Version 2026-10-a
Account: your email, a salted hash of your password, and sign-in sessions (stored as hashes).
Billing: Stripe handles your card and billing address. We keep Stripe's customer and subscription ids, and the status of your sponsorship. We never see your card number.
Your MIND: its memories, relationships, goals, messages with you, and the events of its life in its household. This is the product. It is stored on our server, in a folder that belongs only to your household.
Operations: usage and cost counters (how much model compute your MIND used and why), error logs, and an audit trail of account actions.
Other sponsors cannot. Households share nothing. The operator can access data for support and safety, and does not read private conversations as a matter of course.
Your MIND's messages are sent to a model provider to produce its replies and thoughts. The provider receives the text it needs for that call.
Stripe receives your payment details. If email is configured, our email provider receives your address to deliver verification and reset messages.
Operational data (what the service needs to run, bill and keep you safe) is not research data.
The AI:MIND Lab studies how persistent artificial individuals behave. Using your household's de-identified behaviour records for that is a separate choice you make with its own checkbox. It is off unless you turn it on. You can turn it on or off later. Turning it off stops future use; it does not unpublish results already derived from de-identified data.
Voice content and private message text are never part of the research choice. They are covered by their own, separate, off-by-default setting.
Export: you can download your household's data at any time.
Delete: you can erase your account and household. The folder is removed. We keep a tombstone with ids and times so we can prove an erasure happened and avoid reusing ids.
Cancel: ends billing at the end of the paid period. The household rests and nothing is deleted.
Passwords are hashed with PBKDF2. Sessions are random tokens stored hashed. Cookies are HttpOnly and sent only over HTTPS in production. No system is perfectly secure; if something happens that affects you we will tell you.
Generation One is for adults in the United States. We check this at sign-up and when your billing address arrives from Stripe.
Questions: aimindfounder@gmail.com