Privacy Policy

Last updated: October 17, 2026

BufferMind by ZCC Labs LLC

BufferMind is a real-time AI copilot for lectures, meetings, and conversations, operated by ZCC Labs LLC ("ZCC Labs", "we", "us"). It is available as a web app at buffermind.com, a macOS app downloaded from our website, and an iOS app from the App Store. This policy explains what data we collect, how we use it, who else can see it (including other BufferMind users when you use friends, messaging, calls, or sharing), how long we keep it, and the rights you have over it. Our Terms of Service govern your use of the Service.

Microphone, Camera, and Other Device Access

BufferMind never turns on your microphone or camera on its own. Capture starts only when you take one of the actions below, and stops when that action ends.

Microphone

• Recording. When you tap Record, your microphone audio is streamed to our speech-recognition provider for live transcription and translation. On iOS an active recording keeps the microphone open if you lock the screen or switch apps, so a lecture is not cut off; this applies only to a recording you started and have not stopped. After you tap Stop, iOS may keep the audio session "warm" for up to 30 seconds so a quick re-record starts without losing the first second of speech; no audio is captured during that window.
• Live Conversation mode (two-way interpreter). While this screen is open the microphone is held ready so that either side can talk immediately; audio leaves your device only while a "hold to talk" button is pressed.
• Voice messages. While you hold the talk button in a chat with a friend, a short audio clip (up to about a minute) is recorded and sent to that friend. Voice messages are not transcribed.
• Voice and video calls with a friend use the microphone (and, for video, the camera) for the duration of the call.
• Voice Typing (macOS). If you enable it in Settings, holding the fn key opens the microphone and streams your speech for transcription until you release the key.
• Microphone picker. Opening the input-device menu may briefly request microphone access so your operating system reveals device names; nothing is recorded.

System and tab audio

If you choose to transcribe audio playing on your computer (for example an online lecture), macOS asks for Screen & System Audio Recording permission because that is the system API that exposes audio from other apps. BufferMind requests the minimum 2×2-pixel video frame the API requires and discards it; no screen content is captured, stored, or transmitted — only the audio. On the web version, the browser's screen-share prompt is used for the same purpose and any video track is stopped immediately.

Camera and photos

The camera is used only when you choose to: make a video call, scan a friend's QR code, take a profile photo, capture a photo or video to send in a chat, or snap a problem for Andy (our AI assistant) to explain. Photos you pick from your library are selected through the system picker, which does not give BufferMind access to the rest of your library. On iOS we write to your Photos library only to save a video you just captured if sending it fails, so the clip is not lost.

Local network (iOS)

Calls with friends connect device-to-device where possible. iOS asks for local-network permission so that two devices on the same Wi-Fi can connect directly for better quality.

Accessibility and Screen Recording (macOS)

Voice Typing needs macOS Accessibility permission to notice when you press the fn key and to insert the transcribed text into the app you are using. The key listener subscribes only to modifier-key state changes (fn pressed or released); it does not see the characters you type, and it is removed entirely when you turn Voice Typing off. To insert text, BufferMind reads the type of the focused text field, places the text on the clipboard, pastes it, and restores your previous clipboard contents. The macOS app is distributed outside the Mac App Store and is not sandboxed; it checks for updates only when you ask it to (Settings → Check for updates), against our own update server, and that check does not include your account identity.

Push notifications (iOS)

If you allow notifications, we store your device's push token so we can notify you of new messages and incoming calls from friends. Notifications are delivered through Apple's Push Notification service and include the sender's username and a short preview of the message text (or the type of attachment). Apple may hold an undelivered notification for up to 24 hours. You can turn notifications off in iOS Settings at any time.

What we do not access

BufferMind does not read your contacts or address book, does not use your location, does not record keystrokes, does not use advertising identifiers, and does not track you across other apps or websites.

Guest & Anonymous Usage

You may use BufferMind as a guest without providing an email address. Guest accounts receive a temporary anonymous identifier for session management, are limited to shorter recordings, and cannot use friends, messaging, calls, QR codes, or referral features and are not discoverable by other users. Guest recordings are stored under the anonymous identifier and can be deleted from the app like any other recording; we may also delete inactive anonymous accounts and their data. If you later create an account, your guest data is not automatically linked to it.

