Privacy Policy

• Account & billing data: therapist name, email, login credentials, country, subscription status, and billing identifiers from our payment provider (we never see full card numbers).
• Booking data: client name, email, phone (optional), session type, date, and any notes provided at booking.
• Session recordings & transcripts: only when the client has ticked the consent checkbox at booking. Audio is uploaded by the therapist after the session and processed by AI to produce a transcript and summary. These qualify as special-category (health) data under GDPR Art. 9.
• Video sessions: if a video appointment is chosen, the meeting runs over Jitsi. The video stream is not recorded automatically — only the therapist's local microphone capture, if consent has been given.
• Technical data: standard server logs (IP, timestamp, user agent) for security and abuse prevention. No analytics or advertising trackers.

• Explicit consent (Art. 9(2)(a)) for recording, transcription, and summarisation of sessions.
• Performance of a contract (Art. 6(1)(b)) for booking, account, and billing data.
• Legitimate interests (Art. 6(1)(f)) for security logs and abuse prevention.
• Legal obligation (Art. 6(1)(c)) for tax and accounting records related to paid subscriptions.

• Account data: while your account is active, plus up to 12 months after closure for dispute resolution.
• Billing records: retained for the period required by applicable tax law (typically up to 10 years).
• Bookings: retained while the therapist–patient relationship is active.
• Recordings & transcripts: retained by your therapist for as long as professional rules require, then deleted.
• Server logs: 90 days.
• You can request deletion at any time (see Section 8).

• Lovable Cloud / Supabase — database, authentication, and file storage (EU region).
• Stripe Payments Europe Ltd — our payment processor for handling subscriptions, invoicing, and card payments. Card details are sent directly to Stripe and are never stored by us.
• Google (Gemini) via the Lovable AI Gateway — used to transcribe and summarise audio. Audio is sent only for the time needed to produce the transcript and is not used to train models.
• Jitsi — hosts the video meeting layer; the stream is peer-to-peer where possible.
• Professional advisers and authorities — only where required by law.

Some sub-processors may process data outside the EU/EEA (for example, AI inference may occur on US-based infrastructure). Where this happens, transfers are protected by Standard Contractual Clauses or equivalent safeguards.