Privacy Policy

1. Information We Collect

We collect the following types of information:

• Account Information: Your email address for authentication purposes.
• Assessment Data: Your responses to mental health screening tools (PHQ-9, GAD-7).
• Activity Data: Information about activities you schedule and complete, thought records, fear ladder items, and daily check-ins.
• Safety Events: Records of when safety features are triggered to ensure appropriate support.

2. How We Use Your Information

Your information is used to:

• Provide personalized mental health self-help tools
• Track your progress over time
• Ensure safety features function correctly
• Improve our services

3. Data Security

All data is encrypted in transit and at rest. We use Row Level Security (RLS) to ensure that users can only access their own data. Your data is stored securely using Supabase infrastructure.

4. Data Sharing

We do not sell your personal information. We do not share your data with third parties except as required by law or with your explicit consent. If you enable AI features, anonymized prompts may be sent to AI providers, but no personally identifiable information is included.

5. Your Rights

You have the right to:

• Access all data we have about you
• Export your data in a portable format
• Delete your account and all associated data
• Disable AI features at any time

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, all your data will be permanently deleted within 30 days.

7. Contact

If you have questions about this privacy policy or your data, please contact us at privacy@mindpath.app.