Information We Collect

Account information

• Email address — used for authentication when you sign in with Google, Apple, LINE, or email/one-time code, and for account notices.
• Name and profile photo — the name provided by your sign-in provider (Apple shares your name only the first time you authorize BufferMind), a username ("BufferMind ID") you choose, and an optional profile photo you upload.
• Sign-in tokens — for Sign in with Apple we keep the refresh token Apple issues so we can revoke it when you delete your account.

Recordings and AI content

• Audio recordings — only when you actively record. We never record in the background without an active recording you started.
• Transcripts, translations, speaker labels, and timestamps generated from your audio.
• AI-generated content — session titles, summaries, highlights, answers to your questions, and your conversations with Andy, including photos you submit to Andy for explanation.
• Notes and context you provide — comments, course names, syllabus text, glossary terms, and "knowledge base" text you add to improve transcription or answers.
• Search index — to answer questions about a whole folder, transcripts are split into passages and converted into numerical embeddings stored alongside your data.

Friends, messaging, and calls

• Friend graph — friend requests you send and receive, accepted friendships, and private notes you keep about a friend (visible only to you).
• Messages — text, photos, videos, voice messages, and recording or folder cards you exchange with friends, with timestamps and read positions.
• Call records — for each voice or video call: who called whom, when, how it ended, and the connection details needed to set up the call (which include the IP addresses of both devices while the call is being established). We do not record or store the audio or video of calls.
• QR and referral codes — a friend-QR token (which you can reset) and a referral code attached to your account.
• Push token and device language — if you enable notifications.

Payments

• Web purchases are processed by Stripe. We store your Stripe customer ID, plan, and subscription status. We never see or store your full card number.
• App Store purchases are processed by Apple. We store the transaction identifiers Apple gives us and your subscription status so we can unlock your plan on every device.
• In-app purchase attempts — when an App Store purchase in the iPhone or iPad app fails, or you close Apple's payment sheet without buying, we record the outcome, Apple's error message, the product, your App Store country, the app version and device type, how long the attempt took, and where it started (for example whether you had reached your plan's limit, whether a recording was running, and whether a first-month offer was shown). These records are linked to your account, are used only to find and fix payment problems and to understand why purchases don't go through, never include payment details or Apple transaction identifiers, and are deleted after 180 days or when you delete your account.

Usage, quota, and technical data

• Usage ledger — for each metered action (minutes transcribed, AI questions, summaries, call relay data) we record when it happened, its category, and its cost to us, so we can apply your plan's allowance. The ledger does not contain the content of the action.
• Request logs — request identifiers, your user ID, the endpoint called, status, and timing, kept as billing evidence and to detect abuse. Our server logs do not contain the contents of recordings or messages.
• Device and app information — platform, app version, and network address as sent by your device with each request.
• Install identifier — the app generates a random install identifier stored on your device and uses it to count the free quota per device. It contains no device information and persists across reinstalls.
• Sign-up source — when you create an account, which client you first used it on, and on the web the campaign tags (utm parameters) of the link you arrived on plus the category of the site that referred you (for example "search engine" or "social network"), of the page you landed on, and, when a link was opened inside another app's browser (for example WeChat), which app that was. Recorded once, never updated, and never a full URL, a device fingerprint, or a browsing history.
• Aggregate web analytics — see "Tracking, Cookies & Analytics" below.

Support, feedback, and reports

• Feedback you submit in the app, together with your account email, is forwarded to a private channel our team uses for support.
• Reports of a message or user are sent to support@buffermind.com from your mail app and include the reported message identifier and username.

How We Use Information

We use the information above to:

• provide the Service: transcribe, translate, summarize, answer questions, sync your sessions across devices, deliver messages and calls, and show your profile to friends;
• operate your account, apply your plan's usage allowance, process payments, grant promotional allowances (for example a feedback bonus), and record which friend invited you;
• keep the Service safe: enforce usage limits, prevent fraud and abuse, investigate reports, and protect other users;
• check and improve the quality of AI answers, for example by re-running questions asked in BufferMind when we test a new AI model (see "AI Features and Your Content");
• respond to support requests and feedback, and send account or service notices;
• understand how the Service performs, using aggregated statistics (for example total hours transcribed) that do not identify you.

Where the GDPR or UK GDPR applies, our legal bases are: performance of our contract with you (providing the features you use), your consent (microphone, camera, notifications, cross-border transfer, and processing of voice and image data as described below), and our legitimate interests in securing and improving the Service, which we balance against your rights.

