Privacy Policy | Harmoni AI

SparkMint Limited ("Harmoni AI," "Company," "We," "Our," "Us") respects your privacy and is committed to protecting it through our compliance with this policy. This document details the types of information we may collect from you or that you may provide when you access or use Harmoni AI's website, applications, and related services (collectively "Services") and our practices for collecting, using, maintaining, protecting, and disclosing that information.

Please read this policy carefully to understand our practices regarding your information. By accessing or using our Services, you agree to this Privacy Policy. This policy may change from time to time, and your continued use of our Services after we make changes is deemed acceptance of those changes, so please check periodically for updates.

Information We Collect and How We Collect It

We collect several types of information from and about users of our Services:

Directly from you when you provide it to us (e.g., during registration, taking assessments, using clinic features, contacting support).
Automatically as you navigate through and interact with the Services (e.g., usage details, IP addresses, device information).
From connections you authorize, such as when participating in a shared connection podcast.
From organizations (Clinic Platform): If you use Harmoni AI through a therapist, clinic, or other organization, that organization may provide information about you to us.

Information You Provide to Us

The information we collect may include:

Personal Information: Name, email address, password, and other details provided during account registration.
Assessment Data: Your responses to our personality tests, psychiatric evaluations, guided self-reflections, and other assessments, as well as the generated results and insights. We treat this as sensitive, confidential information.
Podcast Data: Inputs used to generate personalized or connection podcasts, and the audio files themselves.
Connection Information: Information about individuals you choose to connect with on the platform for shared insights or connection podcasts. Consent from both parties is required.
Clinic Platform Data (For Professionals): Information related to client management, session notes, assessment assignments, transcription data (if using the feature), and treatment plans created within the platform. Professionals are responsible for ensuring they have the necessary consents from their clients to use these features.
Payment Information: If you purchase services, our third-party payment processors collect payment details. We do not store full credit card numbers.
Communications: Records and copies of your correspondence (including email addresses) if you contact us or use communication features within the Services.
User Content: Any other information you voluntarily provide through forms, surveys, or interactions with the Services.

Automatic Information Collection

When you use the Services, we may use technology to automatically collect:

Usage Details: Information about your access to and use of the Services, including traffic data, logs, features used, and interaction patterns.
Device Information: Information about your computer or mobile device and internet connection, including IP address, operating system, browser type, and device identifiers.
Cookies and Tracking Technologies: We use cookies and similar technologies (like pixels or web beacons) to help operate the Services, remember your preferences, understand user activity, and potentially support advertising efforts. You can manage cookie preferences through your browser settings and our cookie consent tool (if applicable).

How We Use Your Information

We use the information we collect for various purposes:

To provide, operate, and maintain our Services.
To create and manage your account.
To generate assessment results, personalized insights, and podcasts.
To facilitate connections and generate connection podcasts based on shared, consented data.
To enable features of the Clinic Platform for professional users, including client management, assessment administration, transcription (with appropriate consent), and treatment planning tools.
To process transactions and fulfill orders.
To personalize your experience and deliver relevant content.
To communicate with you, including responding to inquiries, sending service messages, updates, and security alerts.
To improve and develop our Services, including research, analytics, and aggregated analysis (using anonymized or aggregated data where possible).
To ensure security and prevent fraud.
To comply with legal obligations.
For Marketing and Advertising: To send you promotional communications, newsletters, and targeted advertising based on your email address, usage patterns, and technical data. We will not use your sensitive assessment data for these purposes.

