• Personal data is stored in the EU (Supabase region eu-central-1 / Frankfurt).
• Data in transit is protected with TLS. Infrastructure providers encrypt data at rest (database and object storage).
• Access to content is limited by authentication, row-level security (RLS), private storage buckets, and restricted admin roles.
• Subprocessors include Supabase, Vercel, GetStream, and Revolut under appropriate data-processing terms.
• Messaging is not end-to-end encrypted. The platform can technically access message content on the server for functional purposes (delivery, moderation readiness, support).
• Session notes and psychological test answers are additionally encrypted at the application layer (field-level / envelope encryption) before storage when encryption keys are configured. The platform can decrypt this content on authorized servers after access checks — this is not E2E.
• Sensitive access and admin actions are recorded in an append-only security audit log (who / when / which resource). Audit entries do not store note text, test answers, or message bodies.
• You may request access, export, or erasure where applicable. How long security logs are kept (retention) will be confirmed with counsel before cutover.

This page is informational and not legal advice. Retention periods and legal bases are confirmed separately with counsel.