What Other Users Can See

Social features are one-to-one and require a mutually accepted friendship. There is no public feed or user directory. When you use them, other users can see:

• Your profile — your username, profile photo, and (for friends) when you became friends. People you have sent a friend request to do not see your photo until they accept; people who have sent you a request can see it. Your email address is never shown to other users. We do not show online status, typing indicators, or read receipts.
• Profile photos are served from an unguessable link that does not require sign-in. Anyone who has that link (for example a current or former friend) can view the photo until you replace or remove it.
• Messages and media you send — delivered to the friend you sent them to and kept in that conversation until un-sent or deleted.
• Recording cards. Sending a recording to a friend lets them listen to it, read the transcript and translations, and see your comments, Andy conversations, and speaker names while the card is available. If they tap Import, an independent copy of the audio, transcript, translations, summary, and highlights (but not your comments, Andy conversations, or speaker names) is created in their account. That copy belongs to them: you cannot revoke it, and it survives you deleting the original recording or your account.
• Public share links. If you create a share link for a recording, anyone with the link can view it without signing in. The public view contains the transcript, translations, and summary but not your comments, Andy conversations, or speaker names; audio is served through short-lived links. Delete the recording to revoke its link.
• Calls. Calls connect device-to-device where possible, which means the other participant's device can learn your network address. If either participant turns on live captions, the other participant's speech is sent from the caption user's device to our speech-recognition provider so it can be transcribed and translated for them; captions are shown only on that participant's screen, are never stored, and the other participant is shown an indicator that captions are on.
• The BufferMind team account. When you create a username, the BufferMind developer account is added to your friends list and sends you one welcome message so you can reach us directly. You can remove it like any other friend, and we will not add it back.

Un-sending and deletion have limits. Un-sending a message removes its content from our servers and from the recipient's app, but a push notification that was already delivered to their device cannot be recalled, and the media file may remain in storage until routine cleanup or account deletion. Removing a friend closes the conversation to new messages but does not delete its history on either side.

AI Features and Your Content

Transcription, translation, summaries, titles, answers, and Andy conversations are produced by sending the relevant text — and, for photo questions, the image you submit — to the AI providers listed below. Which AI provider handles your request depends on where you use BufferMind: Anthropic in most places, and Microsoft (Azure OpenAI Service) when you use BufferMind from Hong Kong, Macau, or mainland China, or when your connection reaches us through a Cloudflare data center there, because Anthropic's service is not available in those regions. Everywhere else, if Anthropic is temporarily unavailable (for example overloaded or rate-limited), the same request may be sent to Microsoft instead so you still get an answer. Photos you send to Andy are kept for about 180 days, with location and other hidden metadata removed, so we can test answer quality; to opt out, email support@buffermind.com and we will stop keeping yours and delete the ones kept. They are also deleted when you delete your account. We do not use Your Content to train AI models, and our AI providers process it under commercial API terms that do not permit them to use it for training. Speaker labels ("Speaker 1", "Speaker 2") come from our speech-recognition provider, not from a language model. AI output can be wrong; please review it before relying on it.

Quality testing. To check that answers stay accurate, for example before we switch to a different AI model, our team may re-run questions asked in BufferMind, together with the transcript text and notes they relied on, and compare the answers. Each test sends the content only to the AI provider that originally processed it. Test results stay with our team: we do not publish them or use them to train AI models, and we delete the copies made for a test once it is finished. These tests also use the photos you send to Andy, kept with your question and Andy's answer (not the transcript) as described above.

Data Storage & Security

Cloud storage. When you are signed in, your data is stored with U.S. providers: transcripts, messages, account and billing records in a Supabase database; audio recordings, profile photos, and chat media in Cloudflare R2 object storage (recordings are uploaded while you record so they are not lost if the app closes), with an hourly backup copy kept in a second Cloudflare bucket for disaster recovery; photos you send to Andy, kept for quality testing, in a separate Cloudflare R2 bucket with no backup copy; some older recordings and recordings made on macOS are stored in Supabase Storage. Our API runs on Cloudflare's network. All cloud data is encrypted in transit (TLS) and at rest, and access to production systems is restricted to authorized personnel.

Local storage on your device. To support offline playback and fast session history, BufferMind also keeps a copy of your sessions and audio on the device itself — in IndexedDB (browser / iOS WebView) or the application's data directory (macOS app) — and, on iOS, a cache of your most recent chat messages. This local copy is stored as plaintext and relies on your operating system's user-account protections rather than client-side encryption. Anyone with physical or administrator access to your device may be able to read it, so please secure your device accordingly. Signing out clears the chat cache; you can delete local sessions at any time from the app.

