Privacy Policy

This Privacy Policy describes how YANDE (“we,” “us,” or “our”) collects, uses, stores, and discloses your personal information when you use the Mintybug platform at mintybug.ai (the “Platform”). By using the Platform, you consent to the practices described in this policy.

1. Information We Collect

1.1 Information You Provide

Account Information: Name, email address, and password when you register, or information provided through Google OAuth (name, email, profile picture).

Profile Information: Any additional information you add to your profile, such as display name or bio.

Payment Information: When purchasing credits, payment details are collected and processed by Stripe. We do not store your full credit card number or payment credentials on our servers.

Creator Information: If you participate in the creator economy, we collect information required for Stripe Connect onboarding, which may include legal name, address, date of birth, and tax identification numbers as required by Stripe and applicable law.

Content: Templates you create, story choices you make, reviews you post, and other content you submit through the Platform.

Communications: Messages you send to us through support channels or feedback forms.

1.2 Information Collected Automatically

Usage Data: Pages visited, features used, templates played, chapters generated, time spent on the Platform, and interaction patterns.

Device Information: Browser type, operating system, device type, screen resolution, and language preferences.

Log Data: IP address, access times, referring URLs, and error logs.

Analytics Data: We use PostHog for product analytics and Axiom for application logging. These services collect anonymised or pseudonymised usage data to help us understand how the Platform is used and to diagnose issues.

Cookies and Similar Technologies: See our Cookie Policy for detailed information.

1.3 Information from Third Parties

Authentication Providers: If you sign in via Google OAuth, we receive your name, email address, and profile picture from Google.

Payment Processor: Stripe may provide us with transaction status, payment confirmation, and fraud detection signals.

2. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve the Platform and its features.

Process credit purchases and creator payouts.

Authenticate your identity and secure your account.

Generate AI-powered story content based on your interactions.

Moderate content and enforce our Terms of Service.

Communicate with you about your account, transactions, and Platform updates.

Analyse usage patterns to improve user experience and Platform performance.

Detect and prevent fraud, abuse, and security incidents.

Comply with legal obligations and respond to lawful requests.

3. Information Shared with AI Providers

To generate story content, we transmit your story inputs, template data, and contextual information to third-party AI providers. These providers include OpenAI, Anthropic (Claude), Google (Gemini), DeepSeek, and xAI (Grok).

The information sent to AI providers typically includes your story actions, template context, character data, and chapter history. We do not send your account credentials, payment information, or personal identification to AI providers.

Each AI provider processes this data according to their own privacy policies and data processing agreements. We select providers that offer appropriate data handling practices, but we cannot control how third-party providers process data once transmitted.

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

Service Providers: With third-party services that help us operate the Platform, including Stripe (payments), Vercel (hosting), Neon (database), PostHog (analytics), and Axiom (logging). These providers access your data only as necessary to perform their services.

AI Providers: As described in Section 3 above.

Public Content: Templates you publish and stories you make public are visible to other Platform users.

Creator Profiles: If you are a creator, your creator display name and published templates are publicly visible.

Legal Requirements: When required by law, regulation, legal process, or governmental request.

Safety and Rights: To protect the rights, property, or safety of YANDE, our users, or others.

Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred to the successor entity.

5. Data Storage and Security

5.1 Storage Location

Your data is stored on servers operated by our hosting providers (Vercel and Neon). Data may be processed and stored in multiple jurisdictions.

5.2 Security Measures

We implement reasonable technical and organisational measures to protect your personal information, including encryption in transit (HTTPS/TLS), secure authentication, and access controls. However, no method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security.

5.3 Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Platform. After account deletion, we may retain certain data for a reasonable period to comply with legal obligations, resolve disputes, and enforce our Terms. Anonymised or aggregated data may be retained indefinitely.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

Access: Request a copy of the personal information we hold about you.

Correction: Request correction of inaccurate or incomplete information.

Deletion: Request deletion of your personal information, subject to legal retention requirements.

Data Portability: Request your data in a structured, machine-readable format.

Objection: Object to processing of your personal information in certain circumstances.

Withdraw Consent: Where processing is based on consent, withdraw consent at any time.

To exercise these rights, contact us at [YOUR EMAIL ADDRESS]. We will respond within a reasonable timeframe and in accordance with applicable law.

7. International Data Transfers

As the Platform is operated from Singapore and uses global service providers, your personal information may be transferred to and processed in countries other than your country of residence. We take steps to ensure that international transfers comply with applicable data protection laws and that your information receives an adequate level of protection.

8. Children’s Privacy

The Platform is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete that information promptly.

9. Singapore Personal Data Protection Act (PDPA)

We comply with the Singapore Personal Data Protection Act 2012 (PDPA). Under the PDPA, you have the right to access and correct your personal data held by us. You may also withdraw consent for the collection, use, or disclosure of your personal data, subject to legal or contractual restrictions. To make a request under the PDPA, contact our Data Protection Officer at [YOUR EMAIL ADDRESS].

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Platform and updating the “Last Updated” date. Your continued use of the Platform after changes are posted constitutes acceptance of the updated policy.