Closed Beta Privacy Notice

Thank you for testing PinPapers. This short notice tells you what to expect while you use the closed beta. It sits alongside our full Privacy Policy, which governs in full — this page just highlights the things that are specific to the beta.

This is a development environment

The closed beta runs on our development environment, not our production systems. It is invitation-only and limited to India. Features may change, break, or be reset, and although your content is encrypted the same way it will be at launch, you should keep your own copy of anything important — do not treat the beta as your only store.

What the beta collects

The beta collects the same categories described in the Privacy Policy §3:

• Your identity — a salted hash of your email and your phone number (for sign-in and verification), and an optional display name.
• A random device identifier (no IMEI, no phone-state access).
• Your content — documents, photos, voice notes and pin notes, encrypted on your device before upload and stored only in encrypted form.
• Precise pin location — only when you create or move a pin (no background tracking).
• Technical data — your IP at sensitive operations, and, only if you opt in, PII-stripped crash reports.

As explained in the Privacy Policy, stored documents are not “end-to-end encrypted”: we hold a separate escrow-wrapped copy of each file’s key so that, only under a compelled multi-party lawful-access process, decrypted access can be produced. Some data reaches US-based providers we rely on (Google and Apple for sign-in, Twilio for SMS codes, and Sentry for crash reports if you opt in).

Your rights during the beta

You keep all of the data-rights described in the Privacy Policy §8 — access, correction, erasure, export, restriction, objection, and withdrawal of any optional consent. During the beta, exercise every right by email to info@mindslake.com from your registered address; there is no in-app privacy-request form.

Delete and export are handled by email

In this build the in-app Delete account and Export my data options are intentionally turned off. Both are handled out-of-band by email during the beta and will move in-app at general availability:

• Delete your account — follow the steps on the Account & Data Deletion page. Deletion begins a 30-day reversible window; after it, your files’ keys are crypto-shredded and documents become unrecoverable.
• Export your data — email info@mindslake.com and we will provide your export.

Contact

Questions, bug reports, or privacy requests: email info@mindslake.com (our DPO and Grievance Officer mailbox). We acknowledge support messages within 48 hours, and formal grievances within 7 days (resolved within 30 days). See Support for more.