Minda
Minda security and vulnerability reporting
Last updated 29 September 2026
Report a vulnerability
Send your report to the security contact at the end of this page. Please include what you found, the steps to reproduce it, the version of Minda (Settings → About) or the address of the page on this server, and what an attacker could do with it.
Test only against your own account and your own data. Do not read, change or delete anyone else's data, and do not run tests that degrade the service for other people. Do not include real personal data in a report.
We aim to acknowledge a report within 3 working days and to tell you what we plan to do about it.
What is in scope
- The Minda desktop app, in the builds we publish.
- The Minda account server: sign-in, billing, sync, Minda AI, teams, community skills and the phone app.
Out of scope: weaknesses in other people's websites or services, denial-of-service attacks, spam and social engineering of our staff or users, and findings that need a device or account that is already compromised.
What we do with a report
- We confirm the problem, fix it and ship the fix in an update.
- When a vulnerability is being actively exploited, or a severe incident affects the security of Minda, we tell the affected users without undue delay and what they can do about it. Where the EU Cyber Resilience Act applies, we also notify the authorities on its timetable: an early warning within 24 hours of becoming aware and a full notification within 72 hours.
- With your permission we credit you when the fix is published.
Your data and our services
What Minda sends off your computer is described in the Privacy summary. The companies that handle data for us are listed in Service providers.
The operator of this server has not published who it is or how to contact it yet. Do not rely on this page until it has.
Who runs this service
- Publisher and operator
- Not set by the operator of this server.
- Contact
- Not set by the operator of this server.
- Security reports
- Not set by the operator of this server.
Terms · Privacy · Security · Service providers · Remove a profile