Your trust, held carefully.

Mindscape Co for Social Consultancy ("Mindscape," "we," "us," or "our") is a company registered in Kuwait under Commercial Registration No. 467791.

The platform connects users with independent mental health professionals. All therapy and consultation sessions are provided by independent psychologists and psychiatrists licensed by the Kuwait Ministry of Health.

This policy operates under the data-protection laws of Kuwait, applicable laws of relevant GCC member states, and the policies of the Apple App Store and Google Play.

Exclusive jurisdiction over any dispute arising from or relating to this policy lies with the courts of the State of Kuwait.

Personal information

• Display name
• Email address
• Phone number
• Date of birth
• Account credentials

Mental health & session information

Payment information

Payments are processed by trusted third-party providers. Mindscape does not store full card numbers, CVV codes, or banking credentials.

Technical data

• Device type and operating system version
• App version
• IP address
• Crash logs and diagnostic information
• Push notification tokens

Permissions

The App may request access to camera, microphone, notifications, storage, and network access — only to deliver the features you choose to use.

We process your data to:

• Provide and maintain the services
• Facilitate sessions between users and licensed professionals
• Process payments and manage transactions
• Verify eligibility and identity
• Communicate service updates, security notices, and support messages
• Detect, prevent, and respond to fraud or abuse
• Comply with applicable legal obligations

Access to user data within Mindscape is strictly limited to authorized administrative personnel with role-based, need-to-know permissions. All personnel are bound by confidentiality obligations.

We rely on a limited number of trusted service providers to operate the platform:

• Google Cloud Platform
• Firebase
• Payment processors
• Crash reporting tools
• Push notification services

Some service providers (such as Google Cloud and Firebase) may store or process data on servers located outside Kuwait, including in the European Union, the United States, or other regions. Where transfers occur, we rely on appropriate safeguards consistent with applicable data-protection laws.

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law.

Data is encrypted in transit (TLS) and at rest using industry-standard cryptographic protocols. We continuously work to safeguard your information against unauthorized access, alteration, disclosure, or destruction.

That said, no method of transmission or electronic storage is 100% secure.

The App does not use HTTP cookies. Mobile analytics SDKs may use device identifiers in accordance with Apple's App Tracking Transparency framework and Google Play's data-safety requirements.

Subject to applicable law, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data
• Withdraw consent where processing is based on consent
• Object to or restrict certain processing
• Receive a portable copy of your data
• Lodge a complaint with the competent supervisory authority

We respond to verified requests within a reasonable period and in any event no later than thirty (30) days.

Upon a valid deletion request, we will delete or anonymize your personal data within thirty (30) days — except for information we are legally required to retain (for example, financial records under applicable tax and accounting laws).

The App is intended for users aged thirteen (13) years and older. Users between 13 and 18 must have verified consent from a parent or legal guardian to use the platform.

Participation in group therapy or group consultation requires acknowledgment that confidentiality is reduced when multiple participants are involved.

Educational case discussions involving real patients require the explicit, prior, written consent of the patient whose case is to be discussed, with appropriate de-identification where possible.

Educational content available in the App is provided for general informational purposes only and does not constitute medical advice, diagnosis, or treatment. Always seek the guidance of a qualified health provider for any medical concerns.

We may update this Privacy Policy from time to time. For material changes, we will provide notice at least seven (7) days before the changes take effect, by posting the updated policy on this page and, where appropriate, through in-app or email notification.

Continued use of the App after the effective date constitutes acceptance of the revised policy.

If you have questions, requests, or complaints regarding this policy or our handling of your personal information, please get in touch — we'll respond promptly.