VieroMind Privacy Policy

VieroMind respects the privacy of people who use its websites, mobile applications, therapist services, VieroCompass, VieroMind Academy, Ravius, community features, institutional workspaces, assessment-related workflows, and related services (collectively, the Services). This Policy explains how VieroMind collects, uses, discloses, stores, retains, and protects personal information.

Product-specific notices, consent forms, institutional agreements, therapist agreements, Data Processing Agreements, safeguarding frameworks, and other service-specific documents may supplement this Policy. Where a supplemental document applies, it controls to the extent of a conflict for that Service.

VieroMind (Private) Limited is the legal entity responsible for the Services covered by this Policy. For direct-to-user Services, VieroMind generally determines why and how personal information is processed. For institutional Services, including certain Academy, Ravius, school, assessment, or partner-hosting workflows, VieroMind may process information on behalf of a customer or partner organization under the applicable written agreement.

Participating therapists and other qualified professionals may independently determine how clinical information created during professional services is used and maintained. Their privacy, recordkeeping, and professional obligations may apply in addition to this Policy. Parent, guardian, school, institution, or other authorized-party access is limited by the applicable consent framework, safeguarding requirements, permissions, and service agreement.

Depending on the Service, VieroMind may collect account, identity, contact, profile, authentication, security, device, browser, IP, usage, support, complaint, partnership, and inquiry information.

Some information may be sensitive, including mental-health-related information, journals, mood records, therapist communications, assessment materials or results, minor-related information, professional credential records, and information submitted to AI-assisted features.

• Therapist search, matching, appointment, booking, communication, session, refund, payment, payout, professional credential, education, practice, availability, and supporting-document information.
• Academy enrollment, cohort, pathway, learning, progress, completion, certificate, workspace, and role-access information.
• Compass responses, progress, derived results, saved history, and purchase status.
• Journals, mood check-ins, self-reflection responses, community activity, AI prompts and outputs, where voluntarily provided.
• Ravius organization, account, department, survey, pulse, aggregate reporting, and action-tracking information.
• Assessment-related intake, consent, scheduling, administration, workflow, documentation, result, or report information where an authorized feature permits.

Therapist and professional services

VieroMind may process therapist search preferences, profiles, booking records, secure messages, hosted-session information, qualifying reviews, payment status, and support or dispute information. VieroMind may process participating professionals' identity, education, credentials, practice information, availability, listed fees, agreements, verification records, and payout information.

Therapy and other professional services are delivered by participating professionals within their qualifications and scope. VieroMind's hosting, scheduling, payment, or communication tools do not replace the professional's independent judgment or responsibility.

Assessment and institutional workflows

Where an approved workflow is enabled, VieroMind may support digital intake, consent, scheduling, assessment administration, document exchange, professional review, reporting, or related institutional processes. Assessment scoring, clinical interpretation, diagnosis, recommendations, and professional conclusions remain subject to instrument requirements, professional qualifications, institutional approvals, and human professional judgment.

Any child-, student-, school-, or minor-facing workflow requires a separate consent, safeguarding, access-control, institutional-responsibility, and professional-oversight framework.

VieroCompass

VieroCompass may collect self-reflection responses, progress information, generated insights, saved history, and Premium Report purchase status. Compass scoring is deterministic and rule-based. AI does not calculate the Compass score. Compass and AI-assisted explanations are informational and do not convert Compass into a psychological assessment, diagnosis, clinical evaluation, or substitute for professional care.

VieroMind Academy

Academy may process learner identity, role, enrollment, cohort, pathway, progress, completion, inquiry, institutional-workspace, and role-based-access information. Academy supports structured education, professional development, institutional readiness, completion records, assessment-related education, and separately authorized supervised or governed digital assessment workflows.

Unless expressly authorized under a separate framework, institutional Academy users do not receive private journals, therapy records, raw private reflections, clinical notes, personal Compass responses, or individual mental-health outcomes. Completion records, certificates, or badges acknowledge participation or completion only unless a separate recognized approval or co-issued program expressly states otherwise.

Ravius

Ravius may process organization and user-account information, department structure, surveys, pulse checks, approved identity information, derived Compass result information, aggregate wellbeing signals, organizational summaries, dashboard use, and action tracking. Ravius is privacy-conscious organizational intelligence and decision-support infrastructure. It is not employee surveillance, clinical care, or an automated employment-decision system.

Journaling, check-ins, community, AI-supported tools, and crisis navigation

VieroMind may process information voluntarily submitted through journals, mood check-ins, community participation, reflection features, and AI-assisted tools. Users should not submit confidential information about another person unless authorized to do so. VieroMind may provide crisis-resource information, emergency-service directions, referral information, and support navigation. These are informational pathways, not continuously monitored emergency services or a substitute for urgent local care.

