Privacy Policy

From Practitioners: full name, professional title, email, phone, profile photo, bio, qualifications, and — where you choose to submit it — a verification document (e.g. a license or certificate) used only to confirm your credentials.

From Clients: the name, email, and phone number you give us when requesting or booking an appointment, and any notes you choose to include with a booking request.

Automatically: basic technical data (IP address, browser type, pages visited) used for security, fraud prevention, and keeping the service working — we do not use third-party advertising trackers.

To operate the booking platform: creating and displaying Practitioner profiles, matching Clients with Practitioners, and sending booking confirmations, reminders, and account emails.

To verify Practitioner credentials and review profiles for quality and safety before they’re published.

To secure accounts (login, password reset) and prevent abuse (e.g. rate-limiting sign-ups).

We do not sell personal data, and we do not share it with third parties for their own marketing purposes.

We are a booking and profile platform, not a record-keeping system for therapy sessions. We do not collect clinical notes, diagnoses, or session content — whatever a Client and Practitioner discuss during a session stays between them.

A Practitioner’s public profile (name, title, bio, specializations, contact details marked public) is visible to anyone who visits their page.

Booking requests, private contact details, and verification documents are visible only to the Practitioner they belong to and to our Super Admin team — never published publicly.

Data is stored on Cloudflare’s infrastructure (database and file storage). Transactional emails (booking confirmations, password resets) are sent through Resend, our email delivery provider, which processes the minimum data needed to deliver those emails.

We keep account and booking data for as long as your account is active, plus a reasonable period afterward for legal, security, and record-keeping purposes. You can request deletion of your account and associated data at any time (see Section 8).

We use a single session cookie to keep you signed in. It’s necessary for the site to function and isn’t used for advertising or cross-site tracking.

You can ask us to access, correct, or delete the personal data we hold about you, or to export it, by emailing privacy@mentifylabs.com. We’ll respond within a reasonable time.

We may update this policy as the platform changes. We’ll update the “Last updated” date above, and for material changes we’ll make a reasonable effort to notify Practitioners directly.

Questions about this policy or your data can be sent to privacy@mentifylabs.com.