Privacy Policy

This Privacy Policy explains how Freudin collects, uses, stores, and shares personal data when you access or use the Freudin website, applications, features, and related services available through www.freud.in (collectively, the “Service”).

The data controller responsible for your personal data is:

In this Privacy Policy, “Freudin,” “we,” “us,” and “our” refer to the controller identified above.

1. Personal data we collect

1.1. Information received through Google Sign-In

When you register or sign in using your Google account, Freudin requests the following Google OAuth scopes:

• openid;
• https://www.googleapis.com/auth/userinfo.email;
• https://www.googleapis.com/auth/userinfo.profile.

These scopes may allow us to receive and store:

• your unique Google account identifier;
• your primary Google account email address;
• information indicating whether your email address has been verified;
• your full name;
• your given name and family name, where available;
• your Google profile picture;
• your language or locale, where provided;
• other basic profile information made available by Google through the authorized profile scope.

We use this information to identify you, create and manage your Freudin account, display your account profile, and allow you to sign in securely.

We do not receive or store your Google password. We do not request access to your Gmail messages, Google Drive files, contacts, calendar, payment details, or other Google services.

1.2. Information received through Facebook Login

When you register or sign in using your Facebook account, Freudin requests the following Facebook permissions:

• public_profile;
• email.

These permissions may allow us to receive and store:

• your Facebook user identifier, which is specific to Freudin;
• your email address, if your Facebook account has one and you allow us to receive it;
• your first name, last name, and full name;
• your Facebook profile picture.

We use this information to identify you, create and manage your Freudin account, display your account profile, and allow you to sign in securely. If you choose to use your Facebook profile picture as your Freudin profile photo, we copy it to our storage, and it becomes part of your public profile.

We do not receive or store your Facebook password. We do not request access to your posts, photos, friends list, messages, or pages, and we never post to Facebook on your behalf. We do not use information received through Facebook Login for advertising and do not sell it.

If your Facebook account does not share an email address, you can still sign in. You may optionally add a contact email address when you create your page or later in Settings.

1.3. Information received through Telegram Login

When you register or sign in using your Telegram account, Freudin requests the following Telegram scopes:

• openid;
• profile.

These scopes may allow us to receive and store:

• your Telegram account identifier;
• your name as shown in Telegram;
• your Telegram username, if you have one;
• your Telegram profile picture.

We use this information to identify you, create and manage your Freudin account, display your account profile, suggest your page address, and allow you to sign in securely. If you choose to use your Telegram profile picture as your Freudin profile photo, we copy it to our storage, and it becomes part of your public profile.

We do not receive your phone number, Telegram login codes, chats, contacts, or messages. Telegram shows our bot on the sign-in screen: it is used only for sign-in and does not send you messages. We do not use information received through Telegram Login for advertising and do not sell it.

Telegram does not share an email address with us. You may optionally add a contact email address when you create your page or later in Settings.

1.4. Account information

We may store information associated with your Freudin account, including:

• your internal Freudin account identifier;
• the identifiers of the Google, Facebook, or Telegram accounts you use to sign in;
• your name and, where available, your email address and Telegram username;
• a contact email address, if you add one because your sign-in account has no email;
• your profile picture;
• your account settings and preferences;
• the date your account was created;
• sign-in and account activity;
• information you submit through the Service.

A contact email address is optional. We use it only to contact you about your account and to respond to your requests. It is not verified, is not used to sign in, and is not shown on your public profile. You can change or remove it in Settings.

You can connect more than one sign-in method to your Freudin account and disconnect them in Settings, as long as at least one remains connected. Each connected method shares the information described for it in Sections 1.1–1.3. After you disconnect a method, you can no longer sign in with it, but name and photo details already received from it may remain in your account data until you delete your account.

1.5. Public profile

Freudin lets you create a public personal page. Your public profile consists of:

• your display name;
• your page address (username);
• your bio;
• your profile photo, which you upload or choose to copy from your Google, Facebook, or Telegram account;
• links to your social media profiles and websites, with the titles you give them;
• details about your practice, if you add them: your professional role, whether you are accepting new clients, your country and the city where you see clients in person, the area or landmark of your in-person sessions, whether you work online or in person, who you work with, your therapy approaches, the languages you work in, your price per session and whether it is fixed or a starting price, and the date you started practicing, which your page shows as years of experience;
• your education: degrees or qualifications, institutions, and graduation years;
• contact details you add for clients: an email address, a phone number, a WhatsApp number, or a Telegram username, and the way you prefer to be contacted;
• questions and answers you write for your page (FAQ) and service cards: who a service is for, its name, description, duration, and price;
• how your page is arranged: the order of its blocks, the blocks, links, and service cards you choose to highlight, and your cover style;
• documents you upload, such as diplomas, certificates, or licenses, together with their captions.

