Privacy

What the website processes today—and what the future product may require.

This notice clearly separates the current public information website from the AWALA product, which is not yet publicly accessible.

In development · Preparing for controlled pilots and future early access.

The public website today

The website provides information about AWALA and includes forms for early access and potential pilot partnerships. It still has no AWALA product access or user accounts.

The AWALA website code does not add analytics, tracking or marketing tools.
The forms collect only brief contact, choice and consent information. They do not ask about diagnoses, crises, medication or therapy histories.
When the site is loaded, hosting and security services may process technically necessary connection data.
This website currently collects no voice recordings, session transcripts or AWALA product interactions.

Technical delivery

This may include IP address, time, requested URL, browser or device information, referrer, status and security information. Processing supports delivery, stability and protection against misuse.

Early-access form

We process name, email address and the selected type of contact. People interested in future testing or an interview may also provide limited choices about current everyday challenges, approaches they already use and problems with those approaches. Free text is available only for “Something else” and is limited to 160 characters. Updates are sent only after the email address has been confirmed through double opt-in.

Pilot form

We process professional contact details, organisation, role and brief information about the audience, setting, success criteria, possible data use and points to clarify. Selecting a data-use option is neither consent nor a commitment.

Still in development

Privacy objectives for the future product

These points describe a target architecture, not final technical or legal guarantees.

minimise personal data
avoid collection that is not necessary for the intended interaction
no persistent storage of raw audio
no persistent storage of complete conversation transcripts
provide clear information and meaningful user control

Before product access

Before AWALA becomes publicly accessible, the product will receive its own specific privacy notice. It must describe the actual data categories, purposes, legal bases, providers, retention periods, safeguards and user controls.

Controller

Mental Fulfillment

“Controller” means the operator determines why and, in essential respects, how the processing described here takes place; it does not mean controlling a person or every technical system.

Owner: Florian Ripp
Oberhöchstadterstraße 28a
61440 Oberursel, Germany
hello@mentalfulfillment.com

Your rights

Depending on the applicable law, you may have rights of access, correction, deletion, restriction, objection and data portability, as well as the right to complain to a competent data protection authority.

Purposes and legal bases

Technical delivery and abuse prevention rely on the legitimate interest in a secure, functioning web presence under Article 6(1)(f) of the General Data Protection Regulation (GDPR). Early-access emails rely on your consent under Article 6(1)(a) GDPR. Pilot enquiries are processed to handle your request and, depending on the context, to take pre-contractual steps under Article 6(1)(b) or on the basis of legitimate interests under Article 6(1)(f) GDPR.

Recipients and email delivery

The website and form data are delivered or processed through OpenAI Sites and its associated protected database. Confirmation and notification emails are sent through Resend. Access to internal notifications is restricted to the responsible AWALA team. Form content is not sent to analytics or advertising trackers.

Retention periods

Unconfirmed early-access entries are deleted after seven days. Confirmed early-access entries are retained for no more than 24 months or until consent is withdrawn. Pilot enquiries are retained for no more than twelve months. Technical form events without answer content are deleted after 90 days; short-lived abuse-prevention data after no more than 24 hours.

Withdrawal and deletion

You can withdraw consent at any time for the future by emailing hello@mentalfulfillment.com. You may also request access, correction or deletion of your form data there. Withdrawal does not affect the lawfulness of processing carried out before it.