Privacy Policy

1. Who we are

Coolmind CBT (coolmind.io). For anything in this policy, write to support@coolmind.io.

2. What we collect

• Account data: your email address (used for sign-in links).
• Session content: what you write during sessions and what the bot replies — situations, emotions, beliefs, plans. By the nature of the Service this can be sensitive personal information; we treat it accordingly.
• Technical data: IP address (for rate limiting and abuse prevention) and standard server logs.
• Voice input: if you choose to dictate answers, speech is transcribed to text by your browser's built-in speech service (e.g. Google's in Chrome, Apple's in Safari). We receive only the resulting text — the audio never reaches or is stored on our servers.
• Emails from us: only service emails (sign-in links). No marketing emails without your separate consent.

Free sessions without an account store session content without a link to any identity.

3. How we use it

• To provide the Service: run sessions, show your history, let the bot remember previous work and follow up on your action plans.
• To keep the Service safe: rate limits, abuse prevention.
• Safety within sessions: the Service automatically detects crisis-related wording in messages in order to pause the exercise and show emergency contacts. This happens inside the bot itself; messages are not reviewed by humans.
• To improve the Service: aggregated, de-identified statistics (e.g., which topics people bring most often).

We do not sell your data and do not show ads.

4. Who processes data for us

• Supabase — database and authentication (storage of accounts, sessions, messages).
• Anthropic — the AI model that generates responses in AI sessions; session text is sent to it for processing. Per Anthropic's API terms, such data is not used to train their models.
• Vercel — hosting and serving of the application.
• Cloudflare — bot protection on the free session (when enabled).

5. Storage and retention

Data is stored until you delete it. You can request deletion of your account and all related sessions at any time by writing to support@coolmind.io from your account email — we will delete the data within 30 days.

6. Your rights

You may request a copy of your data, its correction, or its deletion. One email is enough: support@coolmind.io.

7. Security

All traffic is encrypted (HTTPS). Access to stored data is restricted to the service backend; database access from the browser is blocked by row-level security. No system is perfectly secure, but we follow standard industry practices.

8. Cookies and local storage

We use only essential cookies — those required to keep you signed in and to remember your language choice. We also store a random visitor identifier in your browser's local storage to count unique visitors of the free session and measure how the service is used. It contains no personal data and is not shared with third parties. No tracking or advertising cookies.

9. Children

The Service is not intended for people under 18, and we do not knowingly collect their data.

10. Changes

The current version of this policy is always at coolmind.io/privacy with its date. Material changes will be highlighted in the Service. See also our Terms of Service.