This Privacy Policy regulates your use of mymentalapp.com (the “Website”) and explains the types of personal data we collect, how we safeguard it, the purposes for which it is utilized, with whom it may be shared, and your rights regarding such data processing and disclosure. We encourage you to read this entire Privacy Policy carefully before using our Website.
Definitions:
“GDPR” refers to the General Data Protection Regulation (EU) 2016/679 of the European Parliament and of the Council dated 27 April 2016, concerning the protection of natural persons with regard to the processing of personal data and the free movement of such data.
“EEA” means the European Economic Area, encompassing all current member states of the European Union and associated countries.
“Processing” or “Process” with respect to personal data means any operation performed on personal data, including collection, storage, use, and disclosure.
Please also refer to the MyMental Terms of Use & Service (“Terms”) for definitions of capitalized terms not explicitly defined herein.
1. PERSONAL DATA CONTROLLER
The entity responsible for controlling your personal data is Latiwara OÜ, a private limited company incorporated under the laws of Estonia, with its registered office located at Harju maakond, Tallinn, Haabersti linnaosa, Päevalille tn 6-15, 13517, Estonia.
2. CATEGORIES OF PERSONAL DATA COLLECTED
We gather personal data you voluntarily provide (such as your name, email address, and date of birth) as well as data automatically collected during your interaction with the Website (such as IP address and device information).
2.1. Data Provided by You
When you register or use the Website, create a user profile (“Profile”), respond to our communications, or report issues, you supply us with personal data, including but not limited to:
- Profile Data: This includes your email address and password.
By submitting Profile Data, you acknowledge and agree that this information may be publicly accessible. Please refrain from including personal data in your Profile that you do not wish to be publicly visible.
2.2. Automatically Collected Data
- Referral Information: We collect data about the referring URL from which you accessed our Website (e.g., the website or advertisement link).
- Cookies and Similar Technologies: Our Website uses cookies and related technologies to distinguish users and enhance your experience. For details, see our Cookie Policy. You can manage cookie preferences via your browser settings.
- Browser and Device Information: Depending on your device permissions, we collect data such as language settings, IP address, geographic location, time zone, device type and model, operating system, internet service provider, mobile carrier, hardware identifiers, and related IDs used by advertising platforms (e.g., Apple IDFA or Google AAID). You may reset these identifiers through your device settings.
- Transaction Data: For payments made through the Website, financial information such as credit card details is provided to third-party payment processors. We do not store full credit card numbers but may receive transaction metadata including date, time, amount, and payment method.
- Usage Data: We track your interactions with the Website, including features accessed, frequency and duration of use, and navigation patterns.
3. PURPOSES FOR PROCESSING PERSONAL DATA
We process your personal data for the following purposes:
3.1. Service Delivery
To enable seamless use of the Website, verify your identity, manage your account, and resolve technical issues.
3.2. Business Analysis and Improvement
To analyze user behavior, conduct surveys, research, audits, and improve or develop new Website features and offerings.
3.3. Personalization
To tailor the Website experience to your preferences, including selecting appropriate payment options and determining eligibility for promotions or contests.
3.4. Payment Processing
To facilitate payments for paid products or services via trusted third-party payment processors.
3.5. Enforcement and Security
To enforce our Terms, prevent and investigate fraud, mitigate cyber threats, ensure genuine user presence, and comply with legal obligations. We may share necessary information with Estonian law enforcement or regulatory authorities in these contexts.
3.6. Communication
To contact you via email, push notifications, or direct Website messages regarding your account, usage statistics, updates, or other relevant information.
3.7. Marketing
To send you marketing communications about MyMental’s features, promotions, contests, events, or third-party services that might interest you. You may opt out of such communications at any time by clicking the unsubscribe link included in emails.
3.8. Customer Support
To provide assistance related to Website availability, security, payment status, orders, or legal notices.
