Privacy Policy & Affiliate Disclosure

Last Updated: November 5, 2025

1. Information We Collect

1.1 Personal Information

When you create an account or subscribe to our services, we collect:

• Email address (for authentication and communication)
• Password (encrypted using industry-standard bcrypt hashing)
• Assessment responses (stored securely and never shared)

1.2 Assessment Data

We collect your responses to clinical assessment questionnaires to provide personalized recovery feedback. This data is:

• Stored securely on our servers
• Used solely to generate AI-powered recommendations
• Never sold or shared with third parties
• Not considered Protected Health Information (PHI) under HIPAA

1.3 Analytics & Click Tracking

We track anonymous usage data to improve our platform:

• Assessment completion rates
• Link clicks on recommended apps and products
• Subscription conversions
• Time spent on platform

Note: This tracking helps us understand which recovery resources are most helpful to our users.

2. How We Use Your Information

We use collected information to:

• Provide personalized AI-powered recovery feedback
• Process subscription payments securely via Stripe
• Send welcome emails and recovery resources
• Track your progress across multiple assessments
• Improve our platform and recommendations
• Comply with legal obligations

3. Data Security

We take your privacy seriously and implement industry-standard security measures:

• Password Protection: All passwords are hashed using bcrypt with salt
• Session Security: Secure session management with encrypted cookies
• Payment Security: PCI-compliant payment processing via Stripe (we never store card details)
• HTTPS Encryption: All data transmitted over secure connections
• Access Control: Limited employee access to user data

4. Third-Party Services

We use the following trusted third-party services:

4.1 Payment Processing

• Stripe: Credit/debit card payments (international)
• Paystack: M-Pesa mobile payments (Kenya)

4.2 AI Services

• OpenAI (GPT-4o-mini): Generates personalized recovery feedback based on assessment scores

4.3 Affiliate Programs

• Amazon Associates: Product recommendations with affiliate tracking
• Apple App Store: iOS app recommendations with affiliate tokens
• Google Play Store: Android app recommendations with UTM tracking

Important: When you click external links, you may be redirected to third-party websites subject to their own privacy policies.

5. Affiliate Links & Commissions

Our platform recommends evidence-based recovery apps and products. Some of these recommendations include affiliate links, which means:

• We earn a small commission if you make a purchase (at no extra cost to you)
• Commissions range from 1-10% depending on the product category
• All recommendations are based on clinical evidence and user reviews, not commission rates
• You are never required to purchase anything to use our free assessment tools

6. Your Rights

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update inaccurate information
• Deletion: Request deletion of your account and data
• Opt-Out: Unsubscribe from emails at any time
• Data Portability: Receive your data in a portable format

To exercise these rights, contact us at: support@mindfiti.com

7. Cookies

We use session cookies to:

• Maintain your login session
• Remember your progress during assessments
• Improve user experience

You can disable cookies in your browser settings, but this may affect platform functionality.

8. Children's Privacy

Our platform is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

9. Data Retention

We retain your data:

• Account information: Until you request deletion
• Assessment data: For 2 years or until deletion request
• Payment records: As required by law (typically 7 years)
• Analytics data: Anonymized and retained indefinitely

10. International Users

Our platform is hosted in the United States. By using our services, you consent to the transfer of your data to the U.S. We comply with applicable data protection regulations including GDPR for European users.

11. Changes to This Policy

We may update this privacy policy periodically. Significant changes will be communicated via email. Continued use of our platform after changes constitutes acceptance of the updated policy.

12. Crisis Support

Important: MindFiti ARecovery Hub provides educational assessments and recovery resources. We are NOT a crisis intervention service. If you are experiencing a mental health emergency:

• Call 988 (Suicide & Crisis Lifeline) - Available 24/7
• Text "HELLO" to 741741 (Crisis Text Line)
• Call 911 for immediate emergency assistance

13. Contact Us

For questions about this privacy policy or our data practices:

• Email: privacy@mindfiti.com
• Website: mindfiti.com

← Back to Home