Legal

Privacy Policy

Last Updated: January 29, 2026

Introduction

At Onwynd, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mental health AI platform. Please read this privacy policy carefully.

Information We Collect

Personal Information

We may collect personal information that you voluntarily provide to us when you:

  • Register for an account
  • Use our AI chatbot services
  • Complete assessments
  • Contact customer support
  • Subscribe to our newsletter

Health Information

As a mental health platform, we collect sensitive health information including:

  • Mental health symptoms and concerns
  • Assessment responses and scores
  • Conversation history with our AI
  • Progress tracking and mood data
  • Goals and treatment preferences

Automatically Collected Information

When you access our platform, we may automatically collect device information, IP address, usage patterns, and browser details to improve our services.

How We Use Your Information

We use the information we collect to:

Provide personalized AI-powered mental health support
Improve our AI models and therapeutic approaches
Track your progress and provide insights
Send service-related communications
Conduct research to advance mental health care
Ensure platform security and prevent fraud
Comply with legal obligations
Develop new features and services

Data Privacy & Security

Onwynd is committed to data privacy and security. Our platform is designed in alignment with HIPAA principles, with SOC 2 Type II certification currently in progress.

Your protected health information (PHI) is:

Encrypted

In transit and at rest using industry-standard protocols

Secure Storage

Stored on secure servers with industry-standard protection

Access Control

Accessed only by authorized personnel

Protected

By comprehensive security measures

Data Sharing & Disclosure

We do not sell your personal information.

We may share your information only in the following circumstances:

With Your Consent

When you explicitly authorize us to do so, such as connecting with your healthcare provider.

Service Providers

With trusted third-party providers who are bound by strict confidentiality agreements.

Legal Requirements

If required by law or to protect the safety of individuals.

Emergency Situations

In cases of imminent danger to yourself or others, we may share relevant information with emergency services.

Data Security

We implement comprehensive security measures to protect your information:

End-to-End Encryption

All communications are encrypted

Secure Storage

Regular backups and secure data centers

Multi-Factor Auth

Additional layer of account protection

Security Audits

Regular testing and monitoring

Staff Training

Employee data protection education

Incident Response

Rapid response protocols

Your Privacy Rights

You have the following rights regarding your personal information:

1

Access

Request a copy of your data

2

Correction

Update inaccurate information

3

Deletion

Request deletion of your data

4

Portability

Receive your data in a transferable format

5

Restriction

Limit how we use your information

6

Objection

Object to certain processing activities

7

Withdraw Consent

Revoke previously granted consent

To exercise these rights, please contact us at privacy@onwynd.com.

Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations:

Account Information

Until account deletion

Conversation History

7 years (for clinical continuity)

Assessment Data

Until account deletion

Anonymized Research Data

Indefinitely

Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.

International Users

Onwynd operates in the United States. If you access our services from outside the US, your information will be transferred to and processed in the United States. By using our services, you consent to this transfer and processing.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through our platform. Your continued use of our services after such changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Address

123 Admiralty Way
Lagos, NG 2344102

Privacy Officer

Dr. Sarah Chen