MindRested Privacy Policy

We collect only the information needed to provide safe, effective therapy. This includes information you give us, information collected automatically as you use the platform, and information from trusted third parties.

Information you provide

• Account details — your name, email address, password, and preferred language.
• Profile information — your photo, city or region, and the preferences you choose to share.
• Health and wellbeing information — questionnaire responses, mood entries, and topics you discuss with your therapist.
• Session and message content — video sessions, text chats, and notes shared within the platform.
• Payment information — handled by our certified payment processors; we never store full card numbers.
• Support communications — questions and messages you send to our support team.

Information collected automatically

• Usage data — the features you use, pages you view, and session duration.
• Device and browser data — device type, operating system, and browser.
• Log data — access times, IP address, and referring pages.
• Approximate location — derived from IP address for security and compliance.

Information from third parties

We may receive information from payment providers, identity verification services, and — where permitted — publicly available sources, solely to operate and secure the platform.

Sensitive information

Health and mental-health information is sensitive. We collect it only with your consent and use it exclusively to deliver and improve your care experience.

We use your information to:

• Create and secure your account, and verify your identity.
• Match you with suitable, licensed therapists.
• Deliver encrypted video sessions and private messaging.
• Personalize self-care content in Arabic, French, and English.
• Process payments and manage subscriptions.
• Send essential service notices, appointment reminders, and security alerts.
• Respond to your questions and support requests.
• Monitor and improve the reliability, safety, and quality of the platform.
• Detect and prevent fraud, abuse, and unauthorized access.
• Comply with legal and regulatory obligations.

We do not sell your personal information, and we never share therapy content with advertisers.

Information may be shared only in the following limited circumstances:

• With your therapist — so they can provide your care, under professional confidentiality duties.
• With service providers — payment, video, hosting, and messaging providers bound by contracts and data-protection agreements.
• For legal reasons — when required by law, court order, or to protect the safety of our users and the public.
• In a business transfer — if MindRested is involved in a merger or acquisition, under equivalent confidentiality protections.

We apply industry-standard safeguards, including:

• End-to-end encryption for video sessions and in-transit encryption (TLS) for all data.
• Encrypted storage of sensitive health information.
• Strict access controls — staff access data only when needed to support you.
• Regular security testing, monitoring, and audits.
• Training for every team member on privacy and confidentiality.

No method of transmission over the internet is 100% secure. We work hard to protect your data and will notify you promptly of any breach affecting your information, as required by law.

We keep information only as long as necessary:

• Account data — while your account is active and for a limited period after deletion as required by law.
• Therapy records — retained according to applicable health-record regulations.
• Payment records — retained for tax and accounting requirements.
• Security logs — retained for a limited period to detect and investigate incidents.

You are in control of your data. Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Delete your account and associated data, subject to legal retention requirements.
• Export your data in a portable format.
• Object to or restrict certain processing.
• Withdraw consent at any time, without affecting lawful prior processing.
• Lodge a complaint with your local data-protection authority.

To exercise any of these rights, contact us at privacy@mindrested.com. We respond within 30 days.

We use a small number of cookies and similar technologies to keep you signed in, remember your language preference, and understand aggregate usage. We do not use advertising trackers. See our Cookie Policy for details.

• Essential cookies — required for security and core functionality.
• Preference cookies — remember your language and display settings.
• Analytics cookies — help us understand how the platform is used, with anonymized data.

MindRested is intended for users aged 18 and over, unless therapy is arranged with appropriate parental or guardian involvement under applicable law. We do not knowingly collect data from underage users without such consent. If you believe a child has provided us information, please contact us so we can remove it.

MindRested is designed for users in Morocco and the wider MENA region. If you access the platform from another country, your information may be processed in accordance with this policy and applicable local law.

We may update this policy as our services evolve or as required by law.

When changes are significant, we will notify you by email or through an in-app notice before they take effect. The 'last updated' date above always reflects the current version.

Questions about privacy or a request about your data? Our privacy team is here to help:

• Email: privacy@mindrested.com
• General support: support@mindrested.com
• We respond to every request within 30 days.