Skip to content
MindAction
How it works Companions Privacy
EN PT FR
Get the app

Privacy Policy

Last updated: Tuesday, October 27, 2026

This policy explains how the MindAction app and the mindaction.cactotech.com website handle information. MindAction is published by Cacto Tech (“we”). We wrote it in plain language, and the short version comes first.

On this page

  1. Who we are and how to reach us
  2. What stays on your device
  3. The optional PIN, encryption and recovery codes
  4. Reports, exports and backups
  5. Reminders and notifications
  6. Ads in the free version
  7. Optional anonymous diagnostics
  8. Premium and purchases
  9. This website
  10. Who else handles information
  11. Your choices and rights
  12. Security
  13. Changes to this policy
  14. Contact

The short version

  • Your entries are stored on your device. There are no accounts, and we do not receive your activities, experiments, problems, reflections, ratings or notes.
  • They leave your device only when you export, back up or share them.
  • An optional PIN encrypts the local database. With the PIN off, the app does not encrypt it.
  • The free version shows ads through Google AdMob, and Google may process technical identifiers to deliver them.
  • Anonymous diagnostics can be switched off at any time and never include your entries.
  • This website sets no cookies and uses no analytics, advertising or social trackers.

Who we are and how to reach us

MindAction is published by Cacto Tech. We decide how the information described here is handled for the app and for this website.

Publisher: Cacto Tech

Write to diariorpd@gmail.com

What stays on your device

Everything you write in MindAction is stored in the app’s private storage on your device:

  • activities, planned times, attempts and reflections
  • behavioral experiments, predictions, belief ratings and what happened
  • problems, options, action plans and the links between them
  • ratings, companion choice and app settings, reminders and the backups you create

MindAction has no account system and no cloud sync. We do not receive this content and cannot read it, recover it or delete it for you.

The optional PIN, encryption and recovery codes

You can turn on a PIN in Settings. When you do, MindAction encrypts the local database with a key that is protected by your PIN together with a secret kept in your device’s secure storage, and it shows you four recovery codes. You must save those codes yourself. If you lose both the PIN and the recovery codes, nobody, including us, can open the encrypted data.

While the PIN is off, entries are kept in the app’s private storage but the app does not encrypt the database itself, so your device’s own protections (such as its screen lock and system sandbox) are what apply. Turning the PIN off decrypts the database again.

Face ID or fingerprint unlock is offered only on top of a PIN and is handled by your device’s operating system. MindAction never receives your fingerprint or face data. No protection is unbreakable; for example, someone who knows your PIN and holds your unlocked device can open the app.

If you allow activity names on Home Screen or Lock Screen widgets, those names are visible outside the app and are hidden whenever the PIN is on. This is off by default.

Reports, exports and backups

You can create PDF or CSV reports and backup files (.mabackup). They are created only when you ask. Backup files are protected by a password you choose; if you lose that password, the backup cannot be opened.

Reports can contain personal writing. Once you save or share a file, it is outside the app and outside our control, so choose carefully where it goes. Apps, cloud storage services and people you send it to have their own rules.

Reminders and notifications

Reminders are local notifications scheduled by the app on your device with your permission, which you can withdraw in your device settings. Their text is generic unless you choose to show activity names. They do not pass through our servers.

Ads in the free version

The free version shows ads served by Google AdMob. Banners appear only on a few dashboard screens, and a full-screen ad may appear at a natural exit, such as after an export or when you leave Progress. You can also choose to watch a rewarded ad to unlock a Premium report feature once. Ads never appear on onboarding, privacy, recovery or lock screens, in forms, in reflections or on the safety card. Premium removes ads.

To show an ad, Google’s software on your device may process technical information such as device or advertising identifiers where your system provides them, your IP address and the approximate location derived from it, and how ads were shown or interacted with. Google documents that this can include frequency capping, aggregate reporting and abuse prevention even when ads are not personalized. Google acts as an independent controller under its own policy: https://policies.google.com/privacy.

