Your vault stays with you.

Secure by design

Your vault lives on your local device, and the day-to-day work of organising and recalling your information happens locally, on hardware you own. We hold no central copy of your records, and nothing leaves your device on its own.

That architecture is the first layer of security: there is no central store of vaults to breach. What we do not hold cannot be lost, leaked or demanded from us.

An encrypted vault

Your vault is an encrypted store on your computer, protected by one password that only you hold. A recovery phrase, issued when your vault is created, is the only other way back in.

Should you choose to export your records, the export is ordinary readable files, and it is as safe as the computer it sits on.

Your question decides what is shared

When Mina answers, only the slice of your records that the question needs is sent to the AI provider, relayed through GetMine’s server, which keeps none of the content. Never your whole vault, and never your logins. Nothing leaves at rest, and nothing leaves without a question that requires it.

You set the terms

Sharing happens by choice, per source and per permission, and what you have chosen is always visible in the app. You can disconnect a source or withdraw a consent whenever you choose, and doing so stops any further use immediately. An answer already given cannot be unsaid, so what changes is what happens next, which is the honest shape of any consent.

The logins you grant

Credentials for the sources you connect are stored encrypted on your machine, separate from your health records. A copy of your vault, wherever it ends up, contains no usable login to anything.

What we do not claim today

Being useful about security means being exact about its limits.

• We cannot reset your password. If you lose both your password and your recovery phrase, nobody can open your vault, us included. That is the price of a vault only you can read.
• We hold no formal certifications. We have not sought SOC 2 or ISO 27001, and we do not make claims we cannot back up. We will pursue the right ones as the product and the team grow.

A foundation, not a destination

We are a small team in open beta. Security is foundational and we treat it that way: as GetMine matures our posture will deepen, with more controls, more transparency, and progressively more of the architecture running at the edge.

Questions

Write to security@getmine.ai for any trust or security question. We will answer honestly, and if our answer is “not yet”, we will say so.

The privacy policy is the governing statement; where the two could be read differently, the privacy policy prevails.