What Mend collects, what stays on your device, and what choices you have.

Effective date: September 7, 2026

This Privacy Policy explains how Mend Mental Wellness collects, uses, discloses, retains, and protects information when you use a Mend website, worksheet, guided practice, signup form, feedback channel, or related digital resource.

The short version

Your Safe Start Worksheet answers are designed to stay in your browser on your device.
Mend is designed not to receive or read your worksheet answers.
If a session requires an email for access, Mend receives that email, the consent record, and limited access metadata.
Promotional Mend emails require a separate optional marketing choice.
Mend collects limited product-use events to understand whether pages and worksheet steps are being used.
Mend does not sell personal information and does not use worksheet answers for advertising or AI training.
Do not send trauma histories, diagnoses, crisis information, or worksheet answers through email or feedback forms.

1. Scope

This Policy applies to Mend Mental Wellness Services that link to it. It does not govern a third party's independent website, account, application, or service merely because Mend links to it.

“Personal information” in this Policy includes information that identifies, relates to, describes, can reasonably be linked with, or is otherwise treated as personal data under applicable law.

2. Mend's privacy principles

Mend aims to collect the minimum information needed for a defined purpose, keep private worksheet content local whenever possible, avoid collecting trauma narratives or crisis details, separate product metrics from sensitive content, secure retained information, and delete or anonymize information when it is no longer needed.

Mend does not sell personal information. Mend does not use private worksheet content for advertising, profiling, or model training because Mend is designed not to receive that content.

3. Worksheet answers that stay on your device

The interactive Safe Start Worksheet currently saves answers in browser storage on your device. Mend is designed not to receive, read, review, or store those answers.

This includes your selected focus, target, images, moments, thoughts, beliefs, felt senses, desired beliefs, emotions, body sensations, intensity ratings, grounding choices, support names, session reflections, journal entries, and aftercare plans.

Local browser storage has important limits:

another person using the same device or browser profile may be able to see saved entries;
clearing browser data may delete entries;
private or temporary browsing may not preserve entries;
entries do not automatically appear on another browser or device;
browser extensions, malware, device compromise, shared-device access, or backups may affect privacy; and
Mend cannot recover locally deleted entries.

You can clear entries using the worksheet controls or your browser settings.

4. Information Mend collects directly

Mend may collect information you choose to submit, including:

your email address;
the consent language and version associated with session access or an email signup;
signup source, source page, and timestamps;
whether you separately chose to receive promotional Mend updates;
contact or support correspondence;
feedback submitted through a linked form; and
transaction or membership information if you use a third-party support or payment service, including the customer, subscription, invoice, payment status, receipt, and cancellation information processed by Stripe when Stripe Checkout is used.

Mend asks you not to submit trauma histories, diagnoses, crisis details, or private worksheet answers through these channels. If you choose to include sensitive information anyway, it may be processed as part of the message you send.

5. Usage and technical information

Mend and its infrastructure may process limited information needed to deliver, secure, and understand the Services, including:

the page requested;
date and time;
a product event, such as worksheet opened, section reached, practice started, recap reached, save control used, feedback clicked, or YouTube clicked;
campaign, source, section, or placement labels included in a Mend link or event;
browser, device, network, and request information automatically processed by hosting or analytics infrastructure;
IP address and request metadata used by providers for delivery, security, fraud prevention, and logs; and
error, performance, and security information if such tooling is enabled.

Mend's own Cloudflare D1 measurement is designed to store event counts and limited page, source, section, and date fields rather than worksheet answers.

6. Analytics

Mend uses a privacy-limited event-count system and may use PostHog for product analytics.

The current Mend configuration uses manual events, disables automatic event capture, disables automatic pageview and page-leave capture, disables session recording, and masks page text and element attributes. Mend limits the metadata it intentionally sends to product event names, page paths, source, section, and placement fields.

Cloudflare and PostHog may still process technical metadata such as IP address, browser information, identifiers, cookies, or similar storage as part of network delivery, security, and analytics operation. Their independent processing is subject to their applicable terms and privacy documentation.

Mend does not intentionally send worksheet answers, trigger details, trauma details, diagnoses, body sensations, intensity answers, journal text, support names, or email addresses to PostHog.

7. How Mend uses information

Mend may use information to:

provide, operate, maintain, and secure the Services;
provide gated session access and preserve the related consent record;
save an optional marketing signup and send requested updates;
respond to contact, correction, accessibility, legal, or privacy requests;
measure aggregate use and improve navigation, content, accessibility, and product flow;
deliver purchased content or administer a membership if commerce becomes active;
detect, prevent, and investigate fraud, abuse, security threats, and technical problems;
comply with law and enforce agreements; and
establish, exercise, or defend legal claims.

Mend will not intentionally repurpose collected information incompatibly without appropriate notice and consent where required.

8. Legal bases where applicable

Depending on the purpose and applicable law, Mend may rely on consent, performance of a contract, compliance with a legal obligation, or legitimate interests such as proportionate security, service operation, and privacy-limited product measurement.

You may withdraw consent where processing depends on consent. Withdrawal does not make earlier lawful processing unlawful. Some information may still be retained where required for legal compliance, security, disputes, or to honor an unsubscribe request.

9. Cookies and browser storage

Mend uses browser local storage to save worksheet entries on your device and may store limited preferences or analytics controls.

Analytics and infrastructure providers may use cookies or similar technologies. Where applicable law requires consent before non-essential storage or analytics begins, Mend will provide an appropriate choice mechanism.

You can use browser controls to remove or block storage, but doing so may prevent worksheet saving or affect parts of the Services.