Your public profile is available to anyone at www.freud.in/<username> without signing in. It may be indexed by search engines, shared by other people, and copied or cached by third parties. Do not add information to your profile that you do not want to make public.

You can hide your page in Settings: then it is visible only to you or only to people who enter the password you set. Other visitors see a message that the page is hidden, not your name, photo, or other profile details, and search engines are asked not to index the page. We store the page password as you enter it, so that you can see it in Settings. It is visible only to you and is deleted together with your account. Do not reuse a password from your other accounts. A page password is a simple lock, not strong protection: a short password can be guessed, so do not rely on it to protect sensitive information. Images on your page are stored at direct web addresses, and anyone who saved such an address while your page was visible may still be able to open the image.

Documents are published as soon as you upload them. Before uploading, cover ID numbers, dates of birth, signatures, and other details you do not want to make public. The Service reduces the image in your browser and removes embedded metadata, such as the location where a photo was taken, before uploading it. We store the image and a smaller preview of it. When you delete a document in Settings, we delete both from our storage.

Contact details you add to your profile are public, and anyone who views your page can use them to contact you directly. Freudin does not take part in these communications. Add only contact details you are willing to share publicly.

The list of cities is based on data from GeoNames. Choosing a city does not send any information to GeoNames.

The email address of your sign-in account, your contact email address, and your sign-in account identifiers are not shown on your public profile. An email address appears there only if you add it to your contact details. You can change or remove your public profile information at any time in Settings. If you change your page address, your previous address stops working.

1.6. Details used for search

If you add them in Settings, we store your date of birth, your gender, and the client concerns you work with, such as stress, burnout, or relationship difficulties. These details are optional and are not shown on your public profile. We will use them to help clients find a suitable psychologist, for example through search. Until such features are available, we only store them. You can add a date of birth only if you are at least 18 years old. You can change or remove these details at any time in Settings.

1.7. Technical and usage information

When you use the Service, we may automatically receive technical and usage information, including:

• IP address;
• browser type and version;
• device type and operating system;
• language and time-zone settings;
• approximate location based on your IP address;
• pages and features you access;
• actions performed within the Service;
• access dates and times;
• referral URLs and campaign parameters;
• authentication events;
• error reports, security logs, and diagnostic information.

1.8. Communications

If you contact us, we may collect:

• your name and email address;
• the contents of your message;
• any files or information you choose to provide;
• information necessary to respond to and manage your request.

2. Cookies and similar technologies

We use only cookies and similar technologies that are strictly necessary for the Service to work or that store settings you choose. We do not use analytics or advertising cookies.

Strictly necessary technologies

These technologies are required to:

• authenticate users;
• maintain sessions;
• remember security-related settings;
• prevent fraud and abuse;
• ensure that the Service functions correctly.

We currently use:

• sb-…-auth-token cookies, set by our authentication provider Supabase, to keep you signed in. They are not accessible to scripts on the page, are kept for up to 400 days, and are deleted when you sign out;
• the freudin-google-sign-in and freudin-telegram-sign-in cookies, used while you sign in with Google or Telegram to protect the sign-in process. They expire after 10 minutes and are deleted when you return to the Service;
• sb-…-code-verifier cookies, set by Supabase while you sign in with Facebook to protect the sign-in process;
• freudin-page-access-<username> cookies, set when you enter the correct password for a password-protected page, so that you do not have to enter it again. They contain a random access code, not the password, are not accessible to scripts on the page, and are kept for 30 days. They stop working earlier if the page owner changes the password or who can see the page;
• theme in your browser’s local storage, which remembers whether you chose the light, dark, or system theme;
• freudin:onboarding-draft in your browser’s session storage, which keeps the details you enter while creating your page and is deleted when you close the browser tab;
• freudin:settings-collapsed-blocks in your browser’s local storage, which remembers which sections of Settings you collapsed. It stores your account ID and the names of those sections, not the details you enter;
• freudin:page-checklist in your browser’s local storage, which remembers that you hid the “Finish your page” tips on your page. It stores your page’s username.

Items in local storage stay in your browser until you clear your browser’s site data. They are not sent to us.

Strictly necessary technologies cannot generally be disabled because the Service may not function without them. Because we use only these technologies, we do not show a cookie consent banner. If we introduce analytics or advertising technologies, we will update this Privacy Policy and ask for your consent where required by law.

