Privacy Policy

Summary

Nervespan MindMap is designed to be private by default. Your mind maps are stored locally on your device, and the app works fully offline. We do not track individual users and we do not sell data. We collect only anonymous aggregate visitor counts (via Cloudflare Web Analytics — no cookies, no personal data). Your content leaves your device only when you explicitly opt in to a feature that requires it: the AI features, or Cloud Sync. Cloud Sync is optional and off until you choose to sign in.

What we collect

When you use the app without AI or Cloud Sync

No personal data. The app works entirely offline. Your mind maps are stored as local files on your device and are never transmitted to any server. The only network request is an anonymous page-view ping to Cloudflare Web Analytics (no cookies, no identifiers — see "Cookies and website analytics" below).

When you use AI features

If you choose to use the AI-powered features (expand ideas, summarise, generate from text), the following data is sent to our AI processing service:

• The text content of the node(s) you're working with (labels, notes)
• An anonymous device identifier (a random UUID generated on your device — not linked to any personal information)

This data is:

• Processed in the European Union (Scaleway, Paris, France)
• Not stored after the request completes (stateless processing)
• Not used to train AI models
• Not shared with any third party beyond the AI processing provider

When you bring your own API key (BYOK)

If you configure your own API key, your data is sent directly from your device to your chosen provider (e.g. OpenAI, Anthropic, Google). Nervespan is not involved in that data flow and has no access to it. Your relationship is directly with your API provider.

Anonymous device identifier

When you use hosted AI features, a randomly-generated UUID is sent as a header for rate-limiting purposes. This identifier:

• Is generated locally on your device at first launch
• Is not linked to your name, email, Apple ID, or any personal information
• Is used solely to enforce the daily AI usage limit (20 calls/day)
• Can be reset by reinstalling the app

Data storage

All your mind maps, notes, images, and settings are stored locally on your device as .synapse JSON files. If you do not use Cloud Sync, no server-side copy of your data exists and we have no access to your files.

Cloud Sync (optional)

Cloud Sync is opt-in. The app works fully without it, and nothing is uploaded until you sign in and enable it.

If you do enable it:

• What we store: your mind map documents, an account record containing your email address and sign-in timestamps, and a random device identifier per linked device with an optional device name derived from your platform (e.g. "macOS"). The device identifier is used solely to enforce device limits and let you manage linked devices — it is not an advertising identifier and is not shared with third parties.
• Where: on infrastructure we operate on Cloudflare (Workers, D1 and R2). Both the database and the document storage are created in Cloudflare's EU jurisdiction, which restricts where your data is stored and where database queries run to the European Union. This is a configured restriction, not a best-effort preference.
• How it is protected: encrypted in transit (TLS) and encrypted at rest by the storage provider. Access is restricted to your authenticated account.
• Authentication: passwordless. We email you a single-use sign-in code that expires after 15 minutes. We never store a password, and sign-in codes are stored only as a hash. Sign-in emails are delivered by Scaleway Transactional Email, in France — your email address and the code pass through that service in order to reach you.
• Retention: your documents remain until you delete them. Deleted documents are removed from active storage immediately and purged within 90 days.
• Deletion: signing out stops syncing on that device. To delete your account and all synced data, email enquiries@nervespan.com.
• Device limits: free accounts may link up to 2 devices. Pro accounts may link unlimited devices. A device not used for 60 days may have its slot released automatically to make room for a new one.

We do not read, analyse, mine, or sell your synced content, and we do not use it to train any model. Access occurs only where strictly necessary to operate the service or where legally required.

Please note: because we operate the sync service, your documents are technically accessible to us in a way that purely local files are not. If that matters for your content, keep Cloud Sync off — the app is fully functional without it.

Cookies and website analytics

This website and the Nervespan MindMap web app use Cloudflare Web Analytics, a privacy-focused analytics service. It works as follows:

• No cookies — no data is stored on your device
• No personal data — no IP addresses, device fingerprints, or identifiers are collected
• No cross-site tracking — data is not shared with advertisers or third parties
• Cloudflare counts page views and unique visitors using a privacy-preserving method (daily-rotating hash that cannot identify individuals)

We use this solely to understand how many people visit the site and use the app in aggregate. No individual user journeys are tracked or stored. You cannot be identified from this data.

For more information, see Cloudflare Web Analytics.

Children's privacy

Nervespan MindMap does not knowingly collect any personal information from children. The app does not require an account or any personal information to use.

Who else processes your data

We do not sell or share your data for anyone else's purposes. We do rely on a small number of service providers to operate the product. Each one only ever receives what that specific feature requires, and only when you have used it.

• Cloudflare — hosts the app and website, and runs the Cloud Sync service (Workers, D1 and R2) plus our aggregate analytics. Receives your synced documents and account record if, and only if, you enable Cloud Sync.
• Scaleway — provides the AI processing for the free hosted AI tier (Paris, France), and delivers sign-in emails via Transactional Email (France). Receives the node text you send to an AI action, or your email address and sign-in code, respectively. Scaleway states that no personal data is transferred outside the EU for its Transactional Email service, and that it engages no non-EU sub-processors for it.
• Your own AI provider, if you use your own key — under bring-your-own-key, requests go directly from your device to the provider you chose. We are not a party to that processing and cannot see it; you are the controller for it.

If you use the app without AI and without Cloud Sync, none of the above receives anything about you, because nothing leaves your device.

We will update this list if it changes. If a change means a new category of provider receiving your data, we will say so in the app as well as here.

