GDPR Compliance

Your Privacy is Our Priority

At Mindly, we take data protection and privacy seriously. We are fully compliant with the General Data Protection Regulation (GDPR) and are committed to protecting your personal data and respecting your privacy rights.

How We Comply with GDPR

Data Security

End-to-end encryption and secure storage

All conversations with Mindly are end-to-end encrypted. Your data is stored on secure, GDPR-compliant servers located in the European Union with strict access controls and regular security audits.

Transparency

Clear information about data processing

Our Privacy Policy clearly explains what data we collect, how we use it, and your rights regarding your personal information. We avoid complex legal jargon to ensure clarity.

User Rights

Control over your personal data

We respect and uphold your GDPR rights, including the right to access, correct, delete your data, and the right to data portability. You can exercise these rights through your account settings or by contacting us.

Data Minimization

Only collecting what's necessary

We only collect the data that's necessary to provide our service. We don't sell your data to third parties or use it for purposes other than improving your experience with Mindly.

Your GDPR Rights

Under GDPR, you have several rights regarding your personal data. We make it easy for you to exercise these rights:

1
Right to Access: You can request a copy of all the personal data we hold about you.
2
Right to Rectification: If your personal data is inaccurate or incomplete, you can request that we correct it.
3
Right to Erasure: You can request that we delete your personal data under certain conditions.
4
Right to Restrict Processing: You can request that we limit how we use your data.
5
Right to Data Portability: You can request a copy of your data in a machine-readable format.
6
Right to Object: You can object to our processing of your personal data.

To exercise any of these rights, please contact our Data Protection Officer at dpo@mindly.fit or through our contact form.

How We Process Your Data

Data Category	Purpose	Legal Basis	Retention Period
Account Information	To create and manage your account	Contract Performance	Until account deletion
Chat Content	To provide therapy services	Contract Performance	90 days after creation
Usage Data	To improve our services	Legitimate Interest	12 months
Payment Information	To process payments	Contract Performance	As required by law

Have Questions About Your Data?

If you have any questions about how we handle your data or would like to exercise your GDPR rights, our Data Protection Officer is here to help.

Contact Our DPO Read Privacy Policy