VieroMind does not use private journals, therapist communications, assessment information, credential documents, or private mental-health content for targeted advertising.

• Provide, administer, secure, and improve the Services; create accounts; facilitate therapist search, bookings, communications, hosted sessions, payments, Academy pathways, assessment workflows, and institutional services.
• Operate Ravius and produce permitted aggregate outputs; generate requested AI-assisted features; organize or summarize submitted content; and assist with credential-document extraction or administrative review.
• Communicate operational, security, account, and service information; respond to support requests, complaints, and disputes; prevent fraud, abuse, and unauthorized access; and maintain audit, accounting, compliance, and security records.
• Meet legal, contractual, professional, safety, tax, accounting, safeguarding, and institutional obligations.

VieroMind may review therapist credentials and supporting records as part of onboarding and platform access. AI may assist with document extraction, organization, or summaries, but final platform approval remains a human administrative decision.

A therapist may be described as Platform Approved, Credential Reviewed, or similar only after completing VieroMind's applicable process. This does not constitute government registration, professional certification, clinical endorsement, a guarantee of competence, suitability for every client, future conduct, availability, or treatment outcome.

• Participating professionals remain responsible for required qualifications, registrations or licences, scope of practice, consent, required records, diagnosis, assessment interpretation, treatment, professional judgment, and compliance with applicable law, ethical rules, institutional policies, and professional standards.

VieroMind uses different AI providers for different features. Depending on the feature, user-submitted text or other permitted information may be transmitted to the applicable provider to generate the requested function. Current AI providers and their purposes are identified in the Service Provider and Subprocessor Notice.

• AI may assist with guided reflection, informational support conversations, summarization, content organization, navigation, credential-document extraction, administrative support, selected explanations or summaries, and safety-support routing.
• AI does not independently diagnose, prescribe treatment, independently interpret clinical assessments, replace qualified professionals, calculate Compass scores, make final therapist-approval decisions, make final clinical, safeguarding, institutional, or employment decisions, or provide monitored emergency response.
• AI-provider retention, model-improvement use, contractual safeguards, and opt-out availability may vary by provider, account configuration, and feature. Where material, VieroMind will disclose feature-specific processing through this Policy, a consent screen, or another product-specific notice.

VieroMind may share information only as reasonably necessary with participating therapists or qualified professionals involved in a requested service; authorized booking or communication parties; parents, guardians, institutions, or administrators where authorized; institutional customers; contracted service providers; professional advisers; authorities or emergency services where required or permitted; and another entity in an approved corporate transaction subject to appropriate safeguards.

VieroMind does not sell or rent personal information. A current list of material providers and subprocessors is maintained separately.

VieroMind may use cookies, device identifiers, local storage, and similar technologies for authentication, security, preferences, performance, fraud prevention, and service operation. Google Analytics 4 or similar analytics may be used where consent or applicable settings permit. Security and operational tools may collect limited technical information needed for error monitoring, rate limiting, abuse prevention, bot detection, and platform security.

Aggregated means presented for a group rather than an identified individual. Anonymized means processed so that a person is not reasonably identifiable from the output, subject to the limitations of available data and context.

Ravius may suppress, combine, delay, or withhold reporting where a cohort, filter, time period, or data combination could reasonably permit individual identification or inference.

• Employers and managers are not intended to receive private journals, therapy records, therapist communications, raw confidential survey responses, private AI conversations, unrelated appointment information, or unrelated personal platform activity.
• Approved Ravius synchronization may include identity information and derived Compass result data necessary for the configured feature.
• Ravius outputs must not be the sole or decisive basis for hiring, promotion, compensation, discipline, termination, individual performance assessment, or another automated employment decision.
• Institutional clients may be required to enter into a Data Processing Agreement and acceptable-use terms.

Stripe is the current active payment provider. For therapist bookings, the therapist's stored session rate determines the displayed amount, and the client sees and pays that amount unless another charge is clearly disclosed before payment. The client is not charged an undisclosed separate VieroMind platform fee. VieroMind's commission is handled through the applicable therapist agreement or payout process.

VieroMind stores transaction references, status information, and related records but does not intend to store complete payment-card numbers or security codes. Gateway charges, taxes, cancellation terms, missed-session treatment, refunds, disputes, settlement deductions, payout timing, and therapist payment terms are governed by the applicable commercial policies and agreements.