Where your data is, and international transfers

We would rather tell you precisely than reassure you vaguely, so this section separates where your data is stored from where it is handled in transit.

• Stored in the European Union. Your synced documents and account record sit in Cloudflare storage created in Cloudflare's EU jurisdiction, which restricts storage and database execution to the EU.
• AI processing in France. Hosted AI requests are processed by Scaleway in Paris and not retained afterwards. Sign-in emails are delivered by Scaleway in France.
• Handled in transit at the nearest edge, which may be outside the EU. Cloudflare runs our sync service at whichever of its data centres is closest to you. If you are outside the EU, your request is received and processed there before reading from or writing to EU storage. That handling is transient — nothing is stored outside the EU — but it is honest to say the data passes through.
• Corporate ownership. Cloudflare, Inc. is a US company and Scaleway is a French company. EU-jurisdiction storage restricts where data physically lives; it does not by itself change which legal regimes a provider's parent company is subject to.

What protects data that does leave the UK or EEA. Our agreement with Cloudflare incorporates their Data Processing Addendum, under which Cloudflare acts as our processor. Transfers to Cloudflare in the United States are made under the EU–US Data Privacy Framework and its UK extension, to which Cloudflare is certified. Where a transfer is not covered by that framework, the European Commission's Standard Contractual Clauses apply, together with the Information Commissioner's Office International Data Transfer Addendum for data protected by UK law.

Government access requests. Under that same addendum, Cloudflare is contractually required to notify us of any third-party legal process seeking data we control unless it is legally prohibited from doing so, to tell the requesting party that it is only a processor and redirect them to us, to pursue legal remedies up to appellate level before producing data where a conflict of laws arises, and to disclose no more than legally required. Cloudflare also publishes standing commitments that it has never handed over encryption or authentication keys, never installed law-enforcement equipment on its network, and never provided a feed of customer content. Their current list of sub-processors is published at cloudflare.com/gdpr/subprocessors, and Scaleway's at scaleway.com/en/subprocessorlist.

We are telling you this rather than simply asserting that your data is safe, so that you can judge it for yourself.

If you use the app without AI and without Cloud Sync, none of this applies, because your data never leaves your device.

Legal basis for processing

Where we process personal data, the UK GDPR requires us to have a lawful basis for doing so. Ours are as follows:

• Using the app locally, without AI or Cloud Sync — no lawful basis is required, because no personal data is processed. Your maps stay on your device.
• Hosted AI features — consent, Article 6(1)(a). Each AI action is explicitly triggered by you, and AI can be switched off entirely in settings.
• Anonymous device identifier for AI rate limiting — legitimate interests, Article 6(1)(f). Our interest is preventing abuse of a free, unauthenticated service so it remains available to everyone. The identifier is random and not linked to you.
• Cloud Sync — storing and serving your documents — performance of a contract, Article 6(1)(b). Storing your documents is what the sync service is; we cannot deliver it otherwise.
• Account email address and sign-in codes — performance of a contract, Article 6(1)(b). We need to be able to authenticate you to give you access to your own synced data.
• Aggregate website and app analytics — legitimate interests, Article 6(1)(f). Our interest is understanding overall usage levels. No personal data or identifiers are collected, and no cookies are set.
• Bring-your-own-key (BYOK) AI — not applicable to us. Your data goes directly from your device to the provider you chose, and for that processing you are the controller and your chosen provider is your processor. Nervespan is not a party to it.

Where we rely on legitimate interests, we have considered the impact on your privacy and concluded it is minimal, as no data in those cases identifies you. You may object to that processing — see "Your rights" below.

Your rights (GDPR)

Under the General Data Protection Regulation, you have the right to access, correct, delete, or export your personal data.

If you have not enabled Cloud Sync, we hold no personal data about you at all — these rights are satisfied by default, because your data lives on your device under your control.

If you have enabled Cloud Sync, we hold your email address and your synced documents. To exercise any of these rights — including access, export, or full deletion of your account and synced data — email enquiries@nervespan.com and we will respond within one month. You can also export any document to a local file from within the app at any time.

If you have used AI features and wish to confirm that no data has been retained, contact us and we can confirm our stateless processing architecture.

Withdrawing consent and objecting

Where we rely on your consent (the hosted AI features), you may withdraw it at any time, and without giving a reason. You do not need to contact us to do so: switch AI off, or change provider, in the app's AI settings. Withdrawing consent stops any further processing but does not affect the lawfulness of processing already carried out while consent was in place.

Where we rely on legitimate interests (the anonymous rate-limiting identifier, and aggregate analytics), you have the right to object under Article 21. For the rate-limiting identifier, turning off the hosted AI features stops it being sent. For analytics, no identifier is collected in the first place, so there is nothing tied to you to object to — but you are welcome to raise it with us.

Complaining to a supervisory authority

If you are unhappy with how we have handled your personal data, we would rather hear from you first so we can put it right — but you have the right to lodge a complaint with a data protection supervisory authority. In the UK that is the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint. If you are in the EEA, you may complain to your local supervisory authority instead.

When you raise a complaint with us, we will acknowledge it within 30 days and aim to resolve it as quickly as possible. You can escalate to the ICO or your local supervisory authority at any time if you are not satisfied with our response.

Changes to this policy

If we make material changes to this privacy policy, we will update the "Last updated" date at the top of this page. For significant changes (e.g. introducing new data collection), we will notify users through the app.

Contact

For privacy-related enquiries:

Nervespan Ltd
Grosvenor House, 11 St. Pauls Square
Birmingham, England, B3 1RB
enquiries@nervespan.com