You may also block or delete cookies through your browser settings. Blocking strictly necessary cookies may prevent some parts of the Service from working correctly.

3. How we use personal data

We may use personal data to:

• create and manage your account;
• authenticate you through Google Sign-In, Facebook Login, or Telegram Login;
• display your account profile;
• publish your public profile page;
• help clients find psychologists that match their needs;
• provide and operate the Service;
• remember your preferences;
• respond to support requests and communications;
• improve the Service’s content, design, features, and performance;
• maintain the security and integrity of the Service;
• detect and prevent fraud, abuse, unauthorized access, and technical problems;
• diagnose errors and monitor performance;
• enforce our Terms of Service;
• comply with applicable legal obligations;
• establish, exercise, or defend legal claims.

We do not sell or rent personal data.

We do not use data received through Google Sign-In, Facebook Login, or Telegram Login to make credit, employment, insurance, housing, or other similarly significant decisions.

4. Legal bases for processing

Depending on the circumstances and applicable law, we process personal data on one or more of the following legal bases.

Performance of a contract

We process account and authentication information when necessary to create your account, authenticate you, and provide the Service you request.

Legitimate interests

We may process data when necessary for our legitimate interests, including:

• operating and improving the Service;
• securing accounts and infrastructure;
• preventing fraud and abuse;
• troubleshooting technical problems;
• communicating with users;
• understanding aggregated Service usage;
• protecting our legal rights.

We rely on legitimate interests only where those interests are not overridden by your rights and freedoms.

Consent

Where required by law, we ask for your consent before using personal data for purposes that go beyond providing the Service, such as optional communications. We currently do not use analytics, advertising, or other non-essential tracking technologies.

You may withdraw your consent at any time by contacting us. Withdrawal does not affect processing performed before your consent was withdrawn.

Legal obligations

We may process data when necessary to comply with applicable law, a court order, or a lawful request from a competent authority.

5. How Google user data is used

Information received through the openid, userinfo.email, and userinfo.profile scopes is used only to:

• identify your Google account;
• create and manage your Freudin account;
• authenticate you when you sign in;
• display basic profile information within the Service;
• communicate with you about your account or support requests;
• maintain account and Service security.

If you choose to use your Google profile picture as your Freudin profile photo, we copy it to our storage, and it becomes part of your public profile.

We do not use information received through Google Sign-In for advertising audience creation or advertising personalization. We do not sell Google user data and do not transfer it to third parties, except to the service providers described in Section 6 that host and operate the Service, or where required by law.

Our use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements where applicable.

6. How we share personal data

We may share personal data in the following circumstances.

Public profile

Information in your public profile is available to anyone, as described in Section 1.5.

Google

We use Google Sign-In for authentication. Google receives authentication information when you sign in and processes it under its own privacy policy and applicable service terms.

Meta (Facebook)

We use Facebook Login, provided by Meta Platforms, for authentication. Meta receives authentication information when you sign in with Facebook and processes it under its own privacy policy and terms.

Telegram

We use Telegram Login for authentication. Telegram receives authentication information when you sign in with Telegram and processes it under its own privacy policy and terms.

Service providers

We use the following providers to operate the Service:

• Supabase — authentication, database, and storage of profile photos and documents. Your account and profile data are stored in the European Union (Frankfurt, Germany);
• Vercel — website hosting and server infrastructure. Server functions run in the European Union (Frankfurt, Germany); pages and files may be delivered through Vercel’s global network;
• Gmail (Google) — our support email. Messages you send to freudin.support@gmail.com are stored by Google and may be processed outside the European Union, including in the United States.

We may also use additional providers for email delivery, security and monitoring, error diagnostics, and technical support. These providers may process personal data only as necessary to provide services to us and subject to appropriate contractual and security obligations.

Legal and safety requirements

We may disclose information if we reasonably believe that disclosure is necessary to:

• comply with applicable law or a valid legal request;
• protect the rights, safety, and property of Freudin, our users, or another person;
• investigate fraud, abuse, security incidents, or violations of our Terms;
• establish, exercise, or defend legal claims.

Business changes

If the Service or its relevant assets are transferred, reorganized, or acquired, personal data may be disclosed to the parties involved, subject to appropriate confidentiality safeguards.

7. International data transfers

Freudin is operated from Georgia. Google, Meta, Telegram, and our service providers may process or store information in Georgia, the United States, countries of the European Economic Area, or other countries where they or their service providers operate.

These countries may have data protection rules that differ from those in your country.

Where required by applicable law, we and our service providers use appropriate legal, contractual, and organizational safeguards for international transfers, which may include adequacy decisions, standard contractual clauses, or other legally recognized mechanisms.