Third-Party Services

We share data with the following providers only as needed to run the features you use. Each is bound by its own terms and privacy policy.

• Soniox, Inc. (iOS, macOS, Web) — real-time speech recognition, speaker diarization, language identification, and built-in translation. Audio from recordings, Live Conversation mode, Voice Typing, and call captions is streamed to Soniox and is not stored by them beyond the active session per their Security & Privacy policy.
• Anthropic, PBC (iOS, macOS, Web) — Claude models power summaries, titles, answers during recordings, course analysis, glossary extraction, Andy conversations, and photo questions everywhere except Hong Kong, Macau, and mainland China. Transcript text, your questions and notes, and photos you submit are sent to Anthropic.
• Cloudflare, Inc. — runs our API, stores audio, photos, and chat media (R2), generates the search embeddings used to answer questions about a folder (Workers AI), and provides the relay (TURN) that carries call audio and video when a direct connection between two devices is not possible.
• Supabase, Inc. — database, authentication (email / one-time code, and brokered Google, Apple, and LINE sign-in), real-time message delivery, and legacy audio storage.
• Google LLC — Google Sign-In; Google Translate for the Text Translation feature and on-demand translation refinement (on iPhone and iPad this request is sent directly from your device to Google); Google Fonts on our website.
• Apple Inc. — Sign in with Apple, Push Notifications (message and call alerts), and App Store purchases, including Apple's subscription and refund systems. The "read translations aloud" feature on iOS uses Apple's on-device speech synthesis and sends nothing over the network.
• Microsoft Corporation — (1) Azure OpenAI Service: when you use BufferMind from Hong Kong, Macau, or mainland China (or your connection reaches us through a Cloudflare data center there), OpenAI GPT models hosted by Microsoft power the same AI features listed for Anthropic above, and your transcript text, questions and notes, and photos you submit are sent to Microsoft instead of Anthropic. Microsoft is also the backup for everyone else: when Anthropic is temporarily unavailable, a request may be sent to Microsoft instead. Our Azure resource is located in Japan, and Microsoft may process a request in its data centers in other countries. (2) Read-aloud voices for Live Conversation mode in English and Chinese; the text to be spoken is sent to Microsoft's speech service. Other languages use your device's built-in voices.
• Stripe, Inc. — payment processing for purchases made on our website, including from the iOS app in the United States storefront.
• LINE Corporation — LINE Login, when you choose it.
• Resend — sends transactional email on our behalf: invitation and recording-share emails include the recipient address, the sender's name or email, and the recording title.
• Discord — hosts the private channels where in-app feedback (with your email) and operational alerts are delivered to our team.
• Vercel, Inc. — hosts the website and web app and provides cookie-less aggregate analytics for the web version.

International Data Transfers

ZCC Labs LLC operates from the United States, and the providers above are U.S. companies whose primary storage for our data is in the United States. Cloudflare operates a global network and may process or cache requests at the data center nearest to you. When you use BufferMind from any other country, your personal data is transferred to, stored, and processed in the U.S. One exception: AI requests from Hong Kong, Macau, and mainland China, and requests from elsewhere that fall back to Microsoft when Anthropic is unavailable, are processed by Microsoft's Azure OpenAI Service, which we run in Japan and which Microsoft may process in its data centers in other countries.

Recipients of transferred data:

• Soniox Inc. — audio streaming for transcription and translation
• Anthropic PBC — text and image processing for AI features
• Google LLC — text translation, sign-in
• Microsoft Corporation — text and image processing for AI features (Hong Kong, Macau, and mainland China, and as a backup elsewhere; processed in Japan and other countries), and text-to-speech for Live Conversation mode
• Supabase Inc. — database, authentication, and file storage
• Cloudflare Inc. — API, object storage, search embeddings, call relay
• Apple Inc., Stripe Inc., LINE Corporation, Resend, Discord, Vercel Inc. — as described above

For users located in jurisdictions with data localization or cross-border transfer laws (including but not limited to the People's Republic of China under the Personal Information Protection Law (PIPL), and the European Economic Area / United Kingdom under the GDPR), this cross-border transfer is made on the legal basis of your explicit consent: the sign-in screen states that by using BufferMind you agree to our Terms and this Policy, this Policy discloses that audio and text are processed by U.S. cloud services, and you give that consent by continuing to sign in or create an account. You may withdraw consent at any time by deleting your account in Settings, which will cause us to cease processing and delete your data as described under "Data Retention & Deletion".

