Privacy
Privacy notice
How AWALA processes personal data on this public website.
Last updated: 20 September 2026 · Website only
1. Controller
Florian Ripp, trading as Mental Fulfillment Oberhöchstadterstraße 28a 61440 Oberursel, Germany hello@mentalfulfillment.com
The controller determines the purposes and essential means of this website processing. You can send privacy enquiries directly to the address above.
2. Scope
This notice applies to the public AWALA website awala.ai, including its German and English pages and early-access and pilot forms. The website currently offers no AWALA sessions, product accounts or app access. It collects no voice recordings or session transcripts.
Privacy objectives for the future product remain development goals. Before public product access, the actual features, data flows and user rights will be described separately.
3. Data we process
Visits may involve an IP address, time, requested URL, browser and device information, referrer, status and security information. Direct email contact involves the sender, contact details and message content.
We process name, email address, age confirmation and consent information. When the clearly labelled submit action is used, the early-access registration is stored immediately and is valid without any additional email confirmation. Depending on the selected perspective—individual, coach, adviser or wellbeing professional, health insurer, insurance provider or workplace health management, interested investor or funding partner, or organisation, provider or another perspective—people may then answer up to five optional questions: the perspective, three tailored research questions and three independent ways to stay involved. These answers support product research and do not replace a specific pilot, collaboration or investment enquiry. Only individuals receive a hypothetical pre-MVP willingness-to-pay question. Only after a positive tendency can subscription and usage-based billing be selected separately or together, each with a separate price band for 60 conversation minutes in total. Earlier questionnaire versions could additionally collect an optional ticket range from people actively interested in assessing an investment; the current form no longer asks for it, and it was never treated as customer or willingness-to-pay data. We also store the technical questionnaire version, the sample source “early_access_web” and the research phase “pre_mvp_hypothetical”. Each question can be skipped individually, and the questionnaire can be finished at any time. Free-text fields are limited to 120 or 160 characters and must not contain health data, diagnoses, crisis details or confidential information. Consent covers only contact about AWALA early access and selected testing or interviews; a general newsletter or other marketing emails require separate consent and, where appropriate, separate confirmation.
We process professional contact details, organisation, role and brief information about the audience, setting, success criteria, possible data use and points to clarify. Selecting a data-use option is neither consent nor a commitment.
4. Where the data comes from
You provide information directly through forms or email. Connection data and language preferences are supplied by your browser or the hosting and security infrastructure when you visit.
5. Purposes and legal bases
Technical delivery, connection security and abuse prevention serve our legitimate interest in a secure, functioning website (Article 6(1)(f) GDPR). Your selected language is saved on request; device storage is subject to the necessity exception explained in the Cookie Policy.
Early-access registration, optional research answers and selected contact about tests or interviews rely on your consent (Article 6(1)(a) GDPR). Pilot and other contact enquiries rely on Article 6(1)(b) where they concern pre-contractual steps at your request, otherwise on Article 6(1)(f) and our interest in handling relevant enquiries.
6. Cookies and similar technologies
When you deliberately select EN or DE, AWALA stores the necessary first-party cookie “awala_language” for no more than twelve months. It contains only “en” or “de”, gives your explicit choice priority over the browser preference, and is not used for analytics, advertising or profiling. Without a stored choice, only the browser’s highest-priority language is evaluated when the main address is opened; directly opened language-specific subpages are not automatically overridden. If the browser blocks storage, the switch still opens the selected language for the current visit; a later return to the main address may use the browser preference again.
The Cookie Policy lists the language and security cookies, their providers, purposes and lifetimes. The website code does not set advertising or analytics cookies or use local browser storage for visitor profiles.
7. Your choices
You can read the website without submitting a form. Required fields are marked; without the necessary contact details, we may be unable to handle an enquiry. Optional information can be omitted. You can manage cookies in your browser.
You can withdraw consent through hello@mentalfulfillment.com. Processing a specific enquiry and separate consent for general updates are distinct purposes.
8. Recipients and service providers
OpenAI Sites provides the website and associated database; the infrastructure uses Cloudflare for delivery and protection. Resend delivers internal form notifications and pilot-enquiry acknowledgements. Early-access registration itself needs no additional email confirmation. Data therefore also exists in the relevant email services and mailboxes, not just the website database.
