This Privacy Policy describes what personal data the MindHunter service (“Service”, “we”) collects and processes, for what purposes, and how we protect it. By using the Service, you confirm that you have read and agree to this Policy. The Policy is prepared in accordance with Federal Law No. 152-FZ “On Personal Data” and Apple App Store requirements.
1. Data controller
The controller of personal data is an individual — the developer and owner of the MindHunter Service. For data-processing inquiries, write to the email address listed on the app’s App Store profile.
2. What data we collect
2.1 Data you provide
- Account data: email address, name (optional), password hash.
- Diagnostic results: answers to psychological tests, state assessments, attachment type.
- Check-ins: daily ratings of mood, anxiety, stress, energy, confidence, and sleep.
- Journal: text entries you enter yourself.
- Fears and pains: descriptions of issues you work on in the Service.
- Chat messages: correspondence with the AI assistant.
- Payment data: when paying for a subscription, data is processed solely by the payment provider; full card details are not shared with us.
2.2 Data collected automatically
We do not use tracking cookies, advertising identifiers (IDFA/GAID), geolocation, or biometric data.
- IP address, device/OS type and version, system language.
- Technical request logs (date, time, server response) — to ensure security and stable operation.
- Push-notification tokens — only with the user’s explicit consent.
3. Purposes of processing
- Providing Service features: diagnostics, chat, practice plans, journal, progress.
- Personalizing AI recommendations based on your data.
- Sending notifications (check-in reminders) — only with your permission.
- Ensuring security: protection against unauthorized access.
- Improving Service quality in anonymized form.
- Complying with legal requirements.
4. Sharing data with third parties
We do not sell or share your data with advertising networks, data brokers, or other third parties for commercial purposes.
- Google (Gemini API AI service, Google Cloud): chat messages, attachments, psychological test results, check-ins, journal entries, your goals and fears, as well as your name and age (if provided) are sent over an encrypted channel to generate replies and reports. Under the Google Gemini API terms, Google does not use this content to train its models and does not share it with advertisers.
- Hosting and infrastructure: data is stored on servers of a hosting provider bound to confidentiality.
- Payment provider: processes transactions independently under its own privacy policy.
- We require every third party listed above to protect personal data at a level no lower than that set out in this Policy: processing only under our instructions and applicable law (including Russian Federal Law 152-FZ and the GDPR).
5. Data storage and protection
Data is stored on the Service server for as long as your account is active, plus 90 days after deletion (technical logs — up to 1 year). We apply:
- communication-channel encryption (HTTPS/TLS);
- password hashing (bcrypt);
- access-control separation for the database;
- JWT tokens with a limited lifetime.
6. Your rights
Under 152-FZ you have the right to:
- Obtain information about stored data (export is available under Profile → Export data).
- Correct inaccurate data via profile settings.
- Delete your account and all related data — in Profile → Delete account (or write to the contact email).
- Withdraw consent to processing — which will make it impossible to use the Service.
- Disable notifications at any time in profile settings or device system settings.
Requests are processed within 30 days.
7. Children’s privacy
The Service is intended solely for persons 18 years of age and older. We do not knowingly collect data from minors. If you learn that a child has registered with the Service, contact us to delete the data.
8. Sensitive data and mental health
Data about psychological state (diagnostic answers, journal, chat) is sensitive. It is processed solely to provide Service features and is not used for advertising profiling.\n\nImportant: The Service is not a medical device, does not diagnose, and does not replace professional psychological or psychiatric care. In crisis situations, call the helpline: 8-800-2000-122 (free, 24/7).
9. Policy changes
We may update this Policy. For material changes, we will notify you by email or in-app notice. Continued use of the Service after a new version is published means you agree to the changes.
10. Contact
For personal-data processing questions, write to the email listed on the app’s App Store page or in the Service profile settings. Response time — up to 30 business days.