Last updated August 18, 2026

Privacy notice

This notice describes the current website implementation. It must be reviewed for the laws and jurisdictions that apply before a clinical service launches.

Information currently collected

If you create an account, the site stores your first name, email address, password hash and salt, optional marketing consent, account timestamps, and session records. If you complete the intake, it also stores the answers you provide about wellbeing, history, goals, preferences, support, availability, and immediate safety. Optional intake questions can be skipped. For a payment, the site stores the selected provider’s order, capture, Checkout Session, or PaymentIntent reference together with status, amount, currency, and timestamps; it does not receive or store your card number, PayPal password, or full payment credentials.

How information is used

Account data is used to secure and restore your account. Intake answers provide context for the disclosed OpenAI-powered support chat. Payment references are used to confirm the one-time payment and prevent an accidental duplicate payment. Chat messages are encrypted in this application and sent to OpenAI when you submit them to generate a response. The service does not provide automated diagnosis, emergency monitoring, or access by a real therapist.

Payment processing

PayPal or Stripe independently processes checkout and payment information under its own privacy terms, depending on the method you choose. Information may be transferred to and processed in countries where the selected provider operates. Review that provider’s notices before approving a payment.

Cookies, passwords, and intake encryption

A strictly necessary session cookie keeps you signed in for up to 14 days. It is HttpOnly and SameSite=Lax; when the site is delivered over HTTPS it is also marked Secure. Passwords are processed with a salted key-derivation function rather than stored as plain text. Intake answers and completed profile snapshots are encrypted with AES-256-GCM before they are written to the database. Encryption reduces risk but does not replace access controls, secure key management, backups, monitoring, and legal review.

Profile history and retention

Each saved intake answer creates a change record, and each completed intake creates a numbered historical snapshot so future changes can be understood over time. During this technical preview those records remain stored until the test database is deleted. Production retention periods, user deletion and correction workflows, legal bases, processors, cross-border transfers, and privacy-contact details must be finalized before clinical launch.

Health-data and emergency warning

The intake is a prototype profile tool, not a diagnosis or monitored clinical record. Do not use the site for emergencies, time-sensitive safety messages, treatment instructions, or communication that requires an immediate response. Contact local emergency services or a crisis line if there is immediate danger.

Page last updated: August 18, 2026. General information only; not medical advice.