Privacy & Trust Charter

Welcome to Revive Mindly. We are uncompromisingly committed to protecting your personal information, clinical privacy, and confidentiality. This Privacy Policy outlines how we collect, safeguard, and handle your data when utilizing our web applications and telehealth services. If you have any questions or concerns regarding our practices, please contact our dedicated Data Protection Officer.

We collect information necessary to provide clinically rigorous and personalized mental healthcare:

• Personal Identifiers: Full name, verified email address, phone number, and account credentials.
• Health & Clinical Intake Data: Information you voluntarily share during clinical matching, therapeutic goals, intake assessments, and asynchronous check-in notes.
• Consultation Records: Encrypted logs of scheduled session timestamps and modality preferences (Video, Audio, or Chat).
• Billing & Transaction Details: Standard payment processing tokens and invoicing data for insurance Superbills. Revive Mindly never stores raw credit card numbers directly on our servers.
• Technical & Diagnostic Metrics: Encrypted browser session metadata, IP addresses for security fraud detection, and diagnostic crash logs.

All data collected is utilized solely to deliver, protect, and optimize your mental healthcare experience:

• Matching & Connecting: Pairing you with board-licensed clinicians suited to your clinical needs and preferences.
• Encrypted Telehealth Consultations: Facilitating confidential 256-bit encrypted video, audio, and live chat rooms.
• Insurance Superbill Generation: Automatically compiling standardized medical billing statements (CMS-1500 coding) for your insurance reimbursement.
• Clinical Continuity: Enabling therapists to document private session reflections and tailored mindfulness homework.
• Platform Security: Detecting unauthorized login attempts, safeguarding user accounts, and enforcing HIPAA security rules.

Revive Mindly has a strict policy: We do NOT sell, rent, or monetize your personal or clinical data under any circumstances. We disclose information strictly in the following defined scenarios:

• With Your Dedicated Clinician: Sharing the intake and profile context required to deliver quality therapeutic care.
• Certified HIPAA Business Associates: Secure cloud hosting and communication providers bound by signed Business Associate Agreements (BAAs).
• Compelled Legal Disclosures: Under narrow circumstances where disclosure is required by state/federal law, mandatory abuse reporting guidelines, or imminent threat to life.

We deploy multi-layered technical, physical, and administrative safeguards:

• End-to-End Encryption: All in-transit data is protected via TLS 1.3 encryption. At-rest clinical data is fortified with AES-256 military-grade encryption.
• Ephemeral Video & Audio Streams: Video and voice consultation streams are ephemeral and are NEVER recorded or archived by Revive Mindly.
• Strict Role-Based Access: Our engineering team has zero access to private client-therapist communication transcripts.
• Annual Third-Party Audits: Routine penetration tests, vulnerability assessments, and HIPAA compliance audits.

As a Revive Mindly user, you maintain complete ownership of your personal information:

• Access & Export: Request a comprehensive digital copy of your account profile and billing receipts.
• Correction & Rectification: Update outdated personal details directly through your Client Dashboard.
• Account Deletion & Erasure: Request permanent account deletion (subject to state clinical record retention mandates).
• Revocation of Consent: Withdraw optional consent for non-essential communications at any time.

We maintain user data only for durations necessary to fulfill clinical and legal responsibilities:

• Account Profile: Maintained during active account standing and archived upon user-requested closure.
• Clinical Healthcare Notes: Retained according to state-mandated medical record retention timelines (typically 7 years for adults).
• Financial Invoices: Retained for 7 years in accordance with standard statutory tax obligations.

We periodically update this policy to reflect evolving legal standards and security enhancements. When material revisions occur, we will notify you through prominent in-app banners or email notices prior to the changes taking effect.