Service providers may process the data needed to provide their services. The responsible team handles enquiries. The website code does not send form content to advertising or analytics services.
9. International processing
Processing is not guaranteed to be limited to Germany or the European Economic Area (EEA). OpenAI Sites does not provide fixed data residency for this website. Hosting, security and email delivery may involve processing in the United States in particular.
Transfers to third countries are subject to Articles 44 et seq. of the General Data Protection Regulation (GDPR), such as an applicable adequacy decision or appropriate safeguards. The specific contractual arrangements, subprocessors and supplementary measures for all platform services are still being reconciled with provider documentation. Contact hello@mentalfulfillment.com for information about the recipients and safeguards relevant to your data.
10. Data use and automated decisions
The website code does not send form content to AI models for training or automated assessment. It does not make solely automated decisions with legal or similarly significant effects within Article 22 GDPR. Enquiries are reviewed by people.
Technical abuse-prevention filters are separate from those decisions. This does not make a blanket assurance about every infrastructure provider’s own processing purposes.
11. Data security
The website is delivered over an encrypted HTTPS connection. Forms validate permitted inputs and limit repeated submissions on the server. Internal notifications are intended for the responsible people handling them. These measures do not eliminate every risk; please submit only information needed for your enquiry.
12. Retention and deletion
Early-access entries, including optional answers, are intended to be retained for no more than 48 months from registration or until consent is withdrawn. Pilot enquiries have a twelve-month retention period. Previously recorded technical form events without answer content have a 90-day period; new usage events are no longer recorded after this update.
Abuse prevention derives a pseudonymous check value from the IP address and day. Its rate-limit window and technical expiry are one hour. The database removes expired entries during a subsequent form-processing request. Without such a request, expired records may remain longer; deletion at an exact minute is not guaranteed.
Withdrawal or erasure requests are handled through hello@mentalfulfillment.com. Necessary legal retention or specific legal claims are assessed separately. Deletion of email copies, provider logs and backups has not yet been fully reconciled; the database periods do not guarantee identical deletion times for every service provider.
13. Your data-protection rights
Subject to the legal conditions, you may request access to your data and a copy, correction of inaccurate data, erasure or restriction of processing. A right to data portability may apply to automated processing based on consent or a contract.
You may object to processing based on legitimate interests on grounds relating to your particular situation. You may object to direct marketing at any time. You may withdraw consent at any time for the future; this does not affect the lawfulness of processing before withdrawal.
Send your request to hello@mentalfulfillment.com. We will inform you of the action taken without undue delay and within one month of receiving it. For complex or numerous requests, this may be extended by up to two further months; we will explain the extension and its reasons within the first month. If we do not act, we will explain the reasons and your complaint and judicial-remedy options within one month.
If there are reasonable doubts about your identity, we may request the additional information necessary to confirm it. An identity-document copy is not a general requirement. Legal retention obligations or the establishment, exercise or defence of legal claims may prevent immediate complete erasure.
14. Children and young people
AWALA is intended for adults aged 18 or over. Early-access registration requires confirmation. This is the service’s eligibility rule, not a statement about a general statutory consent age. The website form does not require a separate identity-document check. Please report an ineligible registration by a minor to hello@mentalfulfillment.com.
15. Particularly sensitive information
The public forms are not intended for health data, diagnoses, crisis details, medication, therapy histories or other particularly sensitive information. Please do not enter these details in free-text fields either. A warning cannot technically prevent such information from being received. If you accidentally submitted sensitive information, contact us to clarify its handling and, where appropriate, correct or delete it.
16. Updates and marketing
Early-access consent covers information about AWALA early access and selected tests or interviews. It is not a general newsletter subscription. Other marketing emails require separate consent. The optional contact choices in the research questionnaire remain independently selectable.
17. Complaints
You may complain to a data-protection supervisory authority, particularly where you live or work or where the alleged infringement occurred. For our location in Hesse: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Postfach 3163, 65021 Wiesbaden, Germany; telephone +49 611 1408-0; email poststelle@datenschutz.hessen.de.
18. Changes to this notice
Last updated: 20 September 2026. We update this notice when the website, its processing or applicable requirements change. This update concerns this website only; a future app or product access will have separate information.
19. Contact
Florian Ripp, trading as Mental Fulfillment Oberhöchstadterstraße 28a 61440 Oberursel, Germany hello@mentalfulfillment.com