How We Share Your Information

We are committed to protecting your privacy and do not sell your personal information to advertisers or third parties. We may disclose information under the following circumstances:

With Your Consent: We share information when you explicitly authorize us to do so, such as when creating a connection with another user. Both parties must consent to share data for connection features.
Service Providers: We share information with third-party vendors and service providers who perform services on our behalf (e.g., cloud hosting, payment processing, AI model providers for specific features like transcription, analytics). These providers are contractually obligated to protect your data and use it only for the purposes we specify.
Clinic Platform Sharing: If you are a client using Harmoni AI through a professional (therapist, clinic), your information within the Clinic Platform will be accessible to that professional or organization according to their own privacy practices and your agreement with them.
Business Transfers: In the event of a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of such an event.
Legal Requirements: We may disclose information if required by law, subpoena, or other legal process, or if we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.
Aggregated or Anonymized Data: We may share aggregated or anonymized data (which does not identify individuals) for research, analysis, or other purposes.
Advertising Partners: To support targeted advertising on other platforms and measure ad effectiveness, we may share a secure, hashed version of your email address along with certain technical or usage data (like device information or interaction patterns, but explicitly excluding assessment responses, results, or any other Personally Identifiable Information) with third-party advertising partners (e.g., ad networks, analytics providers). Hashing transforms your email into a unique code, preventing partners from accessing your original email address directly while still enabling ad matching. These partners are bound by confidentiality obligations and are restricted from using this data for other purposes.

Data Security

We implement reasonable technical and organizational measures designed to protect your personal information from accidental loss and unauthorized access, use, alteration, and disclosure. We use encryption (like SSL/TLS) for sensitive data transmission. Payment processing is handled by secure third-party providers.

However, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of information transmitted to our Services. Any transmission is at your own risk. You are responsible for keeping your account password confidential.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which we collected it, including providing you with the Services, complying with legal, accounting, or reporting requirements, and resolving disputes. Assessment results and associated data are retained while your account is active or as needed to provide connection features you utilize.

When we no longer have an ongoing legitimate business need to process your personal information, we will either delete or anonymize it. If deletion is not immediately possible (e.g., due to backup archives), we will securely store it and isolate it from further processing until deletion can occur. You can request deletion of your data as described below.

Your Rights and Choices

Depending on your location and applicable law, you may have certain rights regarding your personal information:

Access: You can request access to the personal information we hold about you.
Correction: You can request correction of inaccurate or incomplete information. Much of this can be done through your account settings.
Deletion: You can request the deletion of your personal information, subject to certain exceptions (e.g., legal obligations, resolving disputes). As stated in our FAQ, you can contact support to request complete deletion of your account and data.
Opt-Out of Communications & Advertising: You can opt-out of receiving promotional emails by following the unsubscribe instructions in those emails. You may also be able to manage preferences related to targeted advertising through our cookie consent tool or third-party advertising platforms' settings. We may still send essential service-related communications.
Withdraw Consent: Where we rely on consent for processing (like for connections), you can withdraw your consent at any time, though this won't affect prior processing.

To exercise these rights, please contact us at support@sparkmint.xyz. We will respond to your request in accordanceance with applicable law. We may need to verify your identity before processing your request.

Third-Party Services

Our Services may integrate with or contain links to third-party websites or services (e.g., payment processors). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

Children's Privacy

Our Services are not intended for or directed at children under the age of 18 (or the relevant age of majority). We do not knowingly collect personal information from children. If we learn we have collected personal information from a child without parental consent, we will take steps to delete it.

International Data Transfers

Your information may be transferred to, stored, and processed in countries other than your own, including countries where our servers or service providers are located. These countries may have data protection laws different from those in your country. We take appropriate safeguards to ensure your information remains protected when transferred internationally.

Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by updating the "Last Updated" date at the top of this policy and may provide additional notice (such as through the Services or via email). We encourage you to review this policy periodically.

Contact Information

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:

SparkMint Limited
Nairobi, Kenya
Email: support@sparkmint.xyz

Disclaimer: Harmoni AI provides assessments and insights for educational and self-reflection purposes. They are not a substitute for professional medical or mental health advice, diagnosis, or treatment. Always seek the advice of a qualified health provider with any questions you may have regarding a medical or mental health condition. Reliance on any information provided by Harmoni AI is solely at your own risk.