MindMapX, Privacy Policy

Publisher: Technocrux Product: MindMapX (Windows desktop application, distributed through the Microsoft Store) Effective date: 11 September 2026 Contact: hello@devride.com

1. Summary

MindMapX is a mind mapping app that runs on your own PC.

Your mind maps stay on your PC. We never upload them, and we cannot read them.
We collect the small amount of account information needed to sign you in: your name, your email address, and your password.
The only piece of information about your use of the app that leaves your device is the date your free trial started.
We do not use analytics, advertising, or tracking tools. We do not sell your personal information.
MindMapX needs an internet connection to sign in. Once you are signed in, your maps are created and saved locally.

2. Who we are

MindMapX is published by Technocrux. Technocrux is the controller of the personal information described in this policy.

If you have a question about this policy or about your data, email hello@devride.com.

3. Information we collect

3.1 Account information

When you create an account we collect:

Data	Why we collect it
Full name	To identify your account and address you in the app
Email address	To identify your account, verify it, and send account emails such as verification and password-reset codes
Password	To authenticate you

Account sign-in and account management are handled by Flyo, a first-party backend service operated by Technocrux. Flyo is not a third-party company; it is our own service.

3.2 Account security information

Email verification. After sign-up we email you a 6-digit code to confirm you control the email address.
Two-factor authentication (optional). If you enable it, you can sign in with a code from an authenticator app, or with a recovery code. Enabling this stores the information needed to check those codes against your account.
Password reset. If you ask to reset your password, we email you a 6-digit code that is valid for 10 minutes.
Sign-in token. After you sign in, an authentication token is stored on your PC. It is protected using Windows DPAPI, scoped to your Windows user account. The "Remember me" option controls whether that token is kept between sessions or discarded when you close the app.

3.3 Trial information

MindMapX includes a 7-day free trial. The date your trial started is recorded on your account as well as on your device. We do this so the trial cannot be restarted by reinstalling the app or changing your PC's clock.

This trial start date is the only information about your use of the app that is sent from your device to us.

3.4 Technical information received when you connect

Like any internet service, our servers and the CDN described in section 6.2 necessarily receive your IP address and basic connection information in order to respond to a request. We do not use this to build a profile of you, and we do not combine it with your maps (which we never receive).

4. Information that never leaves your device

The following is created and stored only on your PC:

All mind maps, including topic text, notes, tasks, markers, attached images and recorded voice notes.
Maps are saved as .mflow / .mindflow JSON files under %LOCALAPPDATA%\MindMapX\Maps, together with an AutoSave folder.

MindMapX has no cloud sync, no sharing, no collaboration features, and no cross-device access. We have no copy of your maps and no technical way to retrieve them.

Please back up your maps. Because your maps exist only on your PC, they are your responsibility to back up. If your PC is lost, reset, or the files are deleted, we cannot restore them for you. Copy the %LOCALAPPDATA%\MindMapX\Maps folder to a backup location, or use your own backup software.

5. Device permissions

5.1 Microphone

MindMapX can record short voice notes of up to 30 seconds and attach them to a topic. The microphone is used only when you start such a recording. The recorded audio is embedded in the local map file on your PC. It is never transmitted to us or to anyone else.

5.2 Images and files

You can attach images that you choose from your own PC. They are embedded in the local map file. They are not uploaded.

6. Who we share information with

We do not sell your personal information and we do not share it for advertising. Information reaches other parties only in these limited ways.

6.1 Microsoft (payments and subscription status)

Purchases and subscriptions are processed entirely by Microsoft through the Microsoft Store. Technocrux never sees, receives or stores your payment card details. The app asks the Microsoft Store whether your account has an active subscription; it receives only that status.

Microsoft's handling of your purchase is governed by Microsoft's own privacy statement and Microsoft Store terms.

6.2 jsDelivr CDN (icon stickers)

Icon stickers used in the app are downloaded at the time you use them from the public jsDelivr CDN (cdn.jsdelivr.net). As with loading any image from the internet, that CDN can see your IP address and the request. No account information and no map content is sent with these requests.

This is the only third-party network call MindMapX makes, apart from our own authentication service.

6.3 Legal requirements

We may disclose account information if we are legally required to do so, for example in response to a valid legal order. We cannot disclose your maps, because we do not have them.

7. Where your information is stored

Your maps, voice notes, images and sign-in token are stored on your own PC.
Your account information is stored by our Flyo authentication service on infrastructure operated by or for Technocrux. If you need to know the specific hosting region for a compliance requirement, email us at hello@devride.com and we will tell you.

We take reasonable steps to protect account information, but no internet service can be guaranteed to be perfectly secure.

8. How long we keep information

Account information is kept for as long as your account exists. When you ask us to delete your account, we delete the account record and its associated authentication data.
Verification and password-reset codes are short-lived; a password-reset code expires after 10 minutes.
The trial start date is kept with your account for as long as the account exists.
Your maps are kept on your PC until you delete them. Deleting them is entirely under your control, and deleting your account does not delete them.

9. Your rights

You can:

Access the account information we hold about you.
Correct it if it is wrong.
Export or delete your maps yourself, directly, at any time, they are ordinary files in %LOCALAPPDATA%\MindMapX\Maps. You do not need us for this and we cannot do it for you.
Delete your account. Email hello@devride.com from the address on the account and ask us to delete it. We will delete the account record and its authentication data. Your maps stay on your PC; delete the files yourself if you also want them gone.
Object to or restrict certain processing, where applicable law gives you that right.
Complain to your local data protection authority if you are in a region that has one.

To exercise any of these, email hello@devride.com. We may need to confirm you control the account email before acting on a request.

10. Legal bases for processing (UK/EU, GDPR)

If you are in the UK or the European Economic Area, we rely on the following legal bases:

Purpose	Legal basis
Creating and operating your account; signing you in	Performance of a contract with you
Sending verification and password-reset codes	Performance of a contract with you
Optional two-factor authentication	Performance of a contract, plus your consent to enable it
Recording the trial start date to prevent trial resets	Our legitimate interest in preventing abuse of the free trial
Responding to legal orders	Compliance with a legal obligation

You have the GDPR rights set out in section 9, including the rights of access, rectification, erasure, restriction, objection and data portability. Email hello@devride.com to exercise them. You also have the right to lodge a complaint with your supervisory authority.

Note that we hold very little about you, and none of your map content, so a data access or portability request will return your account details only.

11. California privacy notice (CCPA/CPRA)

If you are a California resident:

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We have never done so.
The categories of personal information we collect are identifiers (name, email address) and account credentials, described in section 3.
We collect them for the account and authentication purposes described in section 3, and for the trial-management purpose in section 3.3.
You have the right to know what we collect, to request deletion, and to request correction. Email hello@devride.com.
We will not discriminate against you for exercising these rights.

12. Children

MindMapX is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has created an account, email hello@devride.com and we will delete it.

If you are in a region where a higher age of digital consent applies, please do not create an account unless you meet that age or have your parent's or guardian's permission.

13. Internet connection

MindMapX requires an internet connection to sign in, to verify your email, to reset a password, to check your subscription status with the Microsoft Store, and to download icon stickers. Creating and editing maps happens on your PC.

14. Changes to this policy

We may update this policy. When we do, we will change the effective date at the top and publish the updated policy at the same location. If a change materially affects how we handle your information, we will make a reasonable effort to tell you in the app or by email. Continuing to use MindMapX after an update means you accept the updated policy.

15. Contact

Questions, requests or complaints about privacy:

Technocrux Email: hello@devride.com