This Policy explains what data we collect, how we use it, who we share it with, and what rights you have. It applies to mindfitonline.com and to the app. It's designed to comply globally with GDPR (EU), UK GDPR, CCPA/CPRA (California), LGPD (Brazil), LFPDPPP (Mexico), Law 21.719 (Chile), and other applicable regulations.
1.Data controller
The controller is 377 Creative LLC (Florida, USA). Data protection: privacy@mindfitonline.com.
2.What data we collect
- Account and identity: name, email, password, language, and role (user or professional).
- Intake questionnaire and support preferences.
- Communications: text messages (auto-deleted after 7 days) and participation in video calls (never recorded).
- Payment: handled by Stripe and, when applicable, guided alternative rails (Zelle, Zinli, USDT, PayPal); we don't store your full card number.
- Technical and usage data within the public site (IP, device, interaction) — never within the authenticated area of the app.
- Health data from your intake questionnaire and from the support provided by your Professional — a sensitive category with enhanced protection.
3.Legal bases
- Providing and operating the Platform: performance of a contract.
- Health data: explicit consent.
- Security and fraud prevention: legitimate interest. Legal obligations: regulatory compliance.
4.How we use your data
- Connecting you with the Professional for each Area you hire and enabling communication.
- Managing your account, schedule, reminders, and subscription.
- Verifying Professionals' credentials, with automated tool support for non-sensitive parts of the process and a final decision always made by a person.
- Improving the quality and security of the Platform; complying with the law.
5.Messaging and video calls
Each message you send to your Professional is kept for seven days and automatically deleted once that period is up, on a rolling basis — it never sits indefinitely on any server. You can download a message before it's deleted. Video calls are never recorded, transcribed, or summarized automatically.
6.Role-based access
Each Professional can only access information for the Users assigned to them within their Area. A nutritionist doesn't see your mental health professional's notes, and vice versa. All access is logged for audit purposes.
7.Who we share data with
- Service providers (hosting, payment processing), contractually bound to protect your data and use it only per our instructions.
- The Professional or Professionals you have active on your wellness team, following the role-based access model.
- Authorities, where required by law or to prevent imminent harm.
8.Retention
Messages are kept for seven days. The rest of your account data is kept while your account is active and for any additional period required by law (for example, accounting obligations). After you cancel your account, you can request deletion of your data under Section 9.
9.Your rights
- Access, correction, deletion, portability, objection, and restriction.
- Withdraw consent at any time, without retroactive effect.
- File a complaint with your supervisory authority. Write to privacy@mindfitonline.com; we respond within the legally applicable timeframe.
10.Security and minors
We apply encryption in transit and at rest, role-based access control, audit logs, and two-factor verification available in your profile. We do not offer services to minors without a guardian's verifiable consent.
11.Subscription and payments
Payments are processed through Stripe and, when applicable, guided alternative rails inside the app. Charges for a week already processed are non-refundable, unless applicable law requires otherwise. You can cancel your subscription to any Area at any time from your profile.
12.Cookies and similar technologies (public site)
The public marketing site (mindfitonline.com) may use strictly necessary cookies without consent, and preference or analytics cookies with your prior consent via a banner. These tools never operate within the authenticated area of the app.
13.International transfers
We operate internationally. When we transfer data outside the EEA/UK we apply safeguards such as Standard Contractual Clauses or another equivalent mechanism recognized by applicable law.
14.Release and waiver of liability
By using the Platform, both the User and the Professional release, waive, and covenant not to sue 377 Creative LLC and Mind Fit Online for any claim related to use of the Platform or to support provided by an independent Professional, under the technical terms detailed in Section 15 of the Terms and Conditions ("Release, waiver of liability, and covenant not to sue"). This covenant is perfected by the mere act of using the Platform, no additional signature required.
15.Changes and contact
We may update this Policy; we will indicate the new effective date and notify significant changes. 377 Creative LLC — Mind Fit Online. Email: contacto@mindfitonline.com · Privacy: privacy@mindfitonline.com.