Privacy Policy

Mentor Mindset · Last updated: July 8, 2026

Mentor Mindset ("the app") is a manager-coaching application operated by RapidCanvas ("we", "us") on behalf of the organization that invited you. This policy explains what we collect, why, and your choices. Because coaching conversations can touch on workplace and people-management topics, we treat your data as sensitive and limit collection to what the app needs to function.

Who controls your data

RapidCanvas is the data controller for the app and operates it for your organization. Questions or requests: privacy@rapidcanvas.ai.

What we collect

• Account information — your email address, organization, and role. Authentication (including your password) is handled by our provider Supabase; we do not store your raw password.
• Your coaching content — the messages you send and the AI coach's responses, so we can provide the feature and your conversation history.
• Notification token — a device push token, only if you enable notifications, so we can deliver the reminders and daily questions you opt into.
• Diagnostics — crash and error reports via Sentry. These are errors only: we do not send your conversation content, and personal-data attachment is disabled (no session recording).
• Optional device features — the camera or photo library only if you choose to attach an image, and the microphone/speech recognition only if you use voice input. We do not access these otherwise.

What we do NOT do

• We do not sell or rent your data.
• We do not show advertising or use third-party advertising trackers.
• We do not track you across other apps or websites.

How we use your data

To provide the coaching experience and your history, to generate AI responses, to send notifications you have enabled, and to keep the service reliable and secure.

Sharing with a third-party AI service

To generate coaching responses, the app sends the messages you type and your recent conversation history to a third-party AI service — the RapidCanvas platform and OpenAI, whose large-language models RapidCanvas uses on our behalf to generate responses. This happens only after you have explicitly agreed in the app: the first time you sign in, Mentor Mindset shows a consent screen explaining what is sent and to whom, and no message is sent to the AI service until you accept. You can stop sharing at any time by not sending messages, or by deleting your account.

These providers act as our contracted processors and are required by contract to protect your data to the same or an equivalent standard described in this policy, to use it only to provide the service, and not to sell it or use it for their own purposes. We may change AI model providers in future and will update this policy if we do.

Service providers

We share data only with processors that help us run the app, under contract and only for that purpose:

• Supabase — authentication and database hosting.
• RapidCanvas platform & OpenAI — a third-party AI service; your messages and recent conversation history are processed to generate coaching responses (see "Sharing with a third-party AI service" above).
• Expo — delivery of push notifications.
• Sentry — error/crash diagnostics (no conversation content, no personal data).

Retention & deletion

You can delete your account at any time from within the app: Settings → Delete account. This immediately and permanently removes your login, email, profile, organization membership, notification preferences, and device tokens, signs you out, and cannot be undone.

Your coaching conversation history is part of your organization’s coaching program and is retained by RapidCanvas on that organization’s behalf (as its data processor); it is not deleted when you delete your account. It is used only to operate and improve the coaching program for your organization and is never sold or shared. If you rejoin with the same work email, your history may be restored. To request deletion of your retained coaching content as well, email privacy@rapidcanvas.ai (subject to your organization’s data-retention agreement).

Security

Data is encrypted in transit (TLS). Session credentials are stored in the device's secure storage (Keychain/Keystore). Access to backend data is restricted and scoped to your organization.

Children

Mentor Mindset is a workplace tool intended for adult employees and is not directed to children.

Changes

We may update this policy; we will revise the "Last updated" date above. Material changes will be communicated through the app or your organization.