Version 4.7Effective date August 15, 2026Last updated October 13, 2026
1. Introduction & Privacy by Default Architecture
Welcome to Global Mind Map ("we", "our", or "us"). We are committed to absolute data privacy
and transparency. Our application is engineered from the ground up on a Privacy-by-Default
standard:
Essential Diagnostic Logging: To maintain application stability, eliminate
critical runtime exceptions, and ensure service reliability, anonymized crash reports
(Firebase Crashlytics) are processed automatically for adult profiles (18+) under our
legitimate interest. No personal identification or diagram content is ever attached to these
diagnostics. Behavioral analytics and advertising SDKs remain completely disabled until
explicit onboarding classification and consent.
Local Processing & Full Data Ownership: All mind maps, nodes, diagrams,
text files, and custom .mndm files are generated, processed, and stored locally
on your device. We operate no external cloud servers to ingest, inspect, or store your
private projects.
Compliance Onboarding: On first launch, the App requires user classification
(age selection and usage profile) before initializing any network-dependent telemetry,
consent flows, or monetization features.
2. Enterprise, Proprietary Data & Diagnostic Controls
We respect the confidentiality, operational security, and regulatory requirements of
enterprises, professionals, and corporate environments:
No Proprietary Data Ingestion: We do not collect, process, inspect,
monetize, or harvest any proprietary business data, trade secrets, intellectual property,
organizational charts, client information, or project text created within your diagrams. All
mind maps and associated metadata remain strictly isolated within local device storage.
Commercial & Enterprise Licensing: An active subscription to the
Enterprise / Business Plan grants the subscribing individual or organization a worldwide,
non-exclusive, non-transferable, and revocable commercial license to utilize the Application
for corporate, professional, and commercial operations. This includes the creation, batch
processing, vector/raster export, and distribution of mind maps within business
presentations, internal reporting, client deliverables, consultancy materials, and commercial
workflows. The digital transaction receipt issued by Google Play serves as conclusive legal
proof of this commercial license grant. All intellectual property rights, titles, and
interests in any diagrams, mind maps, or proprietary content generated by the user remain
exclusively with the user or their respective enterprise.
Local Project Isolation: All mind maps created for professional or corporate
use remain strictly isolated on the user's local device storage unless explicitly and
manually shared or backed up by the user.
Essential Crash & Stability Logging (Non-Discretionary): To maintain
runtime reliability, isolate fatal native exceptions, and ensure service availability across
supported device architectures, anonymized technical telemetry (via Firebase Crashlytics) is
collected automatically for verified adult profiles and corporate deployments. These records
are strictly restricted to system-level event payloads (such as fatal exception stack traces,
memory usage metrics, operating system version, and device hardware specifications) and are
entirely stripped of Personally Identifiable Information (PII) or diagram content. Processing
is conducted under the legal basis of Legitimate Interest (GDPR Article 6(1)(f) and LGPD
Article 7, IX) to maintain platform integrity, and this diagnostic framework operates without
a manual deactivation toggle.
Discretionary Telemetry & Behavioral Analytics Opt-Out: Enterprise and
standard users retain unilateral control over non-essential behavioral tracking. You may
enable or revoke consent for usage telemetry and Google Analytics at any time via the Privacy
hub, the shield icon in the top bar of the app's main screen.
3. Device Permissions
Depending on the features you use, the application may request the following Android
permissions:
Android permissions and their purpose
Permission
Purpose
Internet Access android.permission.INTERNET android.permission.ACCESS_NETWORK_STATE
Required for Google Play Billing validation, UMP consent synchronization, essential crash
stability logging, and optional usage telemetry.
Ensures proper execution of foreground tasks and prevents the device from sleeping during
long-running operations like database synchronization or large exports.
4. Universal Age Restrictions & Minor Protection
To exceed global regulatory standards—including COPPA (USA), GDPR-K (EEA/UK), and LGPD
(Brazil)—we enforce programmatic restrictions based on age across all 144 supported
locales:
Users under 13 years
Complete prohibition of telemetry and diagnostic logging (Firebase Crashlytics permanently
disabled).
Absolute blocking of Google Analytics and Advertising IDs (GAID).
Zero ad SDK initialization (no personalized, non-personalized, or rewarded ads).
Strict daily quota of 10 mind map exports per day with no reward ad bypass options.
Users aged 13 to 17 years
Complete prohibition of telemetry and diagnostic logging (Firebase Crashlytics permanently
disabled).