3.9. Advertisement Personalization
To customize advertisements shown to you by MyMental and our partners to improve relevance.
3.10. Compliance with Legal Requirements
To process data as required by Estonian laws or to respond to lawful requests from governmental authorities.
4. LEGAL BASIS FOR DATA PROCESSING (APPLICABLE TO EEA USERS)
For users located in the EEA, we base data processing on the following grounds:
4.1. Consent
Where you have provided your informed consent.
4.2. Contractual Necessity
To perform obligations arising from our contract with you, including service provision, identity verification, communication, account management, customer support, and payment processing.
4.3. Legitimate Interests
Our legitimate interests include:
- Communicating with you about the Website to encourage engagement.
- Researching and improving our Website and services to enhance user experience.
- Sending marketing communications in a measured and appropriate manner.
- Personalizing advertisements reasonably and responsibly.
- Enforcing Terms and combating fraud or unauthorized use.
We ensure these interests are balanced against your fundamental rights and freedoms.
4.4. Legal Compliance
To fulfill legal obligations, including verifying your identity as required by Estonian law.
5. DATA RETENTION
Your personal data will be retained only as long as necessary to fulfill the purposes outlined above or as required by law. We retain certain data to comply with legal obligations such as transaction processing, fraud prevention, anti-money laundering, and accounting requirements, even if you delete your Profile.
6. SHARING OF PERSONAL DATA
We share your personal data with third parties only to the extent necessary to operate, improve, support, and market our services. Such third parties include:
6.1. Service Providers
- Cloud storage and server providers.
- Data analytics companies.
- Marketing partners including social media platforms and email delivery services.
- Payment processors.
6.2. Public Authorities
We may disclose personal data to Estonian law enforcement, courts, regulatory bodies, or other governmental authorities to comply with legal obligations, enforce our Terms, or protect rights and safety.
6.3. Business Transfers
In the event of mergers, acquisitions, or asset sales involving MyMental, customer data may be transferred as part of business assets to affiliated entities or third parties.
7. INTERNATIONAL DATA TRANSFERS
Personal data may be transferred outside the country of collection to countries with different data protection laws. When transferring data originating from the EEA to countries lacking an adequate level of protection, we implement appropriate safeguards such as Standard Contractual Clauses approved by the European Commission or rely on applicable adequacy decisions under GDPR.
8. YOUR PRIVACY RIGHTS
You have the following rights regarding your personal data:
- Access, review, update, or correct your personal data by logging into your Profile or contacting us at admin@mymentalapp.com.
- Request deletion of your personal data; note that some data may be retained to comply with legal obligations.
- Object to or restrict processing of your personal data by submitting a request to admin@mymentalapp.com.
- Data portability: request your personal data in a machine-readable format.
- Lodge a complaint with the Estonian Data Protection Inspectorate or another competent supervisory authority if you believe your rights have been violated.
Requests can be made directly or through an authorized agent, subject to verification of identities and authority.
9. DO NOT TRACK
The Website does not currently respond to “Do Not Track” browser signals. Please consult third-party service privacy policies to understand their practices regarding such signals.
10. AGE RESTRICTION
We do not knowingly process personal data from individuals under 18 years of age. If you become aware of such data being provided, please notify us at admin@mymentalapp.com.
11. AMENDMENTS TO THIS PRIVACY POLICY
We reserve the right to update this Privacy Policy at any time. Material changes will be communicated via the Website or other available means. Continued use of the Website after updates constitutes acceptance of the revised Policy.
12. CONTACT INFORMATION
For questions or concerns regarding this Privacy Policy or your personal data, please contact us at:
Email: admin@mymentalapp.com
Registered office: Latiwara OÜ, Harju maakond, Tallinn, Haabersti linnaosa, Päevalille tn 6-15, 13517, Estonia
---
This document maintains all legal provisions and protections while reflecting MyMental’s corporate identity and compliance with Estonian jurisdiction and data protection standards.