Privacy Policy

Who holds the data

HEAL Companion is operated by the Center for Study of Wholeness and Resilience (CSWR). Questions about this policy, and every request under it, may be sent through the WhatsApp support button in the application.

What is collected

Only what the service needs in order to work for you:

• Account: email address, an optional preferred name, chosen language, approval state.
• Conversation: the text of what you write or say and what the Companion answers, while session storage stays switched on.
• Patterns: a short summary row per session naming zones, sensations, and qualities.
• Technical: voice-timing measurements, error records, and standard request logs.

Sensitive data

Somatic and emotional narrative may be read as health-related, special-category personal data. It is treated that way here by default: explicit consent is asked before the first session, access stays scoped to you through row-level policies, and the content is never used to train third-party models.

Why it is held (lawful basis)

Explicit consent for conversation content and derived patterns; contract for running the account; legitimate interest for security, abuse prevention, and keeping the service working. Consent may be withdrawn at any time in Settings, without affecting what happened before withdrawal.

Purpose limitation

Conversation history serves your own reflection and the Companion's continuity. Nothing else. No advertising, no profiling for third parties, no training of third-party models on your content.

How long it stays

Default retention: transcripts 24 months, pattern rows 36 months, voice-timing events 90 days, authentication logs 12 months. Retention may be shortened to 3 or 12 months, or set to keep indefinitely, in Settings. Anything past its window is deleted automatically.

Your rights

Each of these may be exercised directly in Settings, without waiting on a request:

• Export: a full JSON file of sessions, messages, and patterns.
• Erasure: delete a single session, or the account and everything derived from it, with a 30-day window before the hard delete.
• Rectification: change preferred name and language.
• Restriction: switch session storage off, or pause recall of past sessions while keeping them.
• Objection and complaint: a supervisory authority in your country may always be addressed.

International transfers

Backend, AI gateway, and email delivery may process data outside the European Union. Standard Contractual Clauses are in place with each provider, together with a transfer-impact assessment kept with the records of processing.

Security

All traffic between your device and the service travels over TLS 1.2 or higher. Conversation history, profile data, and backups are encrypted at rest. Secrets stay server-side; personal content is kept out of error reports.

Breach notification

A personal-data breach that is likely to bring risk is reported to the relevant supervisory authority within 72 hours of becoming known, and to affected people without undue delay when the risk is high.