Privacy Policy

Introduction

Daily Mind ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services at www.dailymind.io (the "Service").

Please read this Privacy Policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy.

Data Controller

Information We Collect

Information You Provide

• Account Information: When you create an account, we collect your name, email address, and password.
• Team Information: Your team is automatically determined from your email domain.
• Profile Information: Any additional information you choose to add to your profile.

Information Collected Automatically

• Usage Data: Puzzle completion times, scores, streaks, and gameplay statistics.
• Device Information: Browser type, operating system, and device identifiers.
• Log Data: IP address, access times, pages viewed, and referring URLs.
• Cookies: See our Cookie Policy for details.

Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to provide our Service to you.
• Legitimate Interests: Processing for our legitimate business interests, such as improving our Service, fraud prevention, and security.
• Consent: Processing based on your explicit consent, such as for marketing communications and analytics cookies.
• Legal Obligations: Processing necessary to comply with legal requirements.

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Service
• Create and manage your account
• Process puzzle completions and calculate scores
• Display leaderboards and company rankings
• Send you transactional emails (verification, password reset)
• Send daily puzzle reminders (if you opt in)
• Respond to your comments, questions, and support requests
• Monitor and analyze trends, usage, and activities
• Detect, investigate, and prevent fraudulent or unauthorized activities
• Comply with legal obligations

How We Share Your Information

We may share your information in the following circumstances:

• With Your Team: Your name, scores, and rankings are visible to other users from your team on the leaderboard.
• Service Providers: We share data with third-party vendors who assist us in operating our Service (hosting, email delivery, analytics).
• Legal Requirements: We may disclose information if required by law or in response to valid legal requests.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.

We do not sell your personal data to third parties.

Data Retention

We retain your personal data for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy. Specifically:

• Account Data: Retained until you delete your account.
• Gameplay Data: Retained for the duration of your account to maintain your statistics and history.
• Log Data: Typically retained for 90 days.
• Verification Tokens: Deleted after 24 hours or upon use.

Your Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have the following rights:

To exercise these rights, please contact us at privacy@dailymind.io. We will respond to your request within 30 days.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. When we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of sensitive data at rest
• Secure password hashing (bcrypt)
• Regular security assessments
• Access controls and authentication

Children's Privacy

Our Service is not intended for individuals under the age of 16. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us so we can delete the information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page, updating the "Last updated" date, and sending you an email notification if you have an account. We encourage you to review this Privacy Policy periodically.

Complaints

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with your local data protection authority. In Germany, this is the Federal Commissioner for Data Protection and Freedom of Information (BfDI).

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: