Your answers stay yours.

Stillmind asks about feelings, stress and worry, so we treat everything you share as sensitive. This page explains, in plain language, what we keep, why, and how you stay in control.

Last updated: 29 October 2026

Draft: to be reviewed with the project supervisor before launch

Who we are

Stillmind is a final year student project at Management and Science University (MSU), Malaysia. It is a screening tool that estimates a depression symptom level from your answers. It is not a diagnosis and does not replace a health professional.

The project team is responsible for the personal data described here. You can reach us at stillmind.hello@gmail.com.

What we collect

Data	What it includes	When
Account	Your email address, the name you give us, and your password. Passwords are stored by our sign-in provider in a protected (hashed) form; we never see them.	When you sign up
Choices	That you confirmed you are 18 or older and understand Stillmind gives an estimate, your country, your language, and your saving preferences.	During setup and in Settings
Check-ins	Your 27 answers, the estimated level, the date, and whether support contacts were shown. The final safety question is only used to decide whether to show support; its answer is stored only as “support was shown”.	Only if “Save check-ins” is on. If it is off, your latest check-in stays on this device only.
Assistant chats	Your messages and the assistant’s replies. Messages about crisis, medication or diagnosis are never saved word for word; a short note is saved instead.	Only if “Save assistant chats” is on
Reminder	The date and time you chose, whether it repeats, the language of the email, the time of your latest check-in, and when an email was last sent.	Only if you set a reminder
On this device	Your theme, language and text size, the “Sign out when inactive” choice, today’s mood, an unfinished check-in, “My plan” steps, and a copy of your data so pages load quickly.	Kept in your browser, not on our servers

We do not use advertising or tracking cookies, and we do not collect usage analytics. One small cookie remembers the language you chose.

How we use it

To estimate your symptom level, explain which answers moved it most, and show your result, history and trend. Your answers are sent to our server for this and are not kept there.
To send the reminder emails you ask for, and sign-in codes when you sign up or reset your password.
To let the assistant reply to you, and to keep your chats if you choose to save them.
To keep Stillmind secure, for example by checking that only you can reach your data.

We do not sell your data, use it for advertising, or share it with your university, employer or family. Nothing is sent to a clinician unless you copy or download your summary and send it yourself.

The assistant

The assistant’s replies are written by an AI model run by Groq, an AI service company. To create a reply, Stillmind sends Groq your message and the last few messages of the conversation. Your name, email and account are never sent. Messages about crisis, medication or diagnosis are handled by Stillmind itself and are never sent to Groq. If the AI is unavailable, the assistant uses prepared replies instead.

According to Groq’s policy, it does not keep the messages it receives or use them to train AI models. It may log them for up to 30 days only to fix errors or investigate abuse.

If “Share my latest level” is on, Groq also receives your latest estimated level, its date and the area that stood out most. You can turn this off on the Assistant page.

Please don’t share names, phone numbers or addresses of yourself or others in the chat.

Where it is stored

Your account, check-ins, saved chats and reminder are stored with our database provider, Supabase, on servers in Mumbai, India. This means your data may be stored outside the country you live in. The connection between your device and our servers is encrypted.

The website runs on Vercel and the Stillmind server runs on Render. Assistant messages are processed by Groq. These providers may use servers outside Malaysia, for example in the United States.

How long we keep it

Check-ins and your profile: until you delete them or your account.
Saved chats: 90 days, then deleted automatically. You can delete them sooner in Settings.
Reminder: removed once a one-time reminder is sent, or when you turn reminders off.
Your account: until you delete it in Settings. Deleting your account removes your check-ins, chats, reminder, profile and sign-in.

Your choices and rights

See and copy your data: use “Export my data” in Settings.
Change what is saved: turn “Save check-ins” or “Save assistant chats” on or off in Settings.
Delete: delete saved chats, or your whole account, in Settings at any time.
Stop emails: use “Turn off reminders” in any reminder email, or in Settings.

For anything else, such as correcting your data or asking a question about how it is handled, email stillmind.hello@gmail.com. We aim to follow Malaysia’s Personal Data Protection Act 2010 (PDPA).

Security

Database rules make sure each person can only read their own data, and our server only accepts requests from signed-in users. No system is perfectly secure, so please use a strong password and sign out on shared devices.

If you download your result as a PDF, it contains your answers and level. Keep it somewhere safe and share it only with people you trust.

Safety and emergencies

Stillmind is not monitored by people in real time, and we do not contact emergency services or anyone else on your behalf. If you are in danger or might harm yourself, please contact your local emergency number or a crisis line now. Get help now

Age

Stillmind is for people aged 18 and over. If you believe someone younger has created an account, please contact us and we will delete it.

Changes and contact

If we change this policy, we will update the date at the top and, for important changes, tell you in the app. Questions or requests: stillmind.hello@gmail.com.

See also our Terms of Use and About Stillmind.