Last updated October 19, 2026
In short: we collect what we need to make your vision film, meditation and audios, and to run your account. We don't sell your data, we don't show ads, and we don't use tracking or advertising cookies. You can delete your account and data at any time in Settings.
All Is Mind (allismind.app) is operated by Mahesh Khemlani, based in Panama City, the Republic of Panama ("we", "us"). We are the controller of your personal data, which means we decide how and why it is used. For anything about your data, write to hello@allismind.app.
We follow Panama's personal data protection law (Law 81 of 2019) and, for people in the European Union, the United Kingdom and California, the additional rules described below.
We do not sell your personal data, use it for advertising, or share it with anyone except the service providers below, who help us run All Is Mind.
| Provider | What for | What they receive |
|---|---|---|
| DigitalOcean | Hosting the app | All data stored by the app |
| Signing in | Your sign-in request | |
| Alibaba Cloud (Model Studio) | Writing your lines and meditation guidance; making and checking your scene images | Your vision answers, your photos and scene descriptions |
| Amazon Web Services (S3) | Storing your film, audio and recordings securely, and nightly backups of the app's data | The files made for you, your voice recordings, and an encrypted backup of your account data (including your journal), kept for 30 days |
| OpenRouter and Fish Audio | The guide's voice in your meditation and lessons | The text to be spoken |
| Anthropic (Claude) | Helping us organize beta feedback each day | Your feedback (with your first name only) and journal entries you chose to share (without your name or email) |
| PayPal | Payments and subscriptions | Your payment and plan details |
| Apple, Google and Mozilla notification services | Delivering reminders to your device, if you turn them on | The reminder, encrypted so that only your device can read it, and when to deliver it |
| Resend | Sending emails | Your email address and the message |
| Cloudflare | Our domain and forwarding emails sent to us | Emails you send to us |
| Google Fonts | Showing the website's fonts | Your IP address when a page loads |
These providers may process data in countries other than yours, including the United States and, for image generation, other regions where Alibaba Cloud operates.
Your photos are used only to make your scenes. They are deleted when you tell us you're happy with your film, or automatically 7 days after your film is ready. Only add photos of other people, including your partner or children, if you have their permission (or, for a child, you are their parent or guardian). Scene images made from those photos stay in your film and library until you delete them or your account.
We keep your account data for as long as you have an account, so your library and progress stay with you. When you delete your account in Settings, we delete your vision, photos, recordings, film, audios, journal, reminder settings and progress from our server, and cancel any active plan. This includes the copies of your files stored with Amazon S3. Copies in our nightly backups (your account data, not your photos or films) are removed automatically within 30 days. We may keep limited records where the law requires it, such as payment records.
We use only the cookies needed to keep you signed in and to complete sign-in and invitations. We don't use analytics, advertising or tracking cookies.
You can see and change your vision and tools in the app, play your film and audios there, and delete your account at any time in Settings. You can also write to us to ask for a copy of the personal data you gave us (your answers, lines, photos and recordings), a correction, or deletion. Under Panama's Law 81 of 2019 you have the rights of access, rectification, cancellation, opposition and portability, and you may complain to Panama's data protection authority, ANTAI (Autoridad Nacional de Transparencia y Acceso a la Información). Depending on where you live, you may have further rights, described below for the EU, the UK and California.
Your files are stored privately and are only served to your own signed-in account. Connections to All Is Mind are encrypted. No system is perfectly secure, but we work to protect your data and limit who can access it.
All Is Mind is for adults aged 18 and over. We don't knowingly create accounts for anyone under 18.
If you live in the European Economic Area or the United Kingdom, the General Data Protection Regulation (GDPR, or the UK GDPR) gives you the following protections.
Why we may use your data (legal bases)
Photos of people. We use photos only to create the scenes you request. We do not use them to identify anyone, and we do not create biometric templates for identification. When you add photos of other people, you confirm that you have their permission to do so.
Your rights. You have the right to access your data, correct it, delete it, restrict or object to how we use it, receive it in a portable format, and withdraw consent. You also have the right to lodge a complaint with the data protection authority in the country where you live or work. To use any of these rights, write to hello@allismind.app from the email address of your account. We will reply within one month, and we may ask you to confirm your identity.
International transfers. Your data is processed outside the EU and UK, including in Panama and the United States, by us and by the providers listed above. Where the law requires it, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses where our providers offer them, or on the transfer being necessary to provide the service you have asked for.
Automated decisions. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. AI is used only to create and check the images and voice recordings you ask for.
How long we keep data. As described above under "How long we keep your data".
All Is Mind may not meet the thresholds that make the California Consumer Privacy Act (as amended by the CPRA) apply to us, but we give California residents these rights voluntarily.
What we collect (in the past 12 months), using the law's categories:
We collect this information directly from you and from your use of the app, for the purposes described in "How we use it". We disclose it only to the service providers listed above, for those purposes.
We do not sell or share your personal information, including for cross-context behavioural advertising, and we have not done so in the past 12 months. We do not knowingly sell or share the personal information of anyone under 16. Because we don't sell or share, we treat browser signals such as Global Privacy Control as already honoured. We do not use sensitive personal information to infer characteristics about you.
Your rights. You have the right to know what personal information we collect, use and disclose; to get a copy of it; to correct it; to delete it; and to opt out of its sale or sharing (which we don't do). We will not treat you differently, for example by charging more or offering a different service, for using these rights. To make a request, write to hello@allismind.app from the email address of your account, or have an authorised agent write on your behalf with your signed permission. We will confirm your request within 10 business days and respond within 45 days.
Retention. We keep each category of information for as long as your account exists, and delete it when you delete your account, except limited payment records the law requires us to keep.
Shine the Light. We do not disclose personal information to third parties for their own direct marketing purposes.
If we change this policy in a meaningful way, we'll update the date above and, where appropriate, tell you in the app or by email.
Questions about this page? Write to hello@allismind.app.