At Mustaid, we understand that seeking help for addiction recovery requires trust. This Privacy Policy explains how we collect, use, protect, and share your personal information when you use our mobile application and website.
1. Information We Collect
1.1 Account Information
When you create an account, we collect:
Email address (required for account creation and communication)
Username (can be anonymous or pseudonymous)
Password (encrypted and hashed; we never store plaintext passwords)
Age verification (date of birth to comply with age restrictions)
Optional profile information (recovery goals, preferences)
1.2 Health & Recovery Data
To provide therapeutic support, we collect:
AI conversation history (your messages with our therapeutic AI assistant)
Progress tracking data (streak counts, milestones, recovery timeline)
Emotional state indicators (mood tracking, urge intensity ratings)
Crisis intervention data (emotional distress signals for safety features)
Journal entries (if you use the journaling feature)
Community interactions (posts, comments in White Stones community)
1.3 Technical Information
Device information (device type, operating system, app version)
Send optional motivational messages (can be disabled)
Respond to your support requests
3. How We Protect Your Data
Bank-Level Encryption
All sensitive data is encrypted both in transit (TLS 1.3) and at rest (AES-256 encryption). Your conversations with the AI, progress data, and personal information are stored using device-specific encryption keys that only you can access.
Secure servers: Data stored on SOC 2 compliant cloud infrastructure
Access controls: Strict employee access policies with audit logs
Anonymization: Personal identifiers removed from analytics data
4. Data Sharing & Disclosure
4.1 We Do NOT Sell Your Data
Zero Tolerance Policy on Data Sales
We have never, and will never, sell your personal information, health data, or usage patterns to advertisers, data brokers, or third parties. This is a core principle of our mission.
4.2 Limited Third-Party Services
We share minimal data with:
Cloud hosting providers (AWS/Google Cloud) – encrypted data storage only
Payment processors (Stripe) – payment information only, never health data
Analytics services (anonymized usage data only, no personal identifiers)
Crash reporting tools (Sentry) – technical diagnostics only
4.3 Legal Compliance
We may disclose information only when:
Required by law (valid court order or subpoena)
Necessary to prevent imminent harm or danger
To protect our legal rights and prevent fraud
5. Your Privacy Rights
5.1 Access & Control
You have the right to:
Access your data: Request a copy of all data we have about you
Correct your data: Update incorrect or incomplete information
Delete your account: Permanently delete your account and all associated data
Export your data: Download your recovery data in a portable format
Opt-out of communications: Unsubscribe from non-essential emails
5.2 How to Exercise Your Rights
In-App: Go to Settings → Privacy & Data → Account Management
Email: privacy@mustaid.com (we respond within 48 hours)
6. Data Retention
Active accounts: Data retained while your account is active
Deleted accounts: Personal data permanently deleted within 30 days
Anonymized research data: May be retained indefinitely (with all personal identifiers removed)
Legal obligations: Some data may be retained longer if required by law
7. Children's Privacy
Mustaid is intended for users aged 17 and older. We do not knowingly collect information from individuals under 17. If we discover a user under 17, we will immediately delete their account and all associated data.
8. International Users
Mustaid operates globally. If you use our services from outside the United States, your data may be transferred to and processed in the United States. By using Mustaid, you consent to this transfer. We comply with applicable data protection laws including GDPR (EU) and CCPA (California).
9. HIPAA Compliance Notice
Important: Mustaid is NOT a HIPAA-covered entity. We are not a healthcare provider, health plan, or healthcare clearinghouse. Our AI therapeutic assistant is a support tool, not a medical service.
If you require HIPAA-compliant therapy, please consult a licensed mental health professional. Mustaid does not create a provider-patient relationship.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make significant changes, we will:
Update the "Last Updated" date at the top of this page
Notify you via email or in-app notification
Require your consent for material changes that affect your rights
11. Contact Us
If you have questions, concerns, or requests regarding your privacy:
Email: privacy@mustaid.com
Support: support@mustaid.com
Mail: Mustaid Privacy Team, [Address TBD]
Response Time: We respond to all privacy inquiries within 48 hours
Privacy Policy Summary
✅ We encrypt all sensitive data with bank-level security
✅ We NEVER sell your personal or health information
✅ You can delete your account and data anytime
✅ We collect only what's necessary for recovery support
✅ You remain anonymous—no real name required
✅ We comply with GDPR, CCPA, and data protection laws