1. Introduction
Minda Mental Health ("we", "us", or "our") is a mental health support application operated by Cem G. ("the developer"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.
2. Information We Collect
2.1 Account Information
- Email address (used for account creation and authentication)
- Display name (optional)
- Preferred language
2.2 User Content
- Chat messages you send to Minda (text and voice)
- Mood entries (mood score, optional notes)
- Thought records (situation, thought, emotion, reframe)
- Profile photos and images attached to thought records
- Usage data (messages sent, features used)
2.3 Audio and Voice Data
Minda uses your device microphone to provide voice assistant features:
- Speech-to-Text (STT): When you use the voice assistant, your voice is recorded and sent to our backend, which forwards it to ElevenLabs Scribe to convert your speech to text. The audio is processed and not permanently stored.
- Text-to-Speech (TTS): AI responses are converted to speech using ElevenLabs text-to-speech service.
- The transcribed text of your voice messages is stored in your chat history.
2.4 Photos and Videos
Minda may access your device camera or photo library for profile picture upload and attaching images to thought records. Photos are uploaded to our server and associated with your account. They are not shared with third parties except as described in this policy.
2.5 Automatically Collected Information
- Device type and operating system version
- App version and language preference
- Timestamps of interactions
3. How We Use Your Information
3.1 AI-Powered Conversations
Your chat messages are sent to a third-party AI service (OpenRouter) to generate supportive responses. When you upload an image, it is processed using a vision-capable AI model.
3.2 Voice Processing
Your voice recordings are sent to ElevenLabs for speech-to-text conversion. The transcribed text is then processed by the AI service to generate a response.
3.3 Service Provision
- To provide mental health support, mood tracking, and thought records
- To maintain conversation history and AI memory for personalized support
- To send crisis resources when needed
4. Third-Party Services
4.1 OpenRouter (AI Service)
Minda uses OpenRouter as its AI service provider. Your messages are transmitted to OpenRouter's servers and processed to generate responses. OpenRouter's privacy policy.
4.2 ElevenLabs (Voice Processing)
Minda uses ElevenLabs for speech-to-text and text-to-speech. ElevenLabs' privacy policy.
4.3 Apple StoreKit (In-App Purchases)
Minda uses Apple's StoreKit framework for subscription management. Purchase receipts are validated with Apple's servers.
5. Data Storage and Security
5.1 Storage Location
Your data is stored on our secure servers located in the European Union.
5.2 Security Measures
- Passwords are hashed using bcrypt
- Data transmission is encrypted via HTTPS/TLS
- JWT tokens for authentication (stored in device Keychain)
- Database access is restricted and authenticated
- Rate limiting on authentication endpoints
5.3 Data Retention
Your data is retained for as long as your account is active. You can delete your account and all associated data at any time from the Profile screen.
6. Your Rights (GDPR)
If you are located in the European Union or European Economic Area, you have the following rights:
- Right of Access: Request a copy of your personal data
- Right to Rectification: Request correction of inaccurate data
- Right to Erasure: Delete your account and all data at any time
- Right to Data Portability: Request your data in a machine-readable format
- Right to Object: Object to the processing of your personal data
- Right to Withdraw Consent: Withdraw consent at any time by deleting your account
7. Data Sharing
We do not sell, rent, or trade your personal data. We only share data with OpenRouter (AI), ElevenLabs (voice), Apple (StoreKit), and when required by law.
8. Children's Privacy
Minda is not intended for children under 17. We do not knowingly collect personal data from children under 17.
9. Crisis and Emergency Situations
In crisis situations, Minda provides emergency hotline numbers based on your language preference. If you are in immediate danger, please contact your local emergency services directly.
10. Medical Disclaimer
Minda is not a substitute for professional medical advice, diagnosis, or treatment. Always seek the advice of a qualified healthcare provider.
11. Account Deletion
You can delete your account and all associated data at any time from the Profile screen in the app. Account deletion is permanent and irreversible. When you delete your account:
- All chat history is permanently deleted
- All mood entries and thought records are permanently deleted
- Your email address and profile information are permanently deleted
- AI memory associated with your account is permanently deleted
Account deletion takes effect immediately and cannot be undone.
12. Subscription Management
Minda offers auto-renewable subscriptions managed through Apple's StoreKit. Subscriptions can be managed and cancelled in your Apple Account settings at any time. Cancelling a subscription does not trigger immediate account deletion — you retain access until the end of the current billing period.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy within the app.
14. Contact Us
If you have questions about this Privacy Policy, please contact: cemfb@live.nl