Your data, your control.
FaceofMind is engineered with privacy-first technical safeguards. Discover our security architecture and verify how we protect your mental wellness journey.
Important disclaimer
FaceofMind is a mental wellness platform and is not a healthcare provider, EMR, or crisis service. We do not provide medical diagnosis, clinical treatment, or emergency crisis intervention. Always consult a licensed healthcare professional for medical advice. Our security controls are designed to support industry best practices.
Standards
Privacy & security alignment
FaceofMind is built to meet international privacy expectations. We claim alignment — never certification — until audits land.
Enterprise-grade security
Industry best practices for sensitive data
- Industry-standard encryption at rest
- TLS 1.3 in transit
- Role-based access controls
- Comprehensive audit logging
- Vendor security agreements
- Data minimization principles
Global privacy standards
GDPR & UK GDPR aligned controls
- Right to access personal data
- Right to data portability
- Right to erasure
- Consent management
- Data breach notification
- Privacy by design
Local privacy standards
Aligned with the Philippine DPA
- Data protection guidelines
- Data subject rights protection
- Data breach notification
- Consent-based processing
- Secure storage & transmission
- Privacy-by-design principles
Wellness platform standards
Digital wellness best practices
- Clinician collaboration tools
- Wellness documentation standards
- User confidentiality protection
- Crisis resource information
- Ethical use guidelines
- Professional boundary maintenance
Security measures
Multi-layered protection for sensitive wellness data
Each layer below is implemented in production and visible in the codebase.
Data encryption
Sensitive fields are encrypted in transit and at rest using industry-standard cryptographic controls.
Role-based access control
Granular permission management gated by service-level roles and audit hooks.
Key management
Encryption keys are managed using secure cloud key management services.
Defense-in-depth
Multiple independent security layers ensuring compromise of one layer does not breach the whole system.
Audit logging
Persistent, access-controlled audit logs protecting access history against modification.
Data minimization
Rolling data windows, privacy toggles, and consent-based collection by default.
Architecture
Defense-in-Depth Security Framework
Our multi-layered security strategy ensures that the compromise of a single component does not lead to a system breach.
Security Architecture
FaceofMind implements a defense-in-depth architecture consisting of encryption, network isolation, role-based access controls, audit logging, and continuous monitoring.
Incident Response & Breach Protocol
FaceofMind maintains documented incident response procedures to detect, contain, investigate, and remediate security events. Where required by law or contract, affected customers and regulators will be notified within applicable timeframes.
Looking for detailed security reviews?
Detailed technical documentation is available to eligible enterprise customers and security reviewers under NDA. Contents include architecture diagrams, security whitepapers, incident response overviews, vendor risk questionnaires, and compliance reports.
View B2B Technical Security Brief & Compliance RoadmapIf you are in crisis right now
FaceofMind is not a crisis service or emergency monitoring platform. If you are experiencing thoughts of suicide, self-harm, or are in physical danger, please contact emergency services immediately.
National Suicide Prevention Lifeline
988
Philippines Crisis Hotline (USAP)
0917-899-8727
Emergency services
911
Emergency services
911 / 112
Your rights
You own your mind. You should own your data.
You can exercise any of the rights below through our secure contact channels.
Right to access
Request a copy of your personal data at any time.
Right to deletion
Request deletion of your data, subject to legal requirements.
Right to correction
Request correction of inaccurate information.
Right to portability
Export your data in a portable, machine-readable format.
Right to withdraw consent
Withdraw consent for data processing where applicable.
Right to object
Object to certain types of data processing.
Our data usage commitment
No selling
We never sell your personal or wellness data to third parties.
No targeted ads
We do not use your emotional states to target advertisements.
Minimal collection
We only collect data necessary to provide your wellness insights.
Exercising Your Rights
To exercise any of your privacy or data protection rights, contact our privacy team. We respond to verified requests within 30 days, or sooner where required by applicable law.
Contact Our TeamFaceofMind is a digital wellness platform — not a healthcare provider or clinic. For medical advice, diagnosis, or treatment, consult a licensed healthcare professional. For emergencies, call 911 (US) or your local emergency number.
Last updated: July 2026