Security

Effective date: July 26, 2026

1. Our commitment. NETMIND CLOUD LLC takes the protection of your data seriously and applies technical and organizational measures appropriate to the nature of the Service.

2. Authentication. You sign in with an identity provider — Apple or Google — or with an email address and a password you can set from your profile settings. Whichever you choose, your password never reaches our servers: it travels over an encrypted connection to Google Firebase, the authentication service we use, which stores it in hashed form and checks it when you sign in. Authentication itself uses industry-standard signed tokens.

3. Data in transit and at rest. Communication between the app and our servers is encrypted in transit (TLS). Data is stored with reputable cloud providers that apply their own certified physical and logical security controls.

4. Access controls. Access to personal data is restricted to what is strictly necessary to operate the Service, following the principle of least privilege.

5. Your part. Keep your device and your Apple/Google account secure (screen lock, provider two-factor authentication). Sessions on shared devices should be closed after use. If you have set a password for your Tulbrain account, choose one you do not use anywhere else, and do not share it.

6. Incidents. If we become aware of a security incident affecting your personal data, we will assess it, mitigate it, and notify affected users and authorities where the law requires it.

7. Responsible disclosure. If you believe you have found a vulnerability in the Service, please report it to hello@netmindcloud.com with reasonable detail. We ask that you do not exploit it, do not access third-party data, and give us reasonable time to fix it. We do not take legal action against good-faith research conducted under these rules.

8. No absolute guarantee. No system is 100% secure; we cannot guarantee absolute security, but we review and improve our measures continuously.

9. Contact. hello@netmindcloud.com.