Privacy Policy

By creating an account and using M Power Me, you provide informed consent to the collection, use, storage, and sharing of your information as described in this Privacy Policy. You will be clearly informed of the specific data being collected, how it will be managed and shared (including any anonymization or de-identification), how long it will be stored, and why each data element is necessary for the platform to function.

We will seek your explicit consent before using your data for any purpose not described in this Privacy Policy. You may withdraw consent at any time; however, doing so may affect your ability to use certain features of the platform.

M Power Me collects only the data elements that are necessary for performing its intended function as a mental health support platform, or that are reasonably associated with platform monitoring and development efforts directly aligned with that function. We do not collect data beyond what is required to provide you with effective, safe, and personalized mental health support.

Personal Information: Name, email address, and other information you provide when creating an account.

Health Information: Mood entries, chat conversations, and other mental health-related data you share with our platform.

Usage Data: Information about how you use our platform, including pages visited and features used, collected for the sole purpose of improving platform performance and user experience.

We do not sell your personal information to any third party under any circumstances.

Anonymized, de-identified data may be shared with qualified "organizations," which in this context refers exclusively to: (1) academic and research institutions engaged in mental health or behavioral health research; (2) healthcare organizations using aggregate data for clinical quality improvement; and (3) platform development partners assisting in improving M Power Me's functionality and safety.

All data shared with such organizations is fully de-identified in accordance with HIPAA Safe Harbor or Expert Determination standards, meaning it cannot reasonably be used to re-identify you as an individual. Your identifiable personal health information is never shared with or disclosed to third parties outside of legally required disclosures.

We may share your information with trusted service providers who assist in operating our platform (e.g., cloud hosting, security monitoring) under strict contractual obligations that prohibit them from using your data for any other purpose.

We retain your data only for as long as is necessary to fulfill the purposes described in this Privacy Policy. The specific reasons for retaining each category of data and the applicable retention periods are as follows:

• • Account and Profile Information: Retained for the duration of your active account, plus 30 days following account deletion to allow for recovery requests, after which it is permanently and irreversibly deleted.
• • Health and Mental Health Data: Retained in accordance with applicable HIPAA requirements, which require a minimum of six (6) years from the date of creation or last effect. You may request deletion at any time; such requests will be honored to the fullest extent permitted by applicable law.
• • Usage and Analytics Data: Retained for up to 24 months for platform improvement purposes, after which it is anonymized or permanently deleted.
• • Communications: Retained for as long as required to fulfill the purpose for which they were collected and to comply with applicable legal obligations.

All reasons for health data retention are stated above. No additional purposes for retaining your health data will be implemented without first seeking your explicit prior consent.

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

All data is encrypted in transit and at rest. We use industry-standard security protocols and regularly update our security measures.

You have the following rights with respect to your personal information. To exercise any of these rights, contact us at DrBethany@RussellMentalHealth.com. We will respond to all verified requests within 30 days.

• • Right to Access: You may request a copy of the personal information we hold about you.
• • Right to Correction: You may request that we correct any inaccurate or incomplete information.
• • Right to Deletion: You may request the deletion of your personal information and health data at any time, subject to applicable legal obligations such as HIPAA retention requirements.
• • Right to Data Portability: You may request a copy of your data in a structured, commonly used, machine-readable format.
• • Right to Restrict Processing: You may request that we restrict how we process your data under certain circumstances.
• • Right to Opt Out of Communications: You may opt out of non-essential communications at any time.
• • Right to Withdraw Consent: You may withdraw consent to data processing at any time, understanding that withdrawal may affect your ability to use the platform.

We are committed to transparency whenever we make updates to this Privacy Policy, Terms of Service, or any other end-user agreements. Whenever such updates are made, we will:

• • Notify you by email to the address associated with your account at least 30 days before changes take effect
• • Display a prominent in-app notification summarizing the material changes
• • Update the "Last Updated" date at the top of this policy
• • Provide a plain-language summary of all material changes

Continued use of M Power Me after the effective date of any updates constitutes your acceptance of the revised policy. If you do not agree to the updated terms, you may request deletion of your account before the changes take effect.