Privacy Policy

1. Introduction

Monkey Mind ("we," "us," or "our") operates the Monkey Mind platform located at monkeymindathletes.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

2. Information We Collect

We may collect the following types of information:

• Account information: name, email address, and password when you create an account.
• Profile information: role (athlete, parent, coach, provider, organization), sport, age group, and other details you provide.
• Booking & payment data: session bookings, transaction history, and payment details processed securely through Stripe.
• Communications: messages exchanged between clients and providers through our platform.
• Usage data: pages visited, features used, browser type, and device information collected automatically.
• Third-party integrations: if you connect Google Calendar, we access calendar event data solely to create and manage session bookings.

3. How We Use Your Information

• Provide, operate, and maintain the platform.
• Facilitate connections between clients and mental health & performance providers.
• Process bookings and payments.
• Send transactional emails (booking confirmations, reminders, receipts).
• Improve and personalize your experience.
• Comply with legal obligations.

4. Information Sharing

We do not sell your personal information. We may share information with:

• Providers: your name and booking details are shared with the provider you book with. Session notes and clinical content are never shared with organizations or other third parties.
• Payment processors: Stripe processes payments on our behalf.
• Service providers: hosting (Vercel), database (Supabase), email (Resend), and analytics services that help us operate the platform.
• Legal requirements: when required by law, regulation, or legal process.

5. Data Security

We implement industry-standard security measures including encrypted connections (TLS/SSL), row-level security on our database, and secure authentication. While no method of electronic transmission is 100% secure, we take reasonable steps to protect your data.

6. Third-Party Integrations

Our platform integrates with third-party services including Google Calendar (for video conferencing and scheduling), Stripe (for payments), and Calendly (for scheduling). Each service has its own privacy policy, and we encourage you to review them. We only request the minimum permissions needed to provide our services.

7. Google User Data

If you choose to connect your Google account (for example, to sync your Google Calendar), we access the following Google user data through Google's APIs:

• Connected account email address: displayed in your settings so you can see which Google account is connected.
• Calendar free/busy information: read solely to hide times you are already busy from your booking availability and prevent double-scheduling. We check busy blocks when availability is requested; we do not store the contents of your calendar.
• Calendar events: used solely to create, update, and delete the session events for bookings made through Monkey Mind (including generating Google Meet links). We do not read, modify, or delete events unrelated to Monkey Mind bookings.

Storage: we store the credentials needed to maintain the connection and the connected account's email address. We do not store copies of your calendar events or free/busy data.

Sharing: we do not sell Google user data, do not transfer it to third parties except as needed to provide the features described above, do not use it for advertising, and do not allow humans to read it except with your consent, for security purposes, or where required by law.

Revoking access: you can disconnect your Google account at any time from your account settings (Settings > Booking & Availability) or via your Google Account security settings. When you disconnect, we delete the stored credentials.

Monkey Mind's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

8. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us. You may also disconnect third-party integrations from your account settings.

9. Children's Privacy

Our platform is not intended for children under 13. If a parent or guardian creates an account on behalf of a minor athlete, the parent or guardian is responsible for managing that account.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page.

11. Contact Us

If you have questions about this Privacy Policy, please contact us at contact@monkeymindathletes.com.