Privacy Policy

1. Data We Collect

We collect only the data necessary to provide the App's features. This includes:

• Account information: Email address (only if you choose to create an account). Anonymous sessions are supported and require no personal information.
• Mood entries: Mood ratings, notes, and timestamps you submit through the mood tracker.
• Assessment responses: Answers to mental health self-assessments (e.g., PHQ-9, GAD-7).
• Goals and habits: Goals you set and habit tracking data.
• Chat history: Messages exchanged with the AI chat feature.
• Voice recordings and transcripts: Audio recorded during voice support conversations and the resulting transcript, used to provide transcription, AI responses, and spoken playback.
• AI personalization context: If you turn on personalized AI features, recent mood notes, assessment scores, goals, habits, and related timestamps may be included with your AI request.
• Anonymous page view analytics: Collected via Vercel Analytics (no cookies, no personal identifiers).

2. How Your Data Is Used

Your data is used solely to provide and improve the App's features:

• Displaying your mood history, trends, and progress.
• Powering AI chat conversations and generating affirmations after you consent to AI data sharing in the App.
• Transcribing voice recordings and generating spoken responses.
• Tracking your goals, habits, and streaks.
• Providing self-assessment scores and mental health resources.
• Understanding aggregate, anonymous usage patterns to improve the App.

We do not sell, rent, or share your personal data with third parties for advertising or marketing purposes. The App contains no ads. Third-party AI sharing is limited to the optional AI features described below and requires in-app consent before data is sent.

3. AI Processing

The App uses third-party AI services to power optional AI features. Before your first AI request, the App asks for permission to send selected data to AI providers through the MHtoolkit backend. If you decline, chat messages, voice recordings/transcripts, and personalized context are not sent for AI processing.

• Google Gemini: Processes standard chat messages and may generate personalized affirmations.
• Anthropic Claude: Handles complex or crisis-related chat interactions.
• OpenAI: Transcribes voice recordings (speech-to-text) and generates spoken responses (text-to-speech).

Data sent to these providers can include the message or audio you submit, the generated transcript, and optional recent moods, assessment scores, goals, and habits if you enable personalized AI features. We do not intentionally send your email address or account identifiers to AI providers. AI providers process data according to their own data processing terms and privacy policies.

4. Data Storage and Security

• Your data is stored in a PostgreSQL database hosted by Supabase in the EU West (Ireland) region.
• All data is transmitted over HTTPS and encrypted in transit using TLS.
• Data at rest is encrypted by Supabase's infrastructure.
• Row Level Security (RLS) policies ensure that users can only access their own data.
• Anonymous sessions use a locally generated identifier stored on your device. No server-side personal data is associated with anonymous sessions beyond what you explicitly enter.

5. Third-Party Services

The App relies on the following third-party services:

• Supabase — Database hosting and authentication.
• Vercel — Application hosting and anonymous page view analytics (no cookies, no personal identifiers).
• Google (Gemini API) — AI chat and affirmation generation.
• Anthropic (Claude API) — AI chat for complex interactions.
• OpenAI (Whisper & TTS APIs) — Voice transcription and text-to-speech.

Each service processes data in accordance with its own privacy policy. We encourage you to review their respective policies.

6. Data Retention

• Your data is retained for as long as your account exists or your anonymous session remains active.
• Voice recordings are processed in real time for transcription and are not permanently stored by MHtoolkit.
• AI provider retention is governed by each provider's data processing terms and privacy policy.
• When you delete your data (see Section 7), it is permanently removed from our database.
• Anonymous session data that has not been accessed for an extended period may be periodically purged.

7. Your Rights

You have the following rights regarding your data:

• Access: You can view all your data within the App at any time.
• Export: You can export all your data from the Settings page in a portable format.
• Deletion: You can permanently delete all your data or your full account from the Settings page. This action is irreversible.
• AI consent: You can decline AI data sharing before using AI features, and you can revoke prior AI consent from the Settings page. AI features will ask again before sending data.
• Correction: You can edit or update your entries directly within the App.

If you need assistance exercising any of these rights, please contact us at the email address listed below.

8. Children's Privacy

MHtoolkit is not intended for use by children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal data, please contact us and we will promptly delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Effective date" at the top of this page. We encourage you to review this policy periodically. Continued use of the App after changes constitutes acceptance of the updated policy.

10. Contact

If you have any questions or concerns about this Privacy Policy or your data, please contact: