Skip to main content
Monkey Mind

Privacy Policy

Last updated: October 1, 2026

1. Introduction

Monkey Mind ("we," "us," or "our") operates the Monkey Mind platform located at monkeymindathletes.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

2. Information We Collect

We may collect the following types of information:

  • Account information: name, email address, and password when you create an account.
  • Profile information: role (athlete, parent, coach, provider, organization), sport, age group, and other details you provide.
  • Booking & payment data: session bookings, transaction history, and payment details processed securely through Stripe.
  • Communications: messages exchanged between clients and providers through our platform.
  • Usage data: pages visited, features used, browser type, and device information collected automatically.
  • Referral information: if you arrive through a partner's referral link, we record which link you used (in a cookie and on your account) so the partner can be credited and any referral discount applied.
  • Partner information: if you are one of our referral partners, your contact details and, to pay you, your bank account details. Bank account and routing numbers are stored encrypted.
  • Third-party integrations: if you connect Google Calendar or Zoom, we access calendar event or meeting data solely to create and manage session bookings.

3. How We Use Your Information

  • Provide, operate, and maintain the platform.
  • Facilitate connections between clients and mental health & performance providers.
  • Process bookings and payments.
  • Send transactional emails (booking confirmations, reminders, receipts).
  • Improve and personalize your experience.
  • Comply with legal obligations.

4. Information Sharing

We do not sell your personal information. We may share information with:

  • Providers: your name and booking details are shared with the provider you book with. Session notes and clinical content are never shared with organizations or other third parties.
  • Referral partners: if you signed up through a partner's link, that partner sees only monthly totals of the people who signed up and booked through their links. They never see your name, contact details or anything about your sessions, and we show nothing at all until at least 3 people have signed up or booked.
  • Payment processors: Stripe processes payments on our behalf.
  • Service providers: hosting (Vercel), database (Supabase), email (Resend), and analytics services that help us operate the platform.
  • Legal requirements: when required by law, regulation, or legal process.

5. Data Security

We implement industry-standard security measures including encrypted connections (TLS/SSL), row-level security on our database, and secure authentication. While no method of electronic transmission is 100% secure, we take reasonable steps to protect your data.

6. Third-Party Integrations

Our platform integrates with third-party services including Google Calendar (for calendar events, Google Meet links, and scheduling), Zoom (for meeting links), Stripe (for payments), and Calendly (for scheduling). Each service has its own privacy policy, and we encourage you to review them. We only request the minimum permissions needed to provide our services.

7. Google User Data

If you choose to connect your Google account (for example, to sync your Google Calendar), we access the following Google user data through Google's APIs:

  • Connected account email address: displayed in your settings so you can see which Google account is connected.
  • Calendar free/busy information: read solely to hide times you are already busy from your booking availability and prevent double-scheduling. We check busy blocks when availability is requested; we do not store the contents of your calendar.
  • Calendar events: used solely to create, update, and delete the session events for bookings made through Monkey Mind (including generating Google Meet links). We do not read, modify, or delete events unrelated to Monkey Mind bookings.

Storage: we store the credentials needed to maintain the connection and the connected account's email address. We do not store copies of your calendar events or free/busy data.

Sharing: we do not sell Google user data, do not transfer it to third parties except as needed to provide the features described above, do not use it for advertising, and do not allow humans to read it except with your consent, for security purposes, or where required by law.

Revoking access: you can disconnect your Google account at any time from your account settings (Settings > Booking & Availability) or via your Google Account security settings. When you disconnect, we delete the stored credentials.

Monkey Mind's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

8. Zoom User Data

If you choose to connect your Zoom account so that each booking gets its own meeting link, we access the following Zoom data through Zoom's APIs:

  • Connected account email address: displayed in your settings so you can see which Zoom account is connected.
  • Meetings: we create, update, and delete only the meetings for sessions booked through Monkey Mind. We do not read, modify, or delete any other meeting on your account, and we do not access recordings, transcripts, chat, or participant data.

What we send to Zoom: the meeting is titled only "Monkey Mind session" and carries the date, time, and duration. We do not send your client's name, their email address, their notes, or any detail of what the session is about. Your client is not added to the meeting as a registrant, so Zoom never receives their contact details and never emails them.

Meeting settings: every meeting we create has a waiting room enabled and cloud recording disabled. Sessions are not recorded by Monkey Mind.

Storage: we store the credentials needed to maintain the connection, the connected account's email address, and the meeting identifier and join link for each booking. We do not store copies of your other Zoom meetings.

Sharing: we do not sell Zoom user data, do not transfer it to third parties except as needed to provide the features described above, and do not use it for advertising.

Revoking access: you can disconnect Zoom at any time from your account settings (Settings > Booking & Availability), which revokes our access token with Zoom, or from the Installed Apps section of your Zoom App Marketplace account. When you disconnect, we delete the stored credentials. Meetings already created for existing bookings are not deleted.

9. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us. You may also disconnect third-party integrations from your account settings.

10. Children's Privacy

You must be at least 13 years old to create an account. Users under 18 need a parent or guardian to give consent before they can book a session; we email the parent or guardian a consent link at signup. If a parent or guardian creates an account on behalf of a minor athlete, the parent or guardian is responsible for managing that account.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page.

12. Contact Us

If you have questions about this Privacy Policy, please contact us at contact@monkeymindathletes.com.