Legal
Privacy
Short version — your account is your email, your progress is yours, and we use what you do in the school only to understand what works and make it better.
What we do NOT do
- No tracking cookies and no advertising pixels.
- No selling or sharing of data with third parties.
- Your password is stored encrypted (hashed) by Supabase: we never see it.
Without an account
You can visit the public pages of the school without signing up and without us storing anything about you. The training (training hall, missions and scrolls) requires a free student account: it is what lets us keep your progress and measure which contents work.
With an account: what we keep
When you create your account we store:
- Your name, your email, your country, your password (hashed) and, if you provide it, your phone. The name appears on your belt cards. We only use these contact details to communicate with you about the platform; the details are in the terms and conditions you accept when creating your account.
- Your progress: missions and exams completed, XP, belts, achievements, streak, and the answers you write in reflections (so you find them on any device).
- Your activity in the school: which missions you open, which cards you see, what you answer in quizzes, which scrolls you finish and when. We use it to understand which content works, where people get stuck and what to improve. We do not use it for advertising.
When you sign in, your local progress merges into your account (the most advanced state is kept).
Courses and masters (Your School). Once course creation opens: when you enter a course, its master can see your progress and results IN THAT course (completed missions, belts and exam scores). You can also authorize mentor masters by adding their email to your list: they will see your progress and results across all your courses, and you can revoke them anytime from your profile. The course directory lists each course by its code; a private course only opens with its master’s access code.
Data is stored on Supabase (servers in the European Union or the United States depending on the project region ) protected by access policies that prevent any user from seeing another user’s data. You can request a copy or the complete deletion of your account by writing to us.
Newsletter
If you join the list on the Contact page, we keep your email, your language and the page you signed up from, only to send you notices about new content. You can unsubscribe at any time.
Third-party services
Fonts are loaded from Google Fonts (your browser requests those files from Google, which may log your IP address). The site is hosted on GitHub Pages, whose servers log access according to GitHub’s privacy statement. Accounts and progress are managed with Supabase.
Controller
MindFu · hello@mindfu.com
Data processing is governed by Colombia’s Law 1581 of 2012 and Decree 1377 of 2013; your rights and how to exercise them are in the terms and conditions you accept when creating your account.
Last updated: August 24, 2026.