8. Data retention

We retain account information for as long as your account remains active or as reasonably necessary to provide the Service.

If you delete your account or request deletion, we will delete or anonymize personal data that is no longer required, without undue delay.

Some information may remain temporarily in encrypted or restricted backups until those backups are replaced through their normal cycle.

We may retain limited information for longer where required by law, necessary for security or fraud prevention, or needed to establish, exercise, or defend legal claims.

To protect page passwords and page addresses from automated guessing, we count recent attempts from each IP address. We store only a keyed hash of the IP address, not the address itself, and delete these counters within about a day.

9. Account and data deletion

You can delete your Freudin account at any time in Settings → Delete account. If you have not created your page yet, you can delete your account on the page creation screen. Deletion takes effect immediately: your account, all connected sign-in methods, public profile, profile photos, documents, and details used for search are deleted, and your public page stops being available.

You may also request deletion of your Freudin account and associated personal data by emailing freudin.support@gmail.com.

Please send the request from the email address associated with your account: the email of your sign-in account or the contact email address you added. We may ask for additional information if reasonably necessary to verify your identity and protect your account. If your account has no email address, for example because you sign in with Telegram and did not add a contact email, include your page address and Telegram username in the request.

After verifying the request, we will delete or anonymize the relevant personal data unless retention is required or permitted by law.

Copies of your public page that search engines or other third parties have already stored may remain available until they update their records.

Deleting your Freudin account does not automatically:

• delete your Google, Facebook, or Telegram account;
• delete information independently controlled by Google, Meta, or Telegram;
• remove data that Google, Meta, or Telegram must retain under their own legal obligations.

You may separately manage or delete information associated with Google, Facebook, or Telegram through their privacy controls. To disconnect Freudin from your Facebook account, remove it under Apps and websites in your Facebook settings. Telegram Login does not create an ongoing connection: we receive your Telegram information only when you sign in, so Freudin does not appear among connected websites in Telegram. To stop sharing it, stop signing in with Telegram or delete your Freudin account.

10. Data security

We use reasonable technical and organizational measures designed to protect personal data against:

• unauthorized access;
• accidental loss;
• unlawful use or disclosure;
• alteration or destruction;
• other unauthorized forms of processing.

However, no online service or storage system can guarantee absolute security. You are responsible for maintaining the security of the Google, Facebook, or Telegram account and devices you use to access Freudin.

If you believe your account or personal data has been compromised, contact us promptly at freudin.support@gmail.com.

11. Your rights

Depending on the law applicable to you, you may have the right to:

• obtain information about how your data is processed;
• request access to your personal data;
• request correction of inaccurate or incomplete data;
• request deletion of your personal data;
• request restriction of processing;
• object to certain processing, including direct marketing;
• withdraw consent at any time;
• receive certain data in a portable format;
• lodge a complaint with a competent data protection authority;
• request information about recipients or categories of recipients of your data.

These rights may be subject to legal conditions and exceptions.

To exercise your rights, contact freudin.support@gmail.com. We may need to verify your identity before responding. We will respond within the period required by applicable law.

If you are located in the European Economic Area, you may also lodge a complaint with the data protection authority in the country where you live, work, or believe a violation occurred.

If you are located in Georgia, you may exercise the rights available under Georgian personal data protection law and contact the competent Georgian data protection authority.

12. Children’s privacy

The Service is not intended for children under the age of 16, and we do not knowingly collect personal data from children under 16.

If you believe that a child has provided personal data to us in violation of this Privacy Policy, contact freudin.support@gmail.com. We will review the request and take appropriate action, including deleting the information where required.

13. Automated decision-making

We do not use personal data obtained through Google Sign-In, Facebook Login, or Telegram Login to make decisions that produce legal or similarly significant effects through solely automated processing.

14. Third-party websites and services

The Service may contain links to third-party websites or services, including links that users add to their public profiles. Their processing of personal data is governed by their own privacy policies.

We do not control and are not responsible for the privacy, security, or content of third-party services.

15. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes to the Service, our data practices, legal requirements, or security measures.

The updated version will be published on this page with a revised “Last updated” date. If a change materially affects how we use personal data, we will provide reasonable notice through the Service, by email, or by another appropriate method.

Where required by law, we will obtain your consent before using personal data for a materially different purpose.

16. Applicable law

This Privacy Policy is governed primarily by the laws of Georgia.

Where mandatory data protection laws in another jurisdiction apply to particular processing activities or users, we will process personal data in accordance with those requirements.

17. Contact us

If you have questions, requests, or complaints concerning this Privacy Policy or the processing of your personal data, contact: