Data Processing Consent

When you create an account or use our services, we may collect:

• Contact and identity details you give us at signup — name, email, phone number, date of birth, gender, and country.
• Information you share with a counselor or psychiatrist during a session, including clinical notes and any medications they record for you.
• Payment details when you book a session or order a journal, handled by our payment processor — we never store full card numbers ourselves.
• Basic usage data (like pages visited and device type) that helps us keep the app working reliably.

Your journal entries and any photo you attach to one are encrypted on your own device before they ever leave it, and the encryption key never leaves your device either. We cannot read your journal entries, and we don't store them on our servers in readable form.

We process your personal data to create and manage your account, schedule and deliver counseling sessions, process orders and payments, respond to your questions, meet our legal and regulatory obligations, and improve our services.

We process your data based on your consent (given here), to perform our contract with you (providing the services you sign up for), to comply with legal obligations we're subject to, and, in limited cases, our legitimate interest in keeping our services safe and working well.

We share data only with the licensed counselors and psychiatrists providing your care, service providers who help us run the platform (such as hosting and payment processing), and authorities where required by law. We do not sell your personal data to third parties, and we do not share it for third-party marketing.

• Access the personal data we hold about you.
• Ask us to correct inaccurate or incomplete data.
• Ask us to delete your data, subject to any legal retention requirements (for example, clinical records we may be required to keep for a period after your last session).
• Withdraw this consent at any time, without affecting the lawfulness of processing carried out before you withdrew it.
• Request a copy of your data in a portable format, or raise a concern with us directly.

We use encryption in transit and at rest, restrict access to your data to staff and clinicians who need it to provide your care, and regularly review our security practices. As noted above, your journal content is encrypted on-device and is never visible to us at all.

To exercise any of the rights above, or if you have questions about how we process your data, contact us at letitoutsupport@gmail.com.