1. Controller and contact

Operator

Radina Petrova

Business / trading name

Mind Solutions

Product

MindAssistant

Address

Gasthuisstraat 14, bus 1, 3620 Lanaken, Belgium

Email

info@mindassistant.net

Register

Belgian Crossroads Bank for Enterprises

Enterprise number

1040.783.571

VAT number

BE1040.783.571

Country

Belgium

Radina Petrova, operating Mind Solutions, is the controller for the MindAssistant processing described in this policy unless a provider acts as an independent controller for its own legally defined purposes.

2. Data we process

• Before you create or open an account, a short-lived pre-account session can hold the situation you describe, your intake answers, generated understanding and plan options, and your selected option so that you can experience the service and resume without repeating the intake.
• Account and profile data, including name, email, age range and optional physical profile details.
• Intake answers, goals, difficulties, wellbeing information and other content you choose to provide.
• Planning summaries, plans, daily tasks, check-ins, progress signals and companion conversations created from your information.
• When payment functionality is enabled, limited purchase and entitlement evidence such as checkout identifiers, plan length, provider order or invoice identifiers, status, currency, totals, refunds and official document links. MindAssistant does not request a billing address at signup and does not store full payment-card details.
• Necessary technical and security data, such as sign-in events, service status, device or request information needed to protect accounts, and limited error records.
• Content-free first-party funnel records used to understand whether product steps work reliably, including action names, timestamps, broad stage, coarse device/browser/operating-system and locale data, country code where available, and allowlisted campaign attribution. These records use a pseudonymous first-party identifier; they are not described as anonymous and do not contain the situation you describe, intake answers, conversations, generated summaries, or plan content.
• When Google Ads measurement is enabled, its base tag loads with storage denied and may send limited cookieless measurement signals. If you explicitly allow advertising measurement, completed purchase events may also include the amount, currency, and a unique MindAssistant order reference used to prevent duplicates. Google advertising personalisation remains disabled.
• When Meta Pixel is configured, it does not load until you explicitly allow advertising measurement. It then records neutral page-view, completed-registration, checkout-start, and verified-purchase events for advertising measurement and attribution. Purchase events include the actual amount, currency, and a unique event reference used to prevent duplicates. MindAssistant does not intentionally send intake narratives, problem descriptions, inferred categories, plan or companion content, health or other sensitive information, contact details, or payment-card details to Meta through this integration. Advanced Matching is not enabled.

3. Why and on what basis

• To provide the pre-account intake you request, preserve it briefly, and provide an account, personalised plan, progress features and support: steps requested before entering a service contract and performance of the service contract.
• To process wellbeing or health-related information you deliberately provide: your explicit consent, where required by applicable law.
• To secure the service, prevent abuse, maintain records and resolve errors: legitimate interests and legal obligations.
• To understand whether content-free product steps work and where technical or usability failures occur: legitimate interests in operating and improving a reliable service, subject to applicable rights.
• When paid functionality is enabled, to process orders, grant access, reconcile refunds and maintain a minimised accounting trail: contract performance, legitimate interests in reliable operations, and legal/accounting obligations.
• To measure advertising effectiveness when you choose to allow it: your consent, which you can withdraw through Privacy choices.

4. Automated planning

Before the pre-account intake uploads your situation or starts automated planning, it asks you to confirm that you are 18 or over and explicitly agree to processing the personal and sensitive information you choose to provide. The service records the confirmation version and time with the temporary session. Older saved sessions ask for this confirmation before further answers are saved or planning continues. This choice is separate from optional advertising consent; declining advertising does not prevent use of the service.

MindAssistant uses Google Gemini to interpret the information you submit and create suggested summaries, plans, tasks, and responses. These suggestions can be incomplete or wrong and are not a professional diagnosis. You choose what to share, which plan to select, whether to follow a task, and when to ask for a change. MindAssistant does not use this processing to make decisions that produce legal or similarly significant effects about you.

You can withdraw personalised planning consent in Profile → Data & privacy, or use the withdrawal control during a pre-account intake. You may also contact the operator. Withdrawal pauses new automated planning, task adaptation and Companion replies and cancels unfinished planning work. Saved plans and purchase records are not deleted by this choice. Processing already sent to a provider cannot be undone. Withdrawal does not extend a purchased access period or automatically issue a refund; the Refund and Withdrawal Policy continues to apply. You can explicitly consent again if you choose to resume. Export, account deletion and support remain available.

5. Who receives data

Personal data is shared only where needed to operate the service: account and database hosting, secure application hosting, automated planning, email delivery, customer support, security, payment processing, and consented advertising measurement. Advertising measurement providers receive only the limited neutral event information described above; MindAssistant does not use private intake or plan content for advertising audiences. Providers are limited to the information needed for their role and are subject to the applicable contractual and legal safeguards. Public authorities may receive information where disclosure is legally required.

6. Retention and account deletion

An unconverted pre-account intake draft normally expires after 24 hours. The application configuration limits that temporary period to no more than seven days, and expired abandoned drafts are purgeable. If you create or open an account after choosing an option, the required answers and selected-plan state are copied into your account workspace and the temporary intake draft is deleted. The resulting workspace content is then generally kept while your account remains open so you can continue the service.

Content-free first-party funnel records expire after 30 days. During that period a record may remain linked to the pre-account session and, after conversion, to the resulting account or workspace; it is therefore pseudonymous rather than anonymous. Allowlisted acquisition attribution may also remain with the workspace so the operator can understand how the requested service was reached. You can download a copy or permanently delete the account from Profile → Data & privacy. Limited transaction records may be retained for the period required by accounting, tax, fraud-prevention, dispute, or legal-claims rules. Security and error records are kept only for proportionate operational periods. The payment provider may keep its own records under its legal obligations.

7. Payments

Stripe Managed Payments hosts checkout and processes payment details. MindAssistant sends the limited account, plan, and order references needed to complete the purchase and activate the correct workspace. MindAssistant does not receive or store full card details. Stripe provides the applicable payment documents and may act as an independent controller for activities defined in its own privacy notice.

8. International transfers

Some providers may process data outside the European Economic Area. Where required, transfers rely on an adequacy decision, Standard Contractual Clauses, or another valid safeguard, together with appropriate technical and organisational measures. Contact the operator for further information about the relevant safeguard.

9. Your rights

Depending on applicable law, you may request access, correction, deletion, restriction, or a portable copy; object to certain processing; and withdraw consent without affecting processing that was lawful before withdrawal. Profile → Data & privacy provides self-service download and account deletion. You may also contact the operator or complain to the Belgian Data Protection Authority or another competent supervisory authority.

10. Who can access your information

Authorised access is limited to people and providers who need it to operate, secure, support, or legally administer the service. Access is subject to account controls and confidentiality obligations. MindAssistant does not publish your plans or sell your personal data.

11. Security and incidents

MindAssistant uses access controls, minimisation, protected connections, and operational monitoring appropriate to the service. No online service is risk-free. The operator maintains incident-response procedures and will notify affected people and authorities where applicable law requires it.

12. US privacy rights

Residents of some US states may have additional rights concerning access, correction, deletion, portability, targeted advertising, sale or sharing, and appeals. MindAssistant does not sell personal data. Some laws may define consented advertising measurement as sharing or targeted advertising; you can decline or withdraw that optional category through Privacy choices. See the US Privacy Notice for details and applicability.

13. Adults only

MindAssistant is intended for people aged 18 and over. The operator does not knowingly offer the adult service to children. Please contact the operator if you believe a minor has created an account.