Privacy at PowerExt

Last updated 24 October 2026

PowerExt makes Scribe Menu, Wander, Tandem and Mind. Each product has its own policy that lists what it stores and who processes it. This page covers what they have in common: who we are, where your data lives, and your rights.

ProductWhat it handles
WanderPrice watches, trips, boards, and travel documents you upload
TandemYour household's lists, dates and plans, shared or private
MindYour journal: entries, photos and voice notes, and what Mind reads in them
Scribe MenuText you send to an AI action from your browser
PowerExt AccountHow you sign in to Wander, Tandem, Mind and Scribe Menu

Who we are

PowerExt is the controller of the personal data described in these policies. PowerExt is a sole trader (toiminimi) owned by Rafiul Alam, registered in Finland with Business ID (Y-tunnus) 3664909-8 and domiciled in Turku. Contact us at [email protected].

Where your data is kept

  • Wander, Tandem, Mind, Scribe Menu and PowerExt Account run on servers we operate in the European Union. Their databases and uploaded files stay there.
  • Cloudflare carries all traffic to our sites. It encrypts the connection and protects us against attacks, so it handles your IP address and the pages you request.
  • Backups of the databases and files are encrypted on our servers before they're stored off-site, so the storage provider can't read them. We keep daily backups for 14 days, weekly backups for 8 weeks, and monthly backups for 6 months.

Server logs

Our servers write a log line for each request: the time, the address requested, the response, your IP address, your browser's description, and, when you're signed in, your user id and sometimes your email address. We use these to keep the services running and to investigate errors and abuse. They are deleted after 14 days. Performance traces, which record how long each step of a request took and carry your user id but not what you typed, are deleted after 7 days.

AI and AI credits

Mind, Wander and Scribe Menu send their AI requests through two services we run on our own servers: an AI gateway, which holds our keys for the AI providers, and a counter that keeps each person's AI credits: their monthly credits (150 a month for everyone) and their plan's credits for each month paid for, shared across the apps, and any credits they bought.

  • The gateway records which model was used, how many words (tokens) went in and out, and what it cost, but not what was sent or answered. It keeps that record for 30 days.
  • The counter receives your PowerExt Account id with each request and removes it before the request goes on, so AI providers never get it. It records how many credits each app used for you each month, your plan's monthly credits and the credits you bought, and nothing you wrote. It keeps the monthly counts for the current month and the 12 before it, and deletes everything when your PowerExt Account is deleted.

Each app's policy says what it sends to which AI provider.

Payments

Plans and credit packs are sold through Paddle (Paddle.com), our reseller: Paddle is the seller of record, takes the payment, handles sales tax and VAT, and sends receipts. You give your payment details, name, email and country to Paddle, not to us, and Paddle handles them under its own privacy policy.

Our billing service (billing.powerext.co) keeps your PowerExt Account id, Paddle's ids for you as a customer and for your subscription, your plan, its status and dates, and which of Paddle's notifications it has handled. It never sees your card. It tells the counter above your plan's monthly credits and the credits you bought.

This website

powerext.co doesn't have accounts or forms, loads no analytics or tracking scripts, and sets no cookies. We see how much the site is visited from Cloudflare's statistics of the traffic it carries for us (see above): counts of requests by page, country and browser, not who you are.

What we don't do

  • We don't sell personal data or share it for advertising.
  • We don't show ads in our products.
  • We don't use your content to train AI models.

Most processing is necessary to provide the service you signed up for (contract). Security logs, abuse prevention and website statistics rely on our legitimate interest in running safe, working services. Where a feature needs your consent, such as browser notifications, we ask first, and you can withdraw it at any time.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a portable format. Wander lets you export and delete your data yourself from your profile. For everything else, email [email protected] from the address on your account, and we'll reply within 30 days. Deleted data leaves our backups as they expire, within 6 months.

You can also complain to a data protection authority: in Finland, the Data Protection Ombudsman (tietosuoja.fi), or the authority where you live or work.

Children

Our products are not meant for children under 16, and we don't knowingly collect their data. If you believe a child has given us data, tell us and we'll delete it.

Changes

When we change a policy, we update the date at the top of the page. If a change affects how we use data you've already given us, we'll tell you in the product or by email before it takes effect.