For transfers of personal data originating in the European Economic Area, the United Kingdom, or Switzerland, ZCC Labs LLC's approach is to combine your explicit consent with contractual safeguards modeled on the European Commission's Standard Contractual Clauses (SCCs), supplemented by the technical measures described in the "Data Storage & Security" section above.

Notice for Users in Mainland China / 中国大陆用户须知

English: BufferMind is operated by ZCC Labs LLC, a United States entity. When you use BufferMind from mainland China, your personal data (audio, transcripts, messages, photos, email) is transferred to and processed on servers located in the United States by the recipients named above; text and photos sent to AI features are processed by Microsoft's Azure OpenAI Service in Japan, or in Microsoft data centers in other countries. Photos you send to Andy are also stored in the United States for about 180 days for quality testing; to opt out, email support@buffermind.com, and the ones kept will be deleted. Under the Personal Information Protection Law of the PRC (PIPL), voice recordings and images may constitute sensitive personal information; your explicit consent, given by continuing past the sign-in notice, is the legal basis for this transfer under PIPL Article 38(3). You retain all rights granted by PIPL, including the right to access, correct, delete, or port your data, and the right to withdraw consent. To exercise these rights, contact support@buffermind.com.

中文：BufferMind 由美国实体 ZCC Labs LLC 运营。当您在中国大陆使用 BufferMind 时， 您的个人信息（音频、转录文本、聊天消息、图片、邮箱）将被传输至美国，并由上文列出的接收方在美国境内处理； 其中发给 AI 功能的文字和图片，由微软（Azure OpenAI 服务）在日本或其他国家的数据中心处理。 您拍照问 Andy 的照片（已去掉拍摄地点等隐藏信息）会连同问题和回答在美国保存约 180 天，只用于检查回答质量； 如不希望保存，请发邮件至 support@buffermind.com，我们会停止保存并删除已保存的照片。 根据《中华人民共和国个人信息保护法》（PIPL），语音录音和图像可能构成敏感个人信息； 登录页面已明确告知「使用 BufferMind 即表示您同意服务条款与隐私政策」，本政策已载明音频与文本将由美国云服务处理（AI 功能由微软在日本或其他国家处理）， 您在阅读该告知后继续登录或注册所作出的单独同意，构成本次跨境传输在 PIPL 第三十八条第（三）项下的合法性基础。 您保留 PIPL 赋予的所有权利，包括查阅、更正、删除、可携权及撤回同意的权利。 行使权利请联系 support@buffermind.com。 另外，App 会生成一个随机的安装标识，存放在您的设备上，用来按设备计算免费额度；它不包含任何设备信息，重新安装后会保留。 在 iPhone 或 iPad App 内购买没有完成时（付款失败，或您关掉了苹果的付款页面），我们会随您的账号记录结果、苹果给出的原因和购买是从哪个页面发起的，只用来排查付款问题、了解购买为什么没有完成，不含任何支付信息，保留 180 天或在您删除账号时删除。

Sensitive Personal Information

Voice recordings and images of people may constitute biometric or sensitive personal information under certain laws, including PIPL Article 28, GDPR Article 9, and the Illinois Biometric Information Privacy Act (BIPA, 740 ILCS 14). We take this seriously and disclose our practices below.

What we do not do. BufferMind does not perform speaker recognition or voice-based identification against a database of known individuals, does not use voice or face for authentication, does not perform facial recognition, emotion, or health analysis from voice or images, and does not use Your Content to train AI models.

Speaker diarization and transient voiceprints. When speaker diarization is enabled (to label "Speaker 1," "Speaker 2," etc. within a session), our transcription provider Soniox, Inc. generates transient voiceprints for the sole purpose of separating speakers within that session. These voiceprints are:

• Not stored by ZCC Labs LLC. We never retain voiceprint data.
• Transient at Soniox. Per Soniox's processor terms, voiceprints are used only during active processing and are not retained beyond the session.
• Not linked to real-world identity. Labels are within-session only ("Speaker 1," "Speaker 2") and are not matched to any name, account, or prior session. Any names you assign to speakers are stored as ordinary text in your recording.

