1. Controller and contact
- Operator
- Operator identity not configured
- Trading name
- MindAssistant
- Address
- Lanaken 3620 , Belgium
- Phone
- +31600000000
- Register
- Mind Assistant
- Enterprise number
- 438954389548
- Country
- Belgium
2. Data we process
- Account and profile data, including name, email, age range and optional physical profile details.
- Intake answers, goals, difficulties, wellbeing information and other content you choose to provide.
- AI-generated case models, plans, daily tasks, check-ins, progress signals and companion conversations.
- Purchase and entitlement data such as checkout identifiers, plan length, order status, totals and receipt links. Payment-card details are processed by Lemon Squeezy and are not stored by MindAssistant.
- Necessary technical, security and diagnostic data such as authentication events, job status, error stage and limited redacted logs.
- Aggregate route counts used to understand service usage. These counters do not store an IP address, browser fingerprint, analytics cookie or full page content.
3. Why and on what basis
- To provide the requested account, personalised plan, progress features and support: performance of the service contract.
- To process wellbeing or health-related information you deliberately provide: your explicit consent, where required by applicable law.
- To secure the service, prevent abuse, maintain records and resolve errors: legitimate interests and legal obligations.
- To process orders and fulfil paid access: contract performance and legal/accounting obligations.
4. AI processing and providers
MindAssistant uses automated AI systems to analyse the information you submit and generate suggested plans and responses. AI output can be incomplete or wrong and is not a professional diagnosis. Depending on configuration, service providers may include Google Cloud/Vertex AI, Supabase, Vercel and Lemon Squeezy. Their role, location and contractual safeguards must be reflected in the production processor register.
5. Retention and account deletion
Your active profile, intake answers, plans, check-ins and companion content are kept while your account remains open so you can continue the service. You can download a structured JSON copy or request permanent deletion from Profile → Data & privacy. Account deletion removes the authentication account and MindAssistant planning data. A minimal anonymised transaction ledger may be retained where necessary for accounting, tax, fraud prevention, chargebacks or legal claims. Lemon Squeezy may retain payment records separately under its own obligations.
6. International transfers
Some service providers may process data outside the European Economic Area. Where required, transfers must rely on an adequacy decision, Standard Contractual Clauses or another valid safeguard, together with appropriate technical and organisational measures.
7. Your rights
Depending on applicable law, you may request access, correction, deletion, restriction, portability or objection, and may withdraw consent without affecting earlier lawful processing. Profile → Data & privacy provides self-service JSON export and account deletion. You may also contact the operator or complain to your local supervisory authority.
8. Administration and operational access
Owner administration is restricted to an exact account identifier configured on the server, requires a second authentication factor by default, and re-checks authorisation for every protected request. Administrative recovery actions are logged. Operational overview tables intentionally avoid displaying full intake narratives.
9. Security and breaches
MindAssistant is designed to minimise exposed secrets, use authenticated access and keep payment-card data with the payment provider. No online service is risk-free. The operator must maintain an incident-response and breach-notification process appropriate for sensitive wellbeing data and the countries served.
10. US privacy rights
Residents of some US states may have additional rights concerning access, correction, deletion, portability, targeted advertising, sale or sharing, and appeals. MindAssistant does not sell personal data or use it for cross-context behavioural advertising in the current configuration. See the US Privacy Notice for details and applicability.
11. Children
The paid service is intended for adults. MindAssistant must not knowingly sell a personalised plan to a person under 18. Additional parental-consent and child-safety controls are required before offering the service to minors.