1. Information we collect
We collect the following information when you use MindBridge:
- Account information: name, email address, encrypted password
- Therapy chat messages and session history
- Mood logs including emoji, label, score, and optional notes
- Medical records: diagnoses, medications, and session notes you enter
- Blockchain hashes of your medical records (stored on Polygon)
2. How we use your information
- To provide and improve the MindBridge service
- To generate AI therapy responses (your messages are sent to Anthropic Claude API)
- To display your mood trends and history
- To store and retrieve your medical records
- To send password reset emails when requested
3. Third-party services
We use the following third-party services:
- Anthropic Claude — processes your chat messages to generate AI responses
- Supabase — stores your data in a PostgreSQL database
- Vercel — hosts the application
- Resend — sends transactional emails
- Polygon blockchain — stores cryptographic hashes of medical records
- Upstash Redis — rate limiting to protect the service
4. Data security
We implement the following security measures:
- Passwords are hashed using bcrypt and never stored in plain text
- All data is transmitted over HTTPS
- Medical records are protected with blockchain integrity verification
- Rate limiting prevents unauthorized bulk access
- JWT sessions expire after 24 hours
5. Data retention
We retain your data for as long as your account is active. You may request deletion of your account and associated data by contacting us at support@mindbridge.app. Note that blockchain hashes cannot be deleted as they are permanently recorded on the Polygon network.
6. Your rights
Depending on your location, you may have the following rights:
- Right to access your personal data
- Right to correct inaccurate data
- Right to delete your data (right to be forgotten)
- Right to data portability
- Right to withdraw consent
To exercise these rights, contact us at support@mindbridge.app
7. Children's privacy
MindBridge is not intended for users under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us immediately.
8. Changes to this policy
We may update this privacy policy from time to time. We will notify you of significant changes via email. Continued use of MindBridge after changes constitutes acceptance of the updated policy.
9. Contact us
For privacy-related questions or to exercise your rights, contact us at support@mindbridge.app