MindAction never gives advertisers your entries or any text from the app. On iOS the app does not ask for tracking permission, so iOS does not give the ad software an advertising ID. On Android, ad personalization follows the consent choices you make and your system ad settings. Where a consent message is required, MindAction shows Google’s consent form after setup, and you can review your choices later under Settings, Privacy and data, Ad choices.

Optional anonymous diagnostics

Some versions of the app can send anonymous diagnostics to a collector operated by Cacto Tech, so we can find crashes and slow screens. The choice is shown during setup and in Settings, Privacy and data, and you can switch it off at any time. The switch starts on.

Diagnostics contain only a closed list of items: the names of screens and features, the type name of an error, counts and timings, the app version, your operating system name and version, your language, and a random install identifier created on your device. That identifier is not your advertising ID, and “Delete all data” removes it from your device.

Diagnostics never contain titles, descriptions, beliefs, reflections, ratings, notes, names or entry dates.

Premium and purchases

Premium is an optional monthly or yearly subscription sold through the Apple App Store or Google Play. Apple or Google handles the payment, billing and receipts under their own terms and privacy policies. MindAction reads whether your subscription is active and keeps a local flag so the app works offline; we do not receive your payment details. To manage, cancel or restore a subscription, use your store account settings or Restore purchases in the app. Deleting the app does not cancel a subscription.

This website

This website sets no cookies and uses no analytics, advertising or social media trackers. Its fonts, scripts and images are served from the site itself, not from third parties. The language you see comes from the address you open (for example /pt-br), so no language cookie is needed.

Our hosting infrastructure keeps standard server logs of each request (IP address, time, requested address, response code and browser user agent) to run the site and to detect and block abuse. We use them for security and troubleshooting, not to build profiles, and keep them only as long as needed for those purposes. Security tooling on the host may analyze IP addresses to block abusive traffic.

If you write to us, we receive your email address and your message. We use them only to answer you and keep them as long as needed for that. Links to the App Store or Google Play lead to services run by Apple or Google under their own policies.

Who else handles information

We do not sell personal information. Information is handled by:

  • Google (AdMob and its consent tools) for ads in the free version
  • Apple and Google for app downloads and subscriptions
  • our hosting provider, for the website and, where enabled, the diagnostics collector

These providers may process information in countries other than yours, under their own safeguards and terms.

Your choices and rights

In the app you can:

  • turn anonymous diagnostics off under Settings, Privacy and data
  • review your ad consent choices under Ad choices
  • turn the PIN on or off, and create a new set of recovery codes
  • create reports and backups, and delete backups made on the device
  • use “Delete all data” to remove your entries and reflections, backups made on the device, the database and keys, the PIN, reminders and preferences. Files you already shared or saved elsewhere are not affected.

Uninstalling the app removes its local data from your device in the usual way for your system.

Because we do not hold your entries, we cannot access, correct or delete them for you; you control them in the app. For anything we may hold, such as an email you sent us or a diagnostics install identifier, contact us.

Depending on where you live (for example under Brazil’s LGPD, Canadian privacy laws or the GDPR), you may have rights to access, correct, delete, restrict or object to the use of personal information, to withdraw consent, to move your information, and to complain to a data protection authority. Nothing in this policy limits rights that cannot be limited by law.

Security

Network features use encrypted connections (HTTPS/TLS). On the device, the protections described above apply. No system is perfectly secure, so we cannot promise absolute security.

Changes to this policy

We may update this policy when the app or the law changes. The date at the top shows the latest version. If a change materially affects how information is handled, we will say so in the app’s release notes or in the app where practical.

Contact

Publisher: Cacto Tech

Write to diariorpd@gmail.com

Terms of Use Back to the home page

MindAction

MindAction is a self-help tool, not a medical device. It supports therapy and does not replace it.

Privacy Policy Terms of Use diariorpd@gmail.com
English Português (Brasil) Français (Canada)

© 2026 Cacto Tech

Scenery and companion art by the MindAction team.