Your consent and opt-out (Illinois BIPA & similar laws). By using the Service with speaker diarization enabled, you expressly consent in writing to the transient processing of voiceprints as described above. This Policy, together with our Terms of Service (section "Voiceprint and Biometric Data"), serves as our written notice and record of your written consent under BIPA. You may opt out at any time by disabling speaker identification in the Service's settings; the Service will continue to function without speaker labels. Our retention schedule for voiceprint data is: not retained by ZCC Labs LLC at any point; destroyed by Soniox at session end. We will update this schedule and notify users if our practices change.

Raw audio handling. Raw audio is streamed to Soniox for real-time processing and is not retained by Soniox beyond the active session. The recording itself is saved to your device and to our cloud storage as described above, so you can replay it.

Data Retention & Deletion

Recordings, transcripts, and AI content: kept on your device and in our cloud storage until you delete the recording or your account. There is no automatic expiration. Deleting a recording removes its audio and transcript from your device, our primary storage, and the backup copy, and revokes any public share link for it.

Photos sent to Andy: kept for about 180 days for quality testing (see "AI Features and Your Content"), in a separate storage bucket that is not backed up, then deleted automatically. Opting out by email, or deleting your account, deletes them sooner.

Messages and media: kept until you un-send them or delete your account. Un-sending removes the message content immediately; the underlying media file may remain in storage until routine cleanup or account deletion. Call setup records are kept for a limited time for troubleshooting and abuse prevention; the connection details containing IP addresses are cleared when the call ends.

Usage and billing records: the usage ledger, request logs, and payment event records are retained for as long as needed for accounting, tax, fraud prevention, and dispute resolution, which may extend beyond account deletion where the law requires.

Account deletion. You can permanently delete your account from the Settings page (or by emailing us). Deletion removes your recordings, transcripts, notes, folders, profile, photos, friend connections, and the messages and media you sent — including from your friends' conversations — and revokes your Sign in with Apple token. Please note:

• Recordings a friend has already imported are that friend's copies and are not deleted.
• Your username is reserved for 90 days after deletion (including from you) so that nobody can impersonate your former account, then released.
• Promotional-allowance records — a salted hash derived from your email used to ensure an invite link is counted once per person, and records of any complimentary allowance we granted to your email — are retained after deletion.
• App Store purchase records are kept for 90 days after deletion to prevent one subscription from being reused across accounts. Deleting your account does not cancel an App Store subscription; cancel it in your Apple account settings. A subscription purchased on our website is cancelled for you when you delete your account.

Tracking, Cookies & Analytics

BufferMind does not use advertising identifiers or any cross-app/cross-site tracking technologies, and we do not participate in ad networks or data brokers. We do not set marketing cookies. The one first-party exception is the sign-up source described under "Usage, quota, and technical data": it is read once from the link you arrived on, stored with your account, and is not a cookie, an identifier, or a browsing history. The web version uses Vercel Analytics and Vercel Speed Insights to collect aggregate, cookie-less page-view and performance metrics that do not identify individual users; the iOS app uses no third-party analytics services. When you pay on our website, Stripe's checkout pages set their own cookies for fraud prevention under Stripe's privacy policy. No other analytics providers are used.

Data Sharing

We do not sell, rent, or share your personal data with third parties for marketing purposes. We share data only: with the service providers listed above as necessary to provide the Service; with other users, at your direction, when you use friends, messaging, sharing, or calls; when required by law, legal process, or to protect the rights, safety, or property of our users, the public, or ZCC Labs; and, if ZCC Labs is involved in a merger, acquisition, or sale of assets, with the successor, who will remain bound by this Policy.

Your Rights

Depending on your location, you may have the right to access, correct, delete, or receive a copy of your personal data, to object to or restrict certain processing, to withdraw consent, and to lodge a complaint with your local data-protection authority. California residents (CCPA/CPRA) have the right to know what data we collect, to request deletion or correction, and to opt out of the sale or sharing of personal information — we do not sell or share your data for those purposes and do not discriminate against you for exercising your rights. To exercise any of these rights, contact us at support@buffermind.com from the email address on your account, or use the account deletion feature in Settings. We may ask you to verify your identity before acting on a request.

Children's Privacy

BufferMind is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of changes by posting the new policy on this page and updating the "Last updated" date; for material changes we will also make reasonable efforts to notify you in the app or by email.

Contact

If you have questions about this privacy policy or your data, contact us at support@buffermind.com.

ZCC Labs LLC
zcclabs.com
United States