Privacy Policy

🔐 Our Commitment to Your Privacy

Last Updated: January 2025

1. Information We Collect

To provide you with personalized mental health support, we may collect:

• Account Information: Name, email address, and basic profile details
• Mental Health Data: Mood entries, therapy session notes, and wellness tracking
• Usage Analytics: App interaction patterns to improve our services
• Device Information: Basic device data for app functionality

2. How We Use Your Information

Your data is used exclusively to:

• Provide personalized AI therapy sessions and mental health insights
• Track your wellness progress and mood patterns
• Improve our AI algorithms and user experience
• Send important app updates and wellness reminders (with your consent)

3. Data Security & Protection

We implement industry-leading security measures:

• End-to-End Encryption: All sensitive data is encrypted in transit and at rest
• Secure Infrastructure: HIPAA-compliant cloud hosting with advanced security protocols
• Access Controls: Strict employee access limitations and background checks
• Regular Audits: Continuous security assessments and vulnerability testing

4. Data Retention & Deletion

You have complete control over your data:

• Personal data is retained only as long as necessary for service provision
• You can request data deletion at any time through the app settings
• Upon account deletion, all personal data is permanently removed within 30 days
• Anonymized analytics may be retained to improve our services

5. Third-Party Services

We work with carefully vetted partners who share our privacy values:

• Supabase: Secure database hosting with encryption
• Analytics Providers: Anonymous usage statistics only
• Cloud Services: Enterprise-grade security and compliance

6. Your Privacy Rights

You have the following rights regarding your personal data:

• Access: Request a copy of all data we have about you
• Correction: Update or correct any inaccurate information
• Deletion: Request complete removal of your account and data
• Portability: Export your data in a readable format
• Opt-out: Unsubscribe from communications at any time

7. International Data Transfers

If you're located outside the United States, please note that:

• Your data may be processed in the US where our servers are located
• We ensure adequate protection through standard contractual clauses
• All transfers comply with applicable international privacy laws

8. Children's Privacy

MindFlow is designed for users 13 years and older:

• We do not knowingly collect data from children under 13
• Users 13-17 should have parental consent before using the app
• If we learn we have collected a child's data, we will delete it immediately

9. Changes to This Policy

We may update this Privacy Policy from time to time:

• Material changes will be communicated through the app and email
• We'll provide 30 days notice before significant changes take effect
• Continued use after changes indicates acceptance of the new policy