Version dated 9 October 2026. This Policy describes what personal data the MindHealth service (the mobile app and related web resources) processes, on what legal basis, where the data is stored and what rights you have.
MindHelp OY, Business ID 3458080-8, Helsinki, Finland.
Contact for all matters and requests concerning personal data: mind.health.app.res@gmail.com.
The service is built as a closed loop of our own: your notes, conversations and audio are processed by our own servers and our own AI and speech-recognition models, hosted on our own infrastructure in the European Union.
We do not sell personal data, do not pass it to advertisers or data brokers, do not use advertising networks and do not show advertising based on your data.
In exceptional cases — when our own capacity is unavailable or a specific request technically cannot be fulfilled with our own means (for example, a very long audio recording) — we may engage an external technical service to process that request. The data is used only to fulfil that request.
The service is intended for users of the app. Depending on the features you use, the following are processed:
Bank card details are handled by the app store; they are never transmitted to the service.
You sign in with a one-time code sent to your email, or through a Google, Apple or Yandex account — in that case we receive your name and email address from it. Data received from Google is used in accordance with the Google API Services Limited Use requirements.
The AI assistant generates replies based on your notes and requests; speech recognition converts audio into text. These features carry out what you request; decisions producing legal effects concerning you are not made automatically.
Data is stored on our own servers located in the European Union. Data is synced to the server if synchronisation is enabled; with synchronisation disabled, your notes remain only on your device.
Data is processed for as long as you use the service, unless a different period is established by law. When you delete your account, your diary entries, notes and user materials are deleted. Certain records — payment records, technical logs and the support correspondence archive — may be retained for the periods established by law or for as long as necessary for the service to operate; you may request the deletion of such data via the controller's contact.
Besides us, limited access to the data is held only by those who keep the service running:
These parties may not use the data for any other purposes. Data is never sold under any circumstances.
The main processing takes place in the European Union. Data may be transferred outside the European Economic Area only in the exceptional cases of engaging an external technical service described above — in compliance with the GDPR requirements for international data transfers (Chapter V) — and as part of platform functions: push notification delivery and payments are carried out by Google and Apple as the operators of those platforms.
Data is transmitted over an encrypted connection. We apply the organisational and technical protection measures necessary to ensure the security of personal data and to protect it against unlawful access, destruction, alteration and disclosure.
The service is intended for users aged 13 and over. In countries where the minimum age of consent to data processing is higher (up to 16), please use the service only with the consent of a parent or legal guardian.
Under the GDPR you have the right to: obtain confirmation that your data is being processed and information about that processing, as well as a copy of your data (Art. 15); rectify inaccurate data (Art. 16); request erasure (Art. 17); restrict processing (Art. 18); receive your data in a portable format (Art. 20); object to processing based on legitimate interest (Art. 21); and withdraw your consent at any time — withdrawal does not affect the lawfulness of processing carried out before it.
To exercise your rights, send a request to mind.health.app.res@gmail.com. We respond within one month (Art. 12(3) GDPR). You also have the right to lodge a complaint with a supervisory authority: in Finland this is the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto, tietosuoja.fi).
We may update this Policy. The current version is always available on this page, with its date shown in the header; we will additionally notify you in the app about material changes.