Mindflex is a learning app for psychology. Bernie, your AI learning companion, explains psychology with examples from your own everyday life. Here is how it works, how the AI works, and how we protect your data.
Mindflex is a learning app for psychology, built by psychologists in Berlin. You chat or call with Bernie, your AI learning companion, about whatever is on your mind. He explains what is going on in plain words, names the psychology behind it, and suggests one small thing to try.
The 78 concepts come from established psychological research, such as acceptance and commitment approaches (ACT) and cognitive psychology. You earn XP when you try something new, keep a streak, and every concept you discover lands in your personal library.
The concepts, explanations and instructions behind Bernie are written by our own psychologists.
The founding team met during their psychology studies in Potsdam, Germany. In Germany the title Psychologe is regulated by law and requires a completed Master's degree. This is the psychological expertise behind how Bernie explains concepts.
You should know how Bernie works. Here is what happens when you send a message or start a call.
Bernie runs on large language models. Chats and calls are processed by Google's Gemini. If Gemini is unavailable, chats fall back to Anthropic's Claude. Your message is processed alongside instructions written by our psychologists, and the AI follows these guidelines.
Bernie is an AI, and Mindflex says so openly. You are always talking to an AI, never to a human.
Your conversations are never used to train AI models. Neither Anthropic's nor Google's API uses customer data from paid API access for training.
Your conversations are personal. We handle them with the highest level of care. All data processing is GDPR and CCPA compliant, and we never sell your personal data.
| Data | Purpose | Stored where |
|---|---|---|
| Email address | Authentication | Supabase (EU, Frankfurt) |
| Display name | Personalization | Supabase |
| Chat messages | Conversation continuity | Supabase (encrypted) |
| Device token | Push notifications | Supabase |
| Timezone / City | Reminder scheduling | Supabase |
| App events + device advertising identifier (only if you consent) | Ad measurement | Shared with TikTok |
| Real name (optional, you choose) |
| Phone number |
| Location data / GPS |
| Biometric data |
| Contacts or photos (unless you share an image in chat) |
| Your advertising identifier, unless you consent to ad measurement (see below) |
Some of what you share in conversations can count as special categories of personal data under Art. 9 GDPR. We only process this data with your explicit consent (Art. 9(2)(a) GDPR). Giving it is voluntary, and you can withdraw it at any time.
To see which ads help people find Mindflex, we can share basic app events (install, trial start, purchase) plus your device advertising identifier with TikTok, but only if you consent on the dedicated screen at the start of onboarding.
Never shared: your conversations, your answers, or anything you write or say. Decline and the ad SDK stays off; the app works exactly the same. Turn it off anytime under Settings → Ad measurement. Legal basis: Art. 6(1)(a) GDPR and § 25 TDDDG (your consent).
In transit: TLS 1.2+ for all API calls.
At rest: AES-256 encryption on all stored data via Supabase.
Chat data is stored with random user IDs. Your email is only linked to your auth account, not embedded in conversation data.
Our data protection is certified and monitored by heyData GmbH, a professional GDPR compliance partner based in Berlin, Germany. They serve as our external Data Protection Officer (Datenschutzbeauftragter) as required by EU law.
You are always in control of your data. These rights are available to every user, at any time, with no barriers.
Settings → Delete Account. All personal data (email, name) is permanently deleted. All chat data is fully anonymized, so there is no way to trace it back to you.
Settings → Export Data. Download a complete copy of all your data at any time, as required by GDPR Article 20 (right to data portability).
You can withdraw your consent to the processing of special categories of personal data (Art. 9 GDPR) at any time. Processing before withdrawal remains lawful.
Mindflex is a learning service and does not replace personal advice from qualified professionals.
In an emergency, call your local emergency number.
Mindflex is designed for adults. We take the protection of minors seriously.
Users must confirm they are at least 16 years old (EU/GDPR) or 13 years old (US/COPPA) before using the app. This confirmation is collected via an explicit checkbox on the consent screen and recorded with a timestamp in our database.
Mindflex is not designed for, marketed to, or intended for use by children. If we become aware that a user is under the minimum age, their account will be terminated and all associated data will be deleted.
We work with carefully selected partners. Each processes only the minimum data necessary for their function. Data Processing Agreements (DPAs) are in place as required by GDPR Article 28.
| Partner | Function | DPA Status |
|---|---|---|
| AI model (Gemini), processes chat messages and voice calls to generate responses | ✓ Signed | |
| Anthropic | AI model (Claude), backup model for chat | ✓ Signed |
| OpenAI | Auxiliary AI processing | ✓ Signed |
| LiveKit | Real-time audio transport for voice calls | ✓ Signed |
| Supabase | Database, authentication, encrypted storage | ✓ Signed |
| RevenueCat | Subscription management | ✓ Signed |
| PostHog | Error monitoring and product analytics, EU hosting (no personal data in reports) | ✓ Signed |
| Vercel | Website hosting and privacy-friendly page analytics (no cookies, no session recording) | GDPR compliant |
| Expo | Push notifications, app delivery | GDPR compliant |
| heyData | External Data Protection Officer | ✓ Contracted |
Mindflex UG (haftungsbeschränkt)
Berlin, Germany
hello@mindflex.world
External DPO: heyData GmbH
Berlin, Germany
For data protection inquiries, contact us at hello@mindflex.world
If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local data protection supervisory authority. In Germany, this is the Berliner Beauftragte für Datenschutz und Informationsfreiheit (BlnBDI).
We encourage you to contact us first so we can address your concern directly.