Absolute blocking of Google Analytics, Advertising IDs (GAID), and ad SDKs.
Strict daily quota of 10 mind map exports per day with no reward ad bypass options.
5. Analytics, Diagnostics & Google UMP
For adult users (18+) and corporate profiles, data handling strictly differentiates between
essential technical stability and discretionary opt-in services:
Google Analytics for Firebase: Collects aggregated, non-personally
identifiable usage events (e.g., UI interactions, session duration) strictly upon affirmative
opt-in. Permanently disabled for users under 18.
Firebase Crashlytics: Automatically captures anonymized stack traces, crash
dumps, and hardware state indicators (OS version, device model) exclusively to diagnose
unexpected closures and memory leaks. This technical diagnostic pipeline operates under
legitimate interest, does not collect personal identifiers, and is strictly restricted to
adult and enterprise profiles (completely disabled for minors under 18).
Google User Messaging Platform (UMP): In applicable jurisdictions (EEA, UK,
and Switzerland), Google UMP is orchestrated to collect and manage granular consent according
to the IAB TCF framework before non-essential telemetry or advertising requests
execute.
Consent Revocation: Users can reset compliance preferences, purge cached
consent states, and re-trigger consent dialogues at any time via the Privacy hub in the app's top bar.
In addition to automated crash collection for adult profiles, users may voluntarily submit
local technical crash logs directly to our support team via email after an unexpected
application closure.
6. Advertising & Export Quotas
Monetization modules are dynamically integrated according to user age, profile type, and
explicit consent:
Export quota and ad treatment by user category
User category
Baseline daily exports
Rewarded ad exports (+3)
Ad tracking type
Minors (< 18)
10 exports / day
Not available
Ads fully disabled
Standard adults (18+)
10 exports / day
Available via rewarded ad
Consent-based (UMP / personalized or NPA)
Enterprise / Company
10 exports / day
Available via rewarded ad
Non-personalized ads only (NPA)
Premium users
Unlimited
Not applicable
Ads fully disabled
Dynamic Ad Spaces: Advertising formats (including banners, interstitials, and
rewarded videos) adjust dynamically based on screen real estate, orientation, and device
configuration.
Enterprise Protection: Company profiles receive only non-personalized ads
(NPA) to protect corporate privacy while maintaining access to export extension
mechanics.
7. Third-Party Service Providers
We do not sell, rent, or trade your personal or business data. We integrate the following
third-party frameworks:
Google Play Services: Used for framework support and secure in-app
billing.
Google Analytics for Firebase: Aggregated usage telemetry (subject to
opt-in).
Firebase Crashlytics: Anonymized technical diagnostics and crash reporting
(restricted to adult/enterprise profiles; fully disabled for minors).
Google Mobile Ads (AdMob) & UMP: Advertising delivery and consent
management for eligible adult profiles.
8. Data Storage, Retention & User Rights (GDPR / CCPA / LGPD)
Local Storage & Deletion: Because mind maps are stored locally, deleting
the application or clearing app data completely removes your local projects.
Data Retention: Collected diagnostic telemetry is retained only for as long
as necessary to analyze application stability or comply with legal requirements.
User Rights: You have the right to access, rectify, or request deletion of
any telemetry data associated with your diagnostic logs, or revoke permissions directly in
your Android device settings.
Under the California Consumer Privacy Act (CCPA/CPRA), we do not sell or share personal
information for cross-context behavioral advertising without affirmative consent.
Legal Basis under GDPR & LGPD: We process behavioral analytics and
advertising data based on your explicit consent (GDPR Article 6(1)(a) / LGPD Article 7(I)).
Essential crash diagnostic data is processed under our legitimate interest in maintaining
application stability and performance (GDPR Article 6(1)(f) / LGPD Article 7(IX)).
9. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in legal requirements or
application features. Any updates will be published with a revised "Last Updated" date.
10. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data
practices, please contact us:
Plain-language summary. Your mind maps never leave your device — there
is no account, no upload and no cloud storage of your content. The only data that leaves the
device is anonymized technical crash reporting for users aged 18 and over, plus advertising and
analytics data for adults who have given consent through Google's consent platform. The Privacy
hub (the shield icon in the top bar of the main screen) is shown on first use and remains
accessible at any time afterwards: it always displays your current choices, which it keeps
until you change them, and in applicable regions it also opens Google's consent dialog (UMP),
which adapts to your country. Users under 18 have no ads, no analytics and no
crash reporting at all, and access to these controls is protected by a parental gate.