Mospital Privacy Policy

1. Scope and Applicability

This Privacy Policy applies to:

• Platform visitors
• Registered users
• Professionals providing services through the Platform
• Individuals interacting with AI-powered features ("AI Life Architects")

This Policy applies regardless of your country of residence and is designed to comply with:

• EU General Data Protection Regulation (GDPR)
• United States data protection laws (including California CCPA/CPRA where applicable)
• Other international data protection regulations

Where local laws require additional disclosures, these will be provided through country-specific supplements.

2. Data Controller

Under GDPR and other applicable data protection laws:

Mospital determines the purposes and methods of processing personal data collected through the Platform.

3. Categories of Personal Data We Collect

3.1 Data Provided by Users

We may collect the following personal data directly from users:

• Identity Information: name, surname, gender
• Contact Information: email address
• Account Credentials: encrypted and hashed passwords
• Usage Data: interactions with the Platform, session logs, preferences
• Communication Data: support requests and communications

3.2 Artificial Intelligence Interaction Data

When users interact with AI-powered features:

• Chat content may be processed to provide responses
• AI interaction data is anonymized or pseudonymized
• AI data is not used to identify individuals
• AI interactions are not used for medical diagnosis or treatment

3.3 Data Provided by Professionals

Professionals using the Platform may provide:

• Profile photo
• Promotional or introduction video
• Professional category and expertise
• Biography and "About" information
• Country of service
• Languages spoken

This information may be publicly visible on the Platform according to the professional's settings.

3.4 Automatically Collected Data

We may automatically collect:

• IP address
• Device type and browser information
• Operating system
• Access times and pages visited
• Cookie and tracking data (see Cookie Policy)

4. Purposes of Processing Personal Data

We process personal data for:

• Creating and managing user and professional accounts
• Operating, maintaining, and improving the Platform
• Facilitating interactions between users and professionals
• Providing AI-powered informational services
• Ensuring security, preventing fraud, and maintaining system integrity
• Complying with legal and regulatory obligations
• Analyzing Platform usage and improving user experience

Personal data is never sold to third parties.

5. Legal Bases for Processing (GDPR)

Under GDPR, we rely on:

• Contractual necessity – to provide Platform services
• User consent – where explicitly required (e.g., cookies, marketing)
• Legitimate interests – platform security, analytics, improvement
• Legal obligations – compliance with applicable laws

Users may withdraw their consent at any time where processing is based on consent.

6. AI-Specific Data Processing Disclosure

Mospital uses AI-powered tools ("AI Life Architects") solely for informational and guidance purposes:

• AI-generated outputs are not medical advice
• AI systems do not make automated decisions with legal or significant effects
• AI data is processed in aggregate or anonymized form for system improvement
• Users may opt out of AI data usage for model improvement where applicable

7. Data Sharing and Transfers

We may share personal data with:

• Cloud infrastructure providers
• Payment service providers (e.g., Stripe)
• Analytics and security service providers
• Legal or regulatory authorities when required

International data transfers are protected using Standard Contractual Clauses (SCC) or equivalent safeguards.

8. Data Retention

Personal data is retained only as long as necessary to fulfill the purposes stated in this Policy, unless a longer retention period is required by law.

