MINDFlexer ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our cognitive performance testing platform.

1. Information You Provide

• Account Information: When you register through third-party providers (Google, GitHub, etc.), we receive basic profile information such as your name and email address.
• Game Performance Data: Your cognitive test results, reaction times, accuracy scores, and performance metrics.
• User Preferences: Theme selections, language preferences, and other customization settings.
• Session Notes: Any notes you choose to add to your game sessions.

2. Automatically Collected Information

• Usage Data: Information about how you interact with our platform, including session duration and feature usage.
• Comprehensive Device Metadata: Detailed device information collected for performance optimization and analytics including:
  • Screen resolution, viewport size, and display characteristics
  • Browser type, version, and user agent information
  • Operating system and platform details
  • Device type classification (desktop, mobile, tablet)
  • Device orientation and touch capability detection
  • Browser zoom level and pixel ratio information
  • Progressive Web App (PWA) usage status and display mode
  • Language settings and timezone information
  • Fullscreen usage and session context data
• Performance Metrics: Technical data about game performance and response times, including precision timing measurements.
• Monitor Refresh Rate: Your display's refresh rate (e.g., 60Hz, 144Hz, 240Hz) to provide context for performance analysis and fair competition.
• Raw Game Data: Complete trial-by-trial data including reaction times, accuracy, stimulus types, and metadata for score validation and analysis.
• Session Metadata: Information about game sessions including grouping, duration, completion status, and performance summaries.
• Device Fingerprinting: Limited technical fingerprinting (user agent, screen resolution, hardware) for security purposes and preventing data manipulation.
• AI Interaction Data: Chat logs and interactions with our AI mentor system to maintain conversation history and improve assistance.
• Content Engagement: Usage of text-to-speech features, voice preferences, and blog article interactions for personalization.

3. Information We Do NOT Collect

• We do not collect sensitive personal information such as health records or financial data
• We do not track your location or use location-based services
• We do not collect information from other websites or services you visit

We use the information we collect for the following purposes:

• Service Provision: To provide and maintain our cognitive testing platform
• Performance Analytics: To calculate your cognitive performance metrics and track improvements
• Device Optimization: To optimize game performance based on your device capabilities, screen size, browser type, and technical specifications
• User Experience Enhancement: To provide device-specific optimizations, adapt to PWA usage, adjust for browser zoom levels, and ensure optimal display across different platforms
• Personalization: To customize your experience with themes, languages, and preferences
• Account Management: To manage your account and provide customer support
• Platform Improvement: To analyze usage patterns and improve our services (using aggregated, anonymized data), including device-specific performance analysis
• Security: To detect and prevent fraud, abuse, and security incidents
• Fair Competition: To ensure fair leaderboard rankings by detecting manipulation and providing performance context (e.g., monitor refresh rate, device capabilities, browser zoom)
• Score Validation: To verify the authenticity of game scores and prevent cheating using raw trial data and comprehensive device fingerprinting
• Technical Support: To troubleshoot issues and provide device-specific assistance based on your hardware and software configuration
• AI Assistance: To maintain conversation history and provide personalized help through our AI mentor system
• Content Delivery: To provide text-to-speech functionality and remember your audio preferences across sessions
• Legal Compliance: To comply with applicable laws and regulations

Cookies

We use cookies for:

• Authentication: To keep you logged in securely
• Session Management: To maintain your session state
• Security: To protect against cross-site request forgery and other security threats

Local Storage

We use browser local storage to:

• Offline Functionality: Store your game data locally for offline access
• User Preferences: Remember your theme, language, and other settings
• Performance Data: Cache your cognitive test results for faster access
• Sync Preparation: Temporarily store data before syncing with our servers
• Encrypted Game Settings: Store game difficulty levels and adaptive settings using encryption with device fingerprinting to prevent manipulation
• Audio Preferences: Remember your text-to-speech voice, speed, and volume settings

Authentication Providers

We use NextAuth.js with the following providers for secure authentication:

• Google: For Google account login
• GitHub: For GitHub account login
• Other OAuth Providers: As configured by our authentication system

Database Services

We may use:

• Supabase: For optional cloud data storage and synchronization
• PostgreSQL: For secure data storage

We implement appropriate technical and organizational measures to protect your information:

• Encryption: Data is encrypted in transit and at rest
• Access Controls: Strict access controls limit who can access your data
• Secure Authentication: OAuth 2.0 and secure session management
• Regular Updates: We keep our security measures up to date
• Local Storage: Primary data storage is on your device, reducing exposure

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

Your Rights

• Right to Know: You can request information about the personal information we collect, use, and disclose
• Right to Delete: You can request deletion of your personal information
• Right to Opt-Out: You can opt-out of the sale of personal information (Note: We do not sell personal information)
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
• Right to Correct: You can request correction of inaccurate personal information

How to Exercise Your Rights

To exercise these rights, you can:

• Use the data export/import features in your account settings
• Delete your account through the platform settings
• Contact us directly (contact information below)

Categories of Information

We collect the following categories of personal information:

• Identifiers: Name, email address, account identifiers, anonymous user IDs
• Internet Activity: Usage patterns, performance data, preferences, AI chat interactions, blog engagement
• Commercial Information: None collected
• Biometric Information: None collected (reaction times are performance metrics, not biometric identifiers)
• Geolocation Data: None collected
• Audio/Visual Information: Text-to-speech preferences and usage patterns (no recording of voice or video)
• Inferences: Cognitive performance metrics and brainpower level calculations derived from game data

We retain your information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Maintain security and prevent fraud

When you delete your account, we will delete your personal information within 30 days, except where retention is required by law.

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically.

If you have any questions about this Privacy Policy or our privacy practices, please contact us through the platform's support features or account settings.