Privacy Policy

1. Data controller

Smart Medical Care SAS, 37 avenue Maréchal Foch, 06000 Nice, France, RCS Nice 932 924 194, is responsible for the processing it carries out for Mind. Julien P. is your privacy contact at the address below. This role is not presented as a formal appointment of a Data Protection Officer (DPO).

2. Your answers and results

Questionnaires are completed and scored in your browser. Your answers, scores, personality facets, and guide selections remain in temporary memory in the tab. No account, medical document, name, or email is required for a basic result.

The website does not send answers or results to a server, AI provider, analytics tool, or marketing list. They are not used to train AI. Reloading the page, leaving the questionnaire, or changing language clears them. We therefore do not hold a copy that we could return or delete remotely.

Answers may reveal sensitive information. On a shared device, close the page after use. Screenshots, printouts, browsing history, and software installed on your device also depend on your own settings.

3. Other data and purposes

Visiting a website necessarily involves technical communications: an IP address, date and time, requested resource, and browser information may be processed to deliver pages and maintain security. These operations rely on our legitimate interest in providing and protecting the website, balanced against visitors’ rights.

If you voluntarily contact us, we receive your email address, message, and any attachments you choose to send. We use them to respond and manage your request based on our legitimate interest, or to meet a legal obligation where applicable. Visiting the site does not subscribe you to marketing.

Please include only necessary information and do not email test answers or health information when requesting technical support.

4. Optional emails

In the current version, the form shown after some results is a local simulation: it checks the email format and consent choice, then clears the field. The address is neither sent nor saved. Your result remains available if you skip or dismiss the form.

If live signup opens, it will require specific, freely given consent through an unchecked box for updates and offers about AI-enhanced analysis. Signup will be separate from the questionnaire and will not include answers, scores, or the test name. This notice will be updated before activation to identify the provider and retention period. Each marketing email must include an easy unsubscribe option; you may also contact us directly. Withdrawal does not affect the lawfulness of earlier processing.

5. Recipients, hosting, and transfers

We do not sell your data or send your answers to advertisers. Access to received messages is limited to authorized Smart Medical Care SAS personnel and the providers needed to handle them. Disclosure may also occur where required by law.

The selected public website hosting is Google Cloud in the United States. Technical browsing data may therefore be processed outside the European Economic Area when the public site is deployed. Health-data infrastructure in France does not mean all technical traffic stays in France.

The planned health-data infrastructure is Google Cloud in France within an HDS-certified scope. Questionnaire answers are not currently sent to or stored there. Activating storage, AI analysis, or result delivery will require its own information and processing framework.

Before public deployment, processing agreements, processing locations, and applicable transfer safeguards must be checked, including Standard Contractual Clauses and supplementary measures where needed. This notice does not claim that unverified contracts or safeguards are already in place. Ask our privacy contact for details.

6. Retention

Answers and results: only for the questionnaire open in the tab, without persistent saving by Mind. The demonstration email form does not create a contact list.

Contact messages: for as long as needed to handle and follow up on the request; separate retention may be necessary to meet legal obligations or establish, exercise, or defend a legal claim for the applicable legal period. Messages are not intended for marketing reuse without separate consent.

The actual retention periods for technical logs and the email service must be specified in this notice before public deployment based on the selected configuration. Retention periods for other AI DiagMe products do not automatically apply to Mind.

7. Security and limitations

Local scoring limits the publisher’s collection of answers. Access to data actually received must be restricted to authorized people, and the public deployment must protect communications with HTTPS. No system can guarantee absolute security.

Links to publications and external support resources lead to independent services. Their policies apply when you visit them. Mind does not load embedded video players, social widgets, or remote fonts to display its pages.

8. Your rights

Subject to the GDPR and French data protection law, you may request access, correction, deletion, restriction, or portability of your data and object to certain processing. Where processing relies on consent, you can withdraw it at any time. French law also allows instructions concerning your data after your death.

Email our privacy contact and describe your request. Proportionate identity verification may be requested if there is reasonable doubt. We normally respond within one month; complex or multiple requests may take two additional months, with notice within the first month.

You may complain to the French data protection authority, CNIL, or the competent authority where you live, without contacting us first.

9. Minors and automated decisions

Questionnaires are intended for people age 18 and older. We ask for confirmation before starting; this is not an identity check. If a minor has sent personal information directly to the team, contact us so we can consider its deletion.

The calculations provide self-assessment context, not a medical, administrative, employment, credit, or insurance decision. No result should be used alone to determine another person’s rights or access to care.

10. Policy updates

The update date appears at the top of the page. Changes to purposes, recipients, or questionnaire operation must be accompanied by appropriate information and, where required, separate consent before implementation.