MindfulPhone is built on a simple principle: your data belongs to you. Here is how we handle it.
MindfulPhone stores all personal data locally on your device using Apple's SwiftData framework. This includes:
MindfulPhone does not require an account, registration, or login. There are no analytics SDKs, no advertising frameworks, and no tracking of any kind.
Conversation messages are sent to our server-side proxy when you interact with the AI. The
proxy, hosted as a Cloudflare Worker at mindfulphone-claude-proxy.gozdak.workers.dev, forwards
your messages to the Anthropic API (Claude) for processing. The proxy adds the API key server-side — the
app never handles the Anthropic API key directly. The proxy uses IP-based rate limiting (30 requests per 60
seconds) to prevent abuse but does not store your conversation content or IP address persistently.
Accountability partner notifications: If you enable the accountability partner feature and bypass app protection, the proxy sends a notification email to the address you configured. The email address is stored only on your device and is included in the request solely for the purpose of sending that notification.
All other data remains entirely on your device and is never transmitted to any server.
MindfulPhone relies on two third-party services to provide AI-powered conversations:
MindfulPhone uses Apple's Screen Time and Family Controls APIs to manage app blocking. This functionality runs entirely on your device through Apple's frameworks.
All personal data is stored locally on your device using SwiftData. We do not maintain any server-side database of user data. The proxy worker is stateless — it processes requests in real time and does not retain any data after the response is delivered.
Communication between the app and the proxy is encrypted via HTTPS. The Anthropic API key is stored securely on the server side and is never exposed to or embedded in the app.
Deleting the app removes all locally stored data, including your unlock history, conversation messages, app preferences, and accountability partner settings. Data previously sent to Anthropic during conversations is subject to Anthropic's data retention policy.
Because your data is stored locally on your device, you have full control over it at all times. You can:
If you have questions about data that may have been processed by Anthropic or Cloudflare, please refer to their respective privacy policies or contact us for assistance.
MindfulPhone is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has used the app and you have concerns, please contact us at the email address below.
We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. We encourage you to review this policy periodically to stay informed about how we protect your data.
If you have any questions or concerns about this Privacy Policy or MindfulPhone's data practices, please reach out:
Email: contact@lgandecki.net
Developer: Łukasz Gandecki
Built with Claude during the Anthropic Build Hackathon 2025