How We Use Your Information

1. Overview

This section explains specifically how we process, store, and utilize the personal and health-related information you provide or that we generate through your use of SereneMind services. All data handling complies with applicable privacy regulations, including GDPR, CCPA, and relevant healthcare data standards.

2. Information We Collect

We only gather information that directly supports your wellness journey:

• Account Information: Name, email, age range, and contact preferences for secure access and communication.
• Wellness & Assessment Data: Responses to mood trackers, mindfulness quizzes, and initial intake questionnaires used to tailor recommendations.
• Session & Interaction Data: Records of meditation completion, therapy session attendance (metadata only, never full transcripts without explicit consent), and feature usage patterns.
• Device & Technical Data: IP address, browser type, and device identifiers to ensure platform security and optimize performance.

3. How We Use Your Information

Your information is processed for the following specific purposes:

4. Sharing & Disclosure

We do not sell, rent, or trade your personal information. We only share data in the following limited circumstances:

• Service Providers: Trusted third parties that host our servers, process payments, or deliver analytics under strict data processing agreements.
• Licensed Therapists: Relevant wellness insights are shared with your assigned therapist only with your explicit consent, to support your care plan.
• Legal Compliance: When required by law, court order, or to protect the rights, safety, and property of SereneMind, our users, or the public.

5. Data Security

We implement industry-leading safeguards to protect your information:

• End-to-end encryption for therapy sessions and sensitive communications
• AES-256 encryption for data at rest and TLS 1.3 for data in transit
• Regular third-party security audits and vulnerability assessments
• Strict access controls, role-based permissions, and multi-factor authentication for staff
• Immediate incident response protocols in case of a data breach

6. Your Rights & Choices

You maintain full control over your personal information. Depending on your location, you may have the right to:

• Access, review, or export a copy of your data
• Correct inaccuracies in your profile or wellness records
• Request deletion of your account and associated data
• Opt out of personalized recommendations or marketing communications
• Withdraw consent for data processing at any time

To exercise these rights, use the privacy settings in your account dashboard or contact our Data Protection Officer directly.

7. Data Retention

We retain your information only as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce agreements. General account data is retained while your account is active. Upon deletion, all personal information is permanently erased within 30 days, except where retention is legally required (e.g., therapy records kept for 7 years per healthcare regulations).

8. Updates & Contact

We may update this policy to reflect changes in our practices, technology, or legal requirements. You will be notified of material changes via email or in-app notification before they take effect.