11. Service providers and external destinations

Relevant providers or external destinations may include:

Cloudflare: website delivery, functions, security, and D1 data storage;
PostHog: privacy-limited product analytics if enabled;
Stripe: Checkout, customer, subscription, invoice, payment, receipt, refund, and billing-management services when a paid Mend product is offered;
Google and Gmail: email delivery, contact correspondence, and connected services;
Google Forms: optional product feedback;
YouTube: videos, channel interactions, comments, and YouTube analytics; and
Buy Me a Coffee: optional third-party support, purchase, or membership interactions.

When you leave Mend for a third-party site, that provider independently determines some or all of its processing. Review its privacy information before submitting data.

12. International processing

Mend and its providers may process information outside the country where you live. Data-protection rules may differ between locations.

Where required, Mend will use a lawful transfer mechanism and appropriate contractual or organizational safeguards. Mandatory local rights continue to apply.

13. Retention

Mend retains personal information only as long as reasonably necessary for the purpose described, legal obligations, security, disputes, and enforcement.

Local worksheet entries: Remain on your device until you clear them, browser storage is cleared, or the worksheet storage changes. Mend cannot retrieve or control them.
Email subscriber records: Kept while you remain subscribed and then deleted or limited, except for minimal suppression, legal, security, or dispute records.
Product event counts: Kept for product measurement and then deleted or aggregated when no longer reasonably needed.
Contact and privacy requests: Kept long enough to respond and retain an appropriate compliance record.
Feedback: Kept while reasonably useful for product review, subject to deletion and legal needs.
Transaction records: Stripe and Mend may retain customer, subscription, invoice, payment, receipt, refund, and cancellation records for periods required by tax, accounting, payment, chargeback, fraud, and consumer law.
Security logs: Kept for a period proportionate to security needs or longer when required for an active investigation.

Backup copies may remain temporarily until they expire under the relevant backup cycle.

14. Security

Mend uses reasonable administrative, technical, and organizational measures appropriate to the information processed. Measures may include restricted access, multifactor authentication, secret management, encryption supported by providers, secure configuration, monitoring, deletion procedures, and incident response.

No website, transmission, device, or storage system is completely secure. You should protect access to your device, browser profile, and email account.

15. Your privacy rights

Depending on your location and applicable law, you may have the right to:

know whether Mend processes your personal information;
access information and learn how it has been used or disclosed;
correct inaccurate information;
delete information, subject to lawful exceptions;
withdraw consent;
object to or restrict certain processing;
receive portable data where applicable;
opt out of sale, sharing, or targeted advertising where applicable;
limit certain uses of sensitive personal information where applicable;
complain to an appropriate regulator; and
receive equal service without unlawful discrimination for exercising a privacy right.

Mend may request proportionate information to verify a request. Mend will respond within the period required by applicable law and explain any lawful exception or extension.

Because Mend does not hold locally stored worksheet entries, Mend cannot access, export, correct, or delete them for you. You control those entries through the worksheet and your browser.

16. Regional information

Singapore

Where Singapore's Personal Data Protection Act applies, Mend addresses applicable duties concerning accountability, notification of purposes, consent and withdrawal, purpose limitation, accuracy, protection, retention, transfers, access, correction, and notifiable breaches.

European Economic Area and United Kingdom

Where European or United Kingdom data-protection law applies, you may have rights concerning access, correction, deletion, restriction, objection, portability, consent withdrawal, and regulatory complaints. Mend will identify and use an appropriate legal basis and transfer safeguard where required.

California and other United States jurisdictions

Where applicable law grants rights to know, access, correct, delete, opt out, limit sensitive-information use, use an authorized agent, or avoid discriminatory treatment, Mend will honor those rights subject to lawful exceptions and verification.

Mend does not currently sell personal information or use it for cross-context behavioral advertising.

17. Health-related and sensitive information

Mend is designed to avoid collecting identifiable health information through the worksheet. Do not send trauma narratives, diagnosis information, crisis disclosures, body sensations, intensity answers, or private journal content through email or feedback forms.

Mend does not claim that it is a healthcare provider or that all information associated with the Services is protected health information under HIPAA. Consumer health information outside a traditional healthcare relationship may be governed by other privacy, consumer-protection, breach-notification, and state health-data laws.

18. Children

Mend resources are intended for adults. Mend does not knowingly collect personal information from a child below the age at which they can lawfully provide consent in their location.

If you believe a child submitted personal information without valid authorization, contact Mend so the situation can be reviewed and the information deleted where appropriate.

19. Artificial intelligence and automated decisions

Current Safe Start worksheet answers are not submitted to Mend or to an AI system. Mend does not use those private entries to train models, profile users, diagnose conditions, score risk, or make decisions producing legal or similarly significant effects.

If Mend introduces a feature that sends user input to an AI provider, Mend will update this Policy and the relevant interface before launch to explain the data, provider, purpose, retention, training position, limitations, and user choices.

20. Browser privacy signals

Browser Do Not Track signals are not governed by one universal standard. Where applicable law requires recognition of a legally valid opt-out signal, including Global Privacy Control, Mend will respond as required.

You may also use browser controls to block or clear cookies and local storage, subject to the worksheet-saving limitations described above.

21. Changes to this Policy

Mend may update this Policy when its product, providers, processing, security, or legal obligations change. The effective date at the top identifies the current version.

Mend will provide appropriate notice of material changes where reasonably possible or legally required. Mend will seek new consent before applying a materially broader use to previously collected information where law requires it.

22. Contact and complaints

Privacy questions, access requests, correction requests, deletion requests, consent withdrawals, and complaints may be submitted through the Mend Contact page or emailed to hello@mendmentalwellness.com.

Do not include private worksheet answers, trauma histories, diagnoses, or crisis information unless strictly necessary to identify the record involved.

You may also contact the data-protection or consumer authority available in your jurisdiction.