Privacy Policy

Your privacy is a trust (amanah). We never sell, rent, share for advertising, or otherwise resell your personal information. Ever.

1. Information we collect

Your email address (for one-time-code sign-in), your questionnaire and assessment responses, and, if you use voice, the audio of your session for transcription. Transient server logs and strictly necessary first-party cookies (your sign-in session and preferences). Nothing else.

2. How we use it

Solely to provide your assessment and counseling program, match you with a licensed therapist, send you the messages you request (sign-in codes, reminders), and keep the service secure. Your responses are private to you: your spouse never sees your individual answers — each spouse receives only their own report.

3. Cookies & tracking

Only strictly necessary, first-party cookies. We do not use analytics, advertising, or targeting cookies, and we deploy no third-party trackers or pixels of any kind. We honor the Global Privacy Control (GPC) signal automatically.

4. We do not sell, share, or resell — ever

We do not sell your personal information. We do not share it for cross-context behavioral advertising. We do not resell, license, or monetize your data in any form, including for AI training by third parties. The only parties that process your data are service providers bound by contract (and, where health information is involved, by Business Associate Agreements): our hosting provider (Cloudflare), our email delivery provider (Resend — sign-in codes and service emails only), and our BAA-covered AI processing provider (assessment only). None may use your data for their own purposes.

5. Your rights (California CCPA/CPRA and others)

You may request access to, correction of, or deletion of your information, and you may opt out of sale/sharing (none occurs). We will never discriminate against you for exercising your rights. Contact privacy@mawaddahcounseling.com.

6. Health information

Counseling records handled by our licensed therapists are protected health information under HIPAA and applicable state law, encrypted in transit and at rest, and accessed on a minimum-necessary basis with full audit logging.

7. Children under 16

This service is for adults. We do not knowingly collect, sell, or share personal information of individuals under 16.

8. Retention, security & changes

We retain records only as long as clinically and legally required, protect them with encryption and one-time-code authentication, and will post any changes to this policy here.

Our AI assistant is software, not a therapist, and always identifies itself. In crisis, call or text 988. — Mawaddah Counseling, mawaddahcounseling.com