Your privacy is
not negotiable

1. What we collect

When you create an account, we collect:

• Account information: Email address and a hashed password (we cannot see your password in plain text).
• Usage data: Mood check-in entries, journal content, wellness activity completions, breathing session counts, and game scores.
• Device data: Browser type, operating system, and session timestamps — used only for security and debugging.
• Preferences: Notification settings, accessibility preferences, and AI companion persona configuration.

2. How we store your data

All user data is stored in Google Firebase Realtime Database with strict security rules that ensure only your authenticated session can read or write your records. Data is encrypted at rest using AES-256 and in transit over TLS 1.3. Firebase is GDPR-compliant and stores EU user data in European data centres by default.

3. Third-party services

We use the following third-party services, each with their own privacy policies:

• Google Firebase — database, authentication, and cloud storage.
• Google Fonts — font delivery over CDN.
• Font Awesome — icon delivery over CDN.
• Stripe — payment processing for premium subscriptions (we never see your card details).

We do not use Google Analytics, Meta Pixel, or any behavioural tracking technology. We do not serve targeted advertising.

4. AI and your data

When you interact with Sunnie, our AI companion, your messages are processed to generate responses. Conversation history is stored in your account to provide continuity. Your conversation data is not used to train AI models without your explicit opt-in consent. You can clear your AI conversation history at any time from Settings.

5. Your rights

• Right of access: Request a copy of all data we hold about you.
• Right to rectification: Correct any inaccurate personal data.
• Right to erasure: Delete your account and all associated data permanently from Settings, or by contacting us.
• Right to portability: Export your mood and journal data in JSON format from Settings → Export Data.
• Right to restrict processing: Contact us to pause data processing while a dispute is resolved.

6. Data retention

If you delete your account, all personal data is removed from our active systems within 7 days and from backups within 30 days. Anonymised, aggregated usage statistics may be retained indefinitely as they cannot be linked to you.

1. Who can use MindCare

You must be at least 16 years old to create an account and use MindCare independently. Users aged 13–15 may access MindCare with verifiable parental or guardian consent. By creating an account, you confirm that you meet this age requirement.

2. Permitted use

MindCare is a mental wellness support platform. You may use it to:

• Track your mood, emotions, and mental health over time.
• Access journaling, breathing exercises, and educational resources.
• Interact with our AI companion for emotional support and psychoeducation.
• Connect with licensed therapists via our matching service.

You may not use MindCare to harass other users, spread misinformation, reverse-engineer our systems, or violate applicable laws.

3. Not a medical service

4. Therapist connections

When you use our therapist matching service, you are connecting directly with independently licensed mental health professionals. MindCare verifies their credentials and facilitates booking but is not party to the therapeutic relationship. Therapists are bound by their own professional codes of conduct and regulatory bodies.

5. Acceptable use of AI

Sunnie AI is designed to provide emotional support and psychoeducation. You agree not to attempt to use Sunnie to obtain medical diagnoses, extract harmful content, or circumvent safe messaging guidelines. We monitor AI interactions for safety signals and reserve the right to suspend accounts that violate these terms.

6. Limitation of liability

MindCare is provided "as is" without warranty of any kind. To the extent permitted by law, we are not liable for indirect, incidental, or consequential damages arising from your use of the platform. Our liability for direct damages shall not exceed the amount you paid to us in the 12 months preceding the claim.

7. Changes to terms

We may update these terms periodically. Material changes will be communicated by email at least 14 days before taking effect. Continued use of MindCare after changes constitutes acceptance of the new terms.

Cookies we use

• Session authentication cookie: Set by Firebase Authentication to keep you logged in. Essential for the platform to function. Expires when you log out or after 30 days of inactivity.
• Preference cookies: Stores your accessibility settings (high contrast, large text, voice navigation) locally. Never sent to our servers.
• CSRF protection cookie: Used to prevent cross-site request forgery. Automatically set and managed.

What we do not use

We do not set or read third-party advertising cookies. We do not use Google Analytics, Facebook Pixel, Hotjar, or any similar behavioural tracking tools. We do not build advertising profiles from your visit.

Managing cookies

You can control cookies through your browser settings. Blocking session authentication cookies will prevent you from logging in. Blocking preference cookies means your accessibility settings will not persist between sessions.

MindCare is committed to ensuring its platform is accessible to all users, regardless of disability or access need. We aim to conform to WCAG 2.1 Level AA standards across all pages.

Current accessibility features

• Full screen reader compatibility with ARIA landmarks, live regions, and descriptive labels.
• Voice navigation powered by the Web Speech API (Chrome, Edge, Safari on HTTPS).
• High contrast mode toggled from Settings or the Alt+A shortcut.
• Large text mode that scales the entire interface uniformly.
• Keyboard-only navigation with clear focus indicators on all interactive elements.
• Audio captions and visual toast notifications for users who are deaf or hard of hearing.
• Motion reduction support via prefers-reduced-motion media query.

Known limitations

Some complex data visualisations in the AI Insights section currently lack full text alternatives. We are working to resolve this in Q1 2026. Dynamic content loaded by our AI companion may not always be announced by all screen readers in all browsers.

Feedback

If you encounter an accessibility barrier, please contact us at accessibility@mindcareapp.me. We aim to respond within 2 business days and resolve issues within 30 days.

For questions about this policy, to exercise your data rights, or to report a privacy concern, please contact our Data Protection Officer:

Making a data access or deletion request

The fastest way to export or delete your data is directly from the MindCare app: Settings → Account → Export Data or Settings → Account → Delete Account. If you need assistance or cannot access your account, email us at the address above with your registered email address and the nature of your request.

Supervisory authority

If you are located in the UK, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk. EU users may contact their national data protection authority.