Privacy Policy

1. Introduction

SoundMind Quest ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website soundmind.quest and use our services.

Data Controller: SoundMind Quest
Contact: privacy@soundmind.quest

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, and password when you create an account
• Assessment Data: Responses to mental health screening tools (PHQ-9, GAD-7, etc.)
• Crisis Safety Plans: Information you choose to save in your personal safety plan
• Mood Tracking: Mood logs, notes, and activities you record
• Messages: Communications with peer supporters (encrypted)
• Payment Information: Processed securely by Stripe; we do not store card details

2.2 Automatically Collected Information

• Usage Data: Pages visited, time spent, features used
• Device Information: Browser type, operating system, device type
• IP Address: Used for security and approximate location (country/region)

3. How We Use Your Information

• Provide and improve our mental health resources and services
• Connect you with counselors, support groups, and peer supporters
• Track your progress and provide personalized recommendations
• Send check-in reminders and encouragement (if opted in)
• Process donations and payments
• Respond to your inquiries and support requests
• Detect and prevent fraud, abuse, and security threats
• Comply with legal obligations

4. Data Sharing

We do not sell your personal information. We may share data with:

• Stripe: Payment processing
• Cloudflare: Website hosting and security
• Peer Supporters: Only the information necessary for your support connection
• Legal Requirements: When required by law or to protect safety

Crisis Situations: If we believe there is imminent risk to your life or safety, we may share information with emergency services. We will never share your information for marketing purposes.

5. Your Rights (GDPR & Privacy Laws)

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data
• Export: Download your data in a portable format
• Object: Object to certain processing of your data
• Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact us at privacy@soundmind.quest.

6. Cookies

We use essential cookies for site functionality and security. Optional analytics cookies help us understand how you use our site. See our Cookie Policy for details.

7. Data Security

We implement industry-standard security measures including:

• TLS/SSL encryption for all data transmission
• Encrypted storage for sensitive data (messages, crisis plans)
• Secure authentication with optional passkeys/2FA
• Regular security audits and monitoring
• Access controls limiting who can view your data

8. Data Retention

• Account Data: Retained while your account is active
• Assessment History: Retained for progress tracking until you request deletion
• Messages: Retained for 90 days after connection ends
• Analytics: Aggregated data retained indefinitely; individual data for 26 months

You may request deletion of your data at any time.

9. Children's Privacy

Our services are not intended for children under 13. We do not knowingly collect information from children under 13. If you believe a child has provided us with personal information, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email (if you have an account) or by posting a notice on our website. Your continued use of our services after changes constitutes acceptance.

11. Contact Us

For privacy-related questions or to exercise your rights:
Email: privacy@soundmind.quest
Website: soundmind.quest