VieroMind and its providers may process or store information in Pakistan and other countries where the relevant provider operates. Exact provider regions may depend on production account configuration and should not be inferred solely from a provider's general infrastructure. Where cross-border processing occurs, VieroMind uses reasonable contractual, organizational, and technical safeguards appropriate to the Service and applicable requirements.

VieroMind retains information only for as long as reasonably necessary to provide Services, maintain accounts, administer professional review, bookings, payments, learning records, assessments, and institutional services, meet legal, tax, accounting, professional, contractual, safeguarding, audit, or dispute-resolution requirements, prevent fraud or abuse, and maintain security and continuity.

Retention periods vary by information category, Service, contractual role, legal obligation, and account status. VieroMind is implementing a documented internal retention schedule governing account information, professional credentials, assessment-related records, payments, complaints, security logs, wellbeing-related information, institutional data, and backups. Information may remain temporarily within managed backup and recovery systems until overwritten, expired, or retired according to provider configuration and internal procedure.

VieroMind uses administrative, technical, and organizational safeguards designed to protect personal information. Depending on the Service and information category, safeguards may include:

Not every category of information is universally application-encrypted, and no system can guarantee absolute security. VieroMind does not guarantee a particular recovery-point objective, recovery-time objective, or successful restoration result unless separately documented and contractually agreed. If VieroMind becomes aware of a qualifying security incident, it will investigate, mitigate where reasonably possible, document the response, and provide notice where required by applicable law, contract, or the circumstances.

• HTTPS/TLS encryption in transit; encryption at rest or equivalent storage safeguards; and application-level encryption for selected sensitive fields.
• Authenticated and server-authorized APIs; role-based permissions; organization-scoped access; administrator multi-factor authentication; and separate mobile access and refresh-token controls.
• Rate limiting, abuse prevention, Content Security Policy, security headers, bot protection, privacy-scrubbed error monitoring, audit and security logging, restricted administrative access, backup and recovery capabilities, vendor/access review, and incident-response procedures.

Depending on applicable law and the relevant Service, users may request access, correction, deletion, an available copy or export, withdrawal of consent, account closure, restriction or objection to certain processing, and information about AI-assisted processing.

VieroMind may verify identity and authority before completing a request. Requests may be limited where information must be retained for legal, financial, professional, safeguarding, fraud-prevention, security, contractual, institutional, or dispute-resolution reasons, or where fulfilling the request would adversely affect another person's rights. Institutional-data requests may require coordination with the relevant institution where it determines the purpose and means of processing.

• Privacy requests may be submitted to privacy@vieromind.com.

Ordinary consumer, therapist, Compass, Academy, Ravius, community, and AI-assisted Services are intended for people aged 18 or older unless a specific approved program expressly states otherwise.

VieroMind does not knowingly authorize minors to use a sensitive-information Service without an approved legal and institutional basis, required parent or guardian consent, appropriate professional oversight, safeguarding measures, access controls, and reporting and escalation procedures. Any school, child-development, assessment, Aghosh, or minor-facing program requires a separate written consent, safeguarding, institutional-responsibility, privacy, access-control, and professional-oversight framework.

VieroMind may provide crisis-resource information and support navigation, but VieroMind, VieroCompass, Academy, Ravius, AI features, community features, journals, and general support tools are not continuously monitored emergency-response services.

Users must not rely on the Services to detect, monitor, dispatch, or respond to an urgent emergency. A person experiencing immediate danger, suicidal intent, risk of harm, a medical emergency, or danger to another person should contact local emergency services, a hospital, an appropriate crisis resource, or a qualified professional immediately. VieroMind cannot guarantee continuous monitoring of messages, journals, community posts, AI conversations, assessments, or other content.

Users must not misuse the Services through unauthorized access, unauthorized disclosure, identity misuse, fraud, cyber harassment, data interference, unlawful content distribution, or other prohibited conduct.

VieroMind's software, educational materials, Academy content, Compass framework, Ravius methodologies, prompts, databases, documentation, workflows, and original content are protected by applicable intellectual-property law. VieroMind, VieroCompass, VieroMind Academy, Ravius, and associated branding are proprietary trade identifiers owned or used under licence by VieroMind (Private) Limited.

This Policy and use of the Services are governed by the laws of Pakistan. Subject to applicable law, the competent courts of Lahore will have jurisdiction over disputes arising from the Services or this Policy.

VieroMind may update this Policy to reflect changes in Services, vendors, processing practices, security, contractual arrangements, or applicable requirements. The updated version will show a revised date and, where appropriate, additional notice.

VieroMind (Private) Limited Office 05, Level 2, Arfa Software Technology Park 346-B, Ferozepur Road, Lahore, Pakistan Privacy: privacy@vieromind.com