Privacy Policy

Please read carefully before using MindHaven

Last Updated: October 18, 2026

Introduction

MindHaven ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use our mental wellness platform.

Important Note: MindHaven is currently in BETA and is not HIPAA-compliant. We are working toward HIPAA compliance in future releases.

Information We Collect

Information You Provide

  • Account Information: Name, email address (if you create an account)
  • Wellness Data: Mood check-ins, notes, and patterns you track
  • Communication Data: Messages with our AI companion
  • Usage Data: How you interact with our platform features

Automatically Collected Information

  • Technical Data: Browser type, device information, IP address
  • Usage Analytics: Pages visited, features used, session duration
  • Performance Data: Error logs and app performance metrics

How We Use Your Information

We use your information to:

  • Provide personalized mental wellness support
  • Generate your AI companion's replies and check messages for signs of crisis
  • Track your wellness progress over time
  • Enhance platform safety and security
  • Develop new features and improvements
  • Comply with legal obligations

Data Sharing and Disclosure

We do not sell your personal information to third parties.

We may share your information only in these limited circumstances:

  • Service Providers: Trusted partners who help operate our platform
  • Legal Requirements: When required by law or to protect safety
  • Business Transfers: In case of merger, acquisition, or sale
  • Emergency Situations: To prevent harm to you or others

Data Security

We implement industry-standard security measures:

  • Encryption of data in transit (HTTPS)
  • Passwords stored only as salted hashes, never in plain text
  • Your journal, mood, goals, and safety plan are visible only to your account
  • Restricted administrative access

However, no system is 100% secure, and we cannot guarantee absolute security.

Your Rights and Choices

You have the right to:

  • Access: Request a copy of your personal data
  • Correction: Update or correct your information
  • Deletion: Delete your account and associated data
  • Portability: Export your data in a readable format
  • Restriction: Limit how we process your information

How to Exercise Your Rights

  • Access your profile settings to manage your data
  • Use the "Export Data" feature to download your information
  • Contact us at lamont@communitynyc.org for assistance

Data Retention

  • Active Accounts: We retain your data while your account is active
  • Deleted Accounts: When you delete your account in Profile settings, your data is permanently deleted right away
  • Legal Requirements: Some data may be retained longer for legal compliance

Children's Privacy

MindHaven accounts are for people 13 and older. Everyone confirms they are 13 or older when signing up. We do not knowingly collect information from children under 13. If you believe a child under 13 has created an account, contact us and we will delete it.

Teens (13–17)

Teens can use MindHaven on their own. We encourage teens to share the app with a parent, guardian, school counselor, or another trusted adult. We do not share a teen's journal, mood, or chat content with parents or schools. Schools that run a pilot receive only aggregate, non-identifying information.

International Users

MindHaven is based in the United States. If you access our service from outside the US, your information may be transferred to and processed in the US, which may have different privacy laws.

Third-Party Services

Our platform may integrate with third-party services:

  • OpenAI: Your messages to the AI companion are sent to OpenAI to generate replies and to screen for crisis language. Your name, recent mood ratings and tags, and the titles of your active goals and program may be included so replies feel personal. Your journal text and safety plan are never sent. Under OpenAI's API terms, this data is not used to train their models.
  • Plausible Analytics: Privacy-friendly, cookie-free page analytics. It does not track you across sites.
  • Vercel and our database host: To run the site and store your data

Each service has its own privacy policy, which we encourage you to review.

Cookies and Tracking

We use cookies only to:

  • Keep you logged in
  • Remember your preferences

Our analytics are cookie-free.

You can control cookie settings through your browser.

Changes to This Policy

We may update this Privacy Policy periodically. When we do:

  • We'll notify you of significant changes
  • The "Last Updated" date will be revised
  • Continued use implies acceptance of changes

Beta Status and HIPAA Compliance

Current Status:

  • MindHaven is in BETA testing
  • We are NOT currently HIPAA-compliant
  • Protected health information (PHI) should not be shared

Future Compliance:

  • We are working toward HIPAA compliance
  • Enhanced security measures are in development
  • Users will be notified when compliance is achieved

Crisis Situations

If your communications suggest imminent harm to yourself or others, we may:

  • Provide immediate crisis resources
  • Contact emergency services if legally required
  • Preserve relevant communications as needed

This is done to protect your safety and the safety of others.

Contact Us

If you have questions about this Privacy Policy or our privacy practices:

Email: lamont@communitynyc.org
Address: MindHaven Privacy Team
Working Wonders Starting Home Inc.
Brooklyn, NY

Consent

By using MindHaven, you consent to the collection and processing of your information as described in this Privacy Policy.

This Privacy Policy is part of our Terms of Service and should be read together with those terms.

Questions about our policies?

We're here to help you understand your rights and our practices.