Privacy

Last updated October 21, 2026

WideMind uses your information only to operate and improve the product and—if you explicitly ask us to—send product updates. We do not sell your personal information.

Using the WideMind workspace

You can sign in with an email code or Google. If you choose Google, Google shares your verified email address and basic profile information with our authentication provider, Supabase. WideMind uses persistent authentication cookies to remember your sign-in on this browser. You can sign out at any time.

When AI features are enabled and you request a response or quiz, prompts, attached images, and selected note or source context are sent to OpenAI. WideMind sends these requests with response storage disabled. Under OpenAI's default API data controls, request data may still be retained in abuse-monitoring logs for up to 30 days and is not used to train models unless the account explicitly opts in. See OpenAI's API data-controls documentation.

When you request a diagram, the selected note or conversation context, your question, and WideMind's style reference are sent to Google's Gemini API to create the visual. The generated diagram and its source are sent to OpenAI for an advisory visual check. These requests follow the providers' API data controls. Saved diagrams remain in your private workspace. See Google's Gemini API terms.

In the signed-in workspace, your projects, notes, messages, highlights, quiz progress, PDFs, and images are saved to your private cloud account so you can continue on another device. Uploaded PDFs are available for reading and are automatically prepared for use in project chats.

Uploading a PDF starts preparation automatically. Preparation processes the PDF in an isolated worker and sends its extracted text to OpenAI to create search embeddings. When you ask a question with project sources enabled, your question is used for lookup and relevant passages may be included in the answer request, even if you did not highlight them yourself. Embedding requests have their own API data controls; disabling response storage does not mean that every provider log has zero retention.

Previously saved PDFs are not prepared automatically, and projects you previously set to reading only keep that choice. Prepare all PDFs in project settings prepares every previously saved PDF in that project. Removing a PDF stops new processing and schedules removal of its derived data. Cleanup becomes eligible after a 24-hour grace period and runs during subsequent maintenance; in-flight work and already issued storage permissions must finish or expire safely. Data already sent to a provider cannot be recalled. Past conversation requests, answers, and their source evidence remain part of those conversations until you delete them. Temporary lookups that were never attached to a response expire separately. Removing a PDF also removes access through its source links.

Your browser also keeps cached files, drafts, and changes waiting to sync. Clearing site data can remove changes that have not yet reached the cloud. The app distinguishes saved cloud work from pending local changes. Older browser-only work is uploaded only when you explicitly import it into your signed-in account.

Our new name and address

WideMind was previously called Canvas. Your existing account and saved cloud workspace continue to use the same service. Signing in at widemind.app does not transfer browser-local drafts, pending uploads, or privacy preferences from a CanvasLearn address. Finish syncing on the original address before continuing on WideMind, and keep that tab available if any work is still waiting to save. You can review analytics choices separately on each address.

Joining the waitlist

If you explicitly join the WideMind waitlist, we store the email address you confirm so we can send early-access invitations and occasional product updates. You can unsubscribe from those emails at any time.

Service providers

Vercel hosts the website and provides aggregated, cookie-free web analytics. Supabase provides account authentication, workspace storage, and private file storage. Resend delivers sign-in emails, Neon stores waitlist records, and OpenAI provides enabled AI features. Google's Gemini API processes diagram requests when Gemini generation is enabled, and its API data controls also apply to requests sent before a later provider change. These providers process information to help us operate WideMind. See Vercel's analytics privacy documentation.

Optional usage and error reports

When you accept analytics or enable reports in Privacy settings, WideMind sends selected actions, completion states, timings, public app page views and technical failures to PostHog's EU cloud. Page views use fixed public route labels without task identifiers, queries or fragments. Reports use a random identifier kept on this browser, separated between signed-in accounts. We do not send your email, account ID, project or document names, notes, prompts, answers, PDF contents or images. Automatic click analytics and network-body reporting are disabled.

Reporting is off until you allow it, and you can turn it off in Privacy settings, available from your account menu (or the privacy button on sign-in and error screens). WideMind respects browser Do Not Track and Global Privacy Control signals. The preference and random reporting identifiers are kept in local browser storage; reporting does not use tracking cookies. Your browser and PostHog can observe connection metadata such as your IP address; geolocation enrichment is disabled.

PostHog currently retains free-plan analytics and error metadata for up to one year. See PostHog's privacy notice. Diagnostic recording failures do not prevent saving or using WideMind.

Optional masked session replay

Accept enables both reports and masked session recordings. You can choose Reports only or Off in Privacy settings. Existing reports-only preferences do not enable recordings. When recordings are enabled, WideMind also sends recordings of clicks, scrolling and interface layout from your signed-in workspace to PostHog's EU cloud. Study text and typed input are masked; PDFs, images, diagrams, editable text, hidden fields and file inputs are blocked. Names and private accessibility labels are hidden, and page URLs exclude task identifiers, queries and fragments. Console output, network headers and bodies, audio and video are excluded.

Replay uses the same random reporting identity and no tracking cookies. It stops when you choose Reports only or Off, reject analytics, sign out, or when a browser privacy signal blocks reporting. Switching accounts ends the old recording and uses a separate random identity and session for the new account. The preference is saved on this browser. Masking takes place before replay data leaves your device.

If you choose Report a problem, your submitted description and basic technical diagnostics are sent to WideMind through PostHog even when automatic reporting is off. No files or screenshots are attached automatically. Please avoid including private study content in your description.

How long we keep it

We keep a waitlist email until the waitlist ends, you unsubscribe, or you ask us to remove it. Cloud workspace data remains associated with your account until it is deleted or you request its removal. During early access, account export and deletion requests may be handled manually. Backup copies expire separately from active data; we will explain the applicable backup retention when handling a deletion request. Browser-only copies remain until you remove them.

Your choices

To ask what information we hold, correct it, or request deletion, email hello@widemind.app.