Privacy Notice

1. Introduction

At MindFlow by Human-Centric ("we", "our" or "the Platform"), we are committed to protecting your privacy and personal data. This Privacy Notice describes how we collect, use, store, and protect your personal information in accordance with applicable data protection laws.

By using MindFlow, you accept the practices described in this notice. If you do not agree, please do not use our services.

2. Data Controller

Controller: Human-Centric
Platform: MindFlow
Contact: help@human-zen.com

3. Personal Data We Collect

We collect the following types of information:

3.1 Registration Information

• Full name
• Email address
• Phone number (WhatsApp) with country code
• Password (stored encrypted with Argon2)

3.2 Emotional Health Data (Sensitive Data)

• Chat messages you share with MindFlow
• Detected emotions by our artificial intelligence
• Emotional patterns and trends over time
• Micro-actions suggested for your well-being
• Feedback on AI responses

3.3 Technical Data

• IP address
• Browser and device type
• Platform usage data
• Activity timestamps

4. How We Use Your Data

We use your personal information to:

• Provide the service: Process your messages and generate personalized empathetic responses
• Detect emotions: Identify emotional patterns to offer you valuable insights
• Generate analysis: Create progress charts and summaries of your emotional well-being
• Account verification: Send verification codes via WhatsApp
• Security: Protect your account and prevent unauthorized use
• Service improvement: Analyze aggregated (anonymized) usage to improve MindFlow
• Communications: Send you important notifications about your account

5. Use of Artificial Intelligence (OpenAI)

MindFlow uses OpenAI GPT to:

• Generate empathetic and personalized responses
• Detect emotions in your messages
• Identify negative thinking patterns
• Suggest micro-actions for your well-being

We do not share your personal identification information with OpenAI beyond what is necessary to process your messages.

6. Sharing Your Data

We do not sell or rent your personal information. We only share data with:

• OpenAI: To process your messages and generate responses (see section 5)
• WhatsApp service: To send verification codes to your number
• Infrastructure providers: Such as Vercel (hosting) and Neon (database)
• Authorities: If required by law or to protect legal rights

7. Security of Your Data

We implement technical and organizational security measures to protect your data:

• Encryption: Passwords encrypted with Argon2
• HTTPS/TLS: All communications are encrypted
• Restricted access: Only authorized personnel can access sensitive data
• Audits: Periodic security reviews
• Secure database: PostgreSQL with controlled access

Despite our efforts, no system is 100% secure. We recommend using strong and unique passwords.

8. Data Retention

We retain your data while your account is active and for the time necessary to:

• Comply with legal obligations
• Resolve disputes
• Enforce our agreements

You can request deletion of your account and data at any time (see section 9).

9. Your Rights (ARCO)

You have the right to:

• Access your personal data
• Rectify inaccurate or incomplete data
• Cancel (delete) your account and data
• Object to the processing of your data
• Limit processing under certain circumstances
• Portability: Receive a copy of your data in structured format

To exercise your rights, contact us at: help@human-zen.com

We will respond to your request within a maximum of 20 business days.

10. Minors

MindFlow is intended for users 18 years of age or older. We do not intentionally collect data from minors. If we discover that we have collected information from a minor, we will delete it immediately. If you believe a minor has provided data, contact us immediately.

11. Cookies and Similar Technologies

We use cookies and similar technologies to:

• Keep your session active
• Remember your preferences
• Analyze platform usage
• Improve security

You can configure your browser to reject cookies, but this may affect platform functionality.

12. Changes to This Notice

We may update this Privacy Notice occasionally. We will notify you of significant changes by email or through a notice on the platform.

The "Last updated" date at the beginning of this document indicates when the last modification was made.

13. Contact

If you have questions about this Privacy Notice or the processing of your data, contact us:

14. Applicable Law

This Privacy Notice is governed by applicable data protection laws, including Mexico's Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP) and the European Union's General Data Protection Regulation (GDPR), as applicable.

15. Consent