Privacy policy

What we collect

• Account: your email address, a one-way hash of your password (or your Google account ID if you sign in with Google), your nickname or name, and your language.
• Appointments: which expert, date and time, and session type (video or WhatsApp) you booked. If you choose WhatsApp, your phone number is stored too and shared only with your expert.
• Reviews: the rating and comment you write after a completed session; published without your name.
• For experts also: profile details, photo, education and certificates, the diploma and licence documents uploaded for verification, and the Google Calendar connection.

What we don't collect

We do not record the topic you seek support for, any diagnosis or what is said in a session. Your answers in the pre-assessment and the psychological tests are processed only in your browser and are never sent anywhere.

Why we use data

• To create your account and let you sign in securely.
• To create your appointment, pass it to your expert and send confirmation and cancellation emails.
• To verify experts' qualifications.
• To take payment for paid sessions and refund it on cancellation.

We do not use your data for advertising, build profiles from it or sell it.

Who we share it with

• The expert you book: sees your name, email and (for WhatsApp sessions) your phone number.
• Railway: the infrastructure hosting the app, database and documents (EU region).
• Resend: sends account and appointment emails.
• Google: sign-in if you use Google; if the expert connected Google Calendar, the appointment is added to their calendar with the neutral title "InnerWell session" and your email as an attendee.
• Paddle: payment provider for paid sessions. Paddle receives only your email and a neutral item name; your card details never reach us.

Cookies

We only use cookies the site needs to work: a session cookie that keeps you signed in, and a security cookie used for a few minutes during Google sign-in. We use no analytics or advertising cookies.

How long we keep data

We keep your data while your account is open. You can delete your account at any time under My account → Settings; your account, appointments and reviews are permanently deleted. Payment records are kept by Paddle as required by law.

Your rights

Under the GDPR you have the right to access, correct and delete your data, to object to its processing and to receive it in a portable format. To use these rights, write to us at the address on the Contact page. You can also complain to the data protection authority in your country.