Privacy & Legal
Overview
Mind Measure maintains strict privacy and legal compliance standards across all platforms and jurisdictions.
Privacy Policy
Effective Date: January 2025
Version: 2.0
Mind Measure is committed to protecting your privacy and ensuring the confidentiality of your personal and health information. This app processes sensitive health data related to mental wellness following HIPAA, UK GDPR, and other applicable privacy regulations.
Information We Collect
Personal Information
- Account Information: Name, email address, password
- Profile Data: Display name, avatar, wellness goals, preferences
- University Affiliation: Institution code (for cohort assignment only)
Health and Wellness Data
- Assessment Responses: Wellness questionnaires and voice assessments
- Mood Tracking: Daily mood check-ins and self-reported wellness indicators
- Audio Data: Voice recordings (processed and deleted within 24 hours)
- Usage Patterns: App interaction patterns, session duration, feature usage
What We DON'T Collect
- Precise Location tracking
- Contact list access
- Photos/Videos from your device
- Other app usage monitoring
How We Use Your Information
- Personal Wellness Tracking: Provide personalized mental health insights
- Baseline Assessment: Establish your personal wellness baseline
- Progress Monitoring: Track your wellness journey over time
- Crisis Prevention: Identify concerning patterns and provide resources
- App Improvement: Enhance features based on usage patterns
Data Sharing and Security
We Share Information With:
- Service Providers: Supabase (EU-hosted), OpenAI (transcription), AWS (processing)
- University Partners: Aggregated, anonymized data only - never individual data
- Emergency Services: Only when legally required for immediate safety
Security Measures:
- All data encrypted in transit (TLS 1.3) and at rest (AES-256)
- Multi-factor authentication and role-based access
- Regular security audits and penetration testing
- 24-hour breach notification procedures
Your Privacy Rights
Under UK GDPR, you have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your data
- Portability: Receive your data in machine-readable format
- Objection: Object to processing based on legitimate interest
Contact: privacy@mindmeasure.app
Terms of Service
Effective Date: January 2025
Version: 2.0
Agreement to Terms
By using Mind Measure, you agree to these Terms of Service. The app provides mental wellness tracking, AI-powered insights, progress monitoring, and crisis prevention tools.
Eligibility and Accounts
- Must be 18+ years old with legal capacity to enter contracts
- Provide accurate, complete information during registration
- Maintain confidentiality of login credentials
- Responsible for all activity under your account
Acceptable Use
You May:
- Use the App for personal mental wellness tracking
- Share your data with healthcare providers
- Provide feedback to improve the service
- Access and export your data
You May NOT:
- Share your account or provide false information
- Reverse engineer or attempt to hack the App
- Use for illegal purposes or disrupt the service
Mental Health Disclaimer
IMPORTANT: Mind Measure provides wellness tracking, NOT medical diagnosis or treatment. Always consult healthcare professionals for medical advice. For emergencies, call emergency services (999 in UK, 911 in US).
Contact Information
Legal Questions: legal@mindmeasure.app
Privacy Questions: privacy@mindmeasure.app
General Support: support@mindmeasure.app
App Store Privacy Summary
Data Collection
- Contact Info: Email address for account creation
- Health Data: Wellness assessments, mood tracking, voice recordings
- Usage Data: App interaction patterns, feature usage
- Technical Data: Crash logs, performance data
Data Use
- App functionality and personalization
- Analytics to improve performance
- No advertising or marketing use
Data Sharing
- Service providers only (Supabase, OpenAI)
- No advertising partners
- University partners receive aggregated data only
Privacy Practices
- All sensitive data encrypted
- User control over data access and deletion
- GDPR and HIPAA compliant