google Docs so menu chrome is never treated as your sample.

When you score, the extension sends over HTTPS:

• The sample you chose.
• The labels you set.
• Session tokens so the score is saved to your account.

On this computer it stores login tokens and widget settings in Chrome storage. Optional inactivity reminders use Chrome notifications only if you turn them on in Settings.

Chrome permissions we request, and why:

• activeTab and scripting. These let you open the panel on the tab you are looking at and read the selection or visible text only after you open it.
• storage. This keeps your login tokens and widget settings on this computer after Connect.
• alarms and notifications. These enable the optional inactivity reminder you turn on in Settings. Off by default. Never scores by itself.

Host access is the scoring API (cvi-codebase.onrender.com), Supabase (session refresh), and ownmynd.com (Connect). The packaged extension does not download extra JavaScript to run. It calls those HTTPS APIs. A content script is registered on ordinary http and https pages so the bubble can appear where you write. That is not a background scrape.

Uninstalling the extension removes local extension storage. Your website account is separate until you delete it in Settings.

Connect happens on Settings after you install the extension. Signing in on the website is not the same as Connect.

Setup and scoring engine

Scoring uses spaCy on our API, not a chat model. During setup, a helper may use your labels and sample counts to pick the next question. It never uses your writing or names you invent. If that helper is off, fixed rules pick instead.

Research contribution (on by default)

Unless you turn it off in Settings (“Help improve OwnMynd for everyone”), scoring writing, saving a baseline, and finishing or skipping an exercise also write anonymous research measurements. They help us learn which exercises help people most. They never include your writing, your name or email, private notes, or names you invented for a kind of writing. They include only the writing kind (for example “essay”, or just “custom”).

Research rows are linked to a separate research ID, not your account ID or email. Richer measurements (exact metric values rather than coarse ranges) are only shared after you confirm you are 18 or older.

Turning the switch off stops new sharing. Deleting your account also removes the research rows linked to your research ID and blocks them from coming back. Anonymous measurements that can’t be traced back to you may remain, as may provider logs and backups until they expire.

Landing page counts

On the public home page we count a few anonymous events so we can tell whether the short three-question try is useful: starting it, answering a question (which question number, never your answer), finishing it, skipping it, and which button was clicked. Each count holds the event, the time, and a random ID that lasts only for that browser tab. It holds no account ID, no email, no text, and no IP address or browser details (our database provider's short-lived request logs see network details, as with any website). There are no cookies and no third-party analytics. Counts are deleted after 90 days. If your browser sends Global Privacy Control or Do Not Track, nothing is counted. Your answers to the try stay in your browser.

When you create an account from a home page button, we save which part of the page you came from (for example the try or the final section) and whether you finished the try on that device, once, on your account settings.

What we do not collect today

• Keystrokes or typing rhythm anywhere except the summary counts inside a daily check.
• Silent reading of your tabs.
• The contents of AI prompts or model replies.
• Payment card data (there is no checkout yet).
• Marketing analytics cookies. A small preference cookie may remember UI layout.

Children

OwnMynd is not for children under 18. We do not knowingly collect personal information from them. If you think a child under 18 has an account, email privacy@ownmynd.com and we will delete it.

How long we keep it

Account metrics stay until you delete the account. Key points are deleted once a daily check tests them, or after 14 days. Session tokens in the extension last until you disconnect, uninstall, or they expire. Browser library copies last until you clear site data or delete the account (we clear the copy on this origin when you delete).

Export and deletion

In Settings, under Your data, you can download a file of your measurements, labels, notes, baselines (numbers only), daily checks, key points you have not been tested on yet, and exercise events. You can also delete the account: choose Delete account, then type your email and the word DELETE to confirm.

After deletion, disconnect or remove the Chrome extension so tokens on this computer are dropped. You can also email privacy@ownmynd.com if something did not work.

Security

Traffic to our API and to Supabase uses HTTPS. We do not claim extra certifications we do not have.

Changes

If this policy changes in a way that matters, we will update the date at the top of this page. The live product is the source of truth; marketing copy on the landing page is not a substitute for this policy.

Related: Terms of use.