Hello YouHello You
Last updated 2026-10-05

Privacy policy

This policy explains which personal data Hello You ("we") processes when you use the platform, why, how long we keep it and what rights you have. The platform processes data about your psychological state, a special category of data, which is why we ask for your explicit consent when you create an account and when you start the assessment.

1. What we process

We collect only what the development journey needs:

  • Account data: email address, display name, chosen language, password (stored only as a hash) and, if you sign in with Google or Apple, the technical identifier they provide.
  • Answers to the introductory questions: information about you, your circumstances and your preferences, which we use to personalise the exercises. Some of them may concern special categories of data; these are always optional and you can leave them unanswered.
  • Answers to the psychological questionnaires and the scores computed from them, per scale and per dimension.
  • Your answers to the scenario exercises, the scores obtained, time spent, and the feedback you give about exercises and the journey.
  • Information about how you complete the questionnaires and exercises, such as duration, used in aggregate to improve them.
  • Technical data: time of last activity and aggregated usage events for statistics.
  • Messages you send us through the contact form (name, email and message), used only to answer you and kept only as long as needed for that.

2. Why, and on what legal basis

Account data is needed to provide the service (performance of a contract). Answers to the introductory questions, questionnaires and exercises, and the scores derived from them, are processed to generate your profile and personalised journey and to improve the platform, on the basis of your explicit consent, including for special categories of data. Usage statistics are computed in our legitimate interest of improving the platform and do not identify individuals.

We do not use your data for advertising and we do not sell it.

The platform is meant for people aged 16 or over, the age from which you can give consent yourself under the law. We do not knowingly collect data from younger people; if we learn that an account belongs to one, we delete it together with its data.

3. What Hello You is not

Hello You is not a medical service and does not replace psychotherapy or clinical assessment. Results describe tendencies, not diagnoses. If you are in crisis, please seek professional support.

4. Who can access the data

Your data is accessible only to our team, to the extent needed to operate the platform, and to the following providers who process it on our behalf:

  • the hosting provider for the server and database;
  • Cloudflare, for delivering the web application and network protection;
  • the email provider, for password-reset messages and messages received through the contact form;
  • Google and Apple, only if you choose to sign in through them; they pass us your email address and an identifier.

5. How long we keep it

We keep your data for as long as you have an account. When you delete your account from Settings (the steps are at helloyou.help/delete-account), your profile, answers, scores, exercises and feedback are deleted immediately and permanently. Documents you download stay only on your device. Aggregated statistical events remain, with no link to you. Database backups are overwritten within 30 days.

6. Browser storage

The application keeps authentication tokens, your chosen theme (light/dark) and, temporarily, in-progress assessment answers in your browser's storage. We use no tracking or advertising cookies.

7. Your rights

Under Regulation (EU) 2016/679 (GDPR) you have the right:

  • to access and correct your data (name and language can be changed in Settings);
  • to withdraw consent and delete your account at any time from Settings;
  • to receive a copy of your data: you can download your profile as a PDF in the app, and for the rest write to us at contact@helloyou.help;
  • to object to or restrict processing;
  • to lodge a complaint with the Romanian supervisory authority (ANSPDCP), www.dataprotection.ro, or the authority of your country of residence.

8. Security

Data travels encrypted only (HTTPS), passwords are stored with modern hashing, server access is restricted, and sessions are revoked when a password is changed or an account deleted.

9. Contact and changes

For any question about your data, write to us at contact@helloyou.help. If we change this policy we publish the new version here and update the date above; for significant changes we notify you in the app.