Mindenity handles wellbeing information as sensitive information. We use it to provide the services you request, support safe care and meet legal obligations—not to sell sensitive health data.
1. Scope and responsibility
This Privacy Policy applies to the Mindenity website, patient and therapist applications, MENA Assessment, MENA Companion, appointments, sessions, secure chat, payments and support interactions.
The Mindenity entity identified in your account or service terms acts as controller for platform information. A therapist may have separate professional responsibilities for their clinical records.
2. Information we collect
2.1 Account and identity information
Name, contact details, date of birth or age range, location, verification status, account role and authentication information.
2.2 Wellbeing and care information
Assessment answers, goals, preferences, mood and sleep entries, appointment details, care-team links, safety responses, session-related information and content you choose to share.
2.3 Professional information
For therapists: profile, licence, credentials, specialisations, verification history, availability, session records and payout details.
2.4 Technical and transaction information
Device, browser, IP address, security logs, audit events, notification tokens, payment status and support records. Full payment-card details are generally handled by payment providers rather than stored by Mindenity.
3. Where information comes from
We receive information directly from you, from people participating in an authorised couples or family service, from therapists and care-team members, from payment and communications providers, and automatically from devices used to access Mindenity.
4. How we use information
- Create, secure and administer accounts.
- Provide assessments, matching, bookings, sessions, chat and wellbeing tools.
- Support therapist verification, clinical operations, payments and payouts.
- Send service, safety and preference-based notifications.
- Prevent abuse, investigate incidents and maintain audit records.
- Improve reliability and evaluate features using appropriately limited data.
- Meet clinical, financial, safeguarding and legal obligations.
5. Legal bases and consent
Depending on your location and the activity, processing may rely on performance of a contract, consent or explicit consent, legitimate interests, compliance with law, protection of vital interests, or permitted health and care grounds.
You can withdraw consent for optional processing, but this does not affect processing already carried out or information that must be retained under another lawful basis.
7. MENA Assessment, MENA Companion and automated tools
These features process the information you provide and relevant permitted context to generate follow-up questions, non-diagnostic summaries or conversational responses. Outputs may be inaccurate and must not be treated as emergency, diagnosis, medication or treatment advice.
Safety-related signals may trigger a pause, crisis guidance or a review workflow. Access to related information is controlled according to your care relationship, consent, safety needs and applicable law.
8. Security and confidentiality
We use measures such as encryption in transit, restricted storage, role-based permissions, refresh-token controls, private file access, rate limiting, monitoring, backups and audit logging. No internet service can guarantee absolute security.
Keep your credentials private and contact us if you suspect unauthorised access.
9. Retention, account closure and deletion
We retain information only for as long as needed for care, account operation, security, disputes and legal obligations. Different record types have different retention periods.
When you request deletion, we remove or de-identify information that is no longer required. Some clinical, transaction, audit, safety and professional records may be retained in restricted form for an applicable legal or professional period.
10. International transfers
Mindenity and its providers may process information outside your country. Where required, we use recognised transfer safeguards and contractual protections appropriate to the information and destination.
11. Your privacy rights
Depending on your location, you may have rights to access, correct, delete, restrict or object to processing; receive a portable copy; withdraw consent; and complain to a data-protection authority. In Nigeria, these rights are addressed by the Nigeria Data Protection Act 2023 and overseen by the Nigeria Data Protection Commission.
We may need to verify your identity and may limit a request where law protects another person’s rights, clinical confidentiality, safety or required records.
12. Children, dependants and family care
Mindenity is not directed to children except through a specifically supported service with appropriate consent and safeguarding controls. Family participation does not give every participant unrestricted access to another person’s private account or records.
13. Changes to this policy
We may update this policy when services, providers or legal requirements change. The latest version and date will remain available here, with additional notice for material changes where required.
14. Contact and complaints
For privacy questions or requests, email privacy@mindenity.com. For general support, email support@mindenity.com.
You may also raise a concern with the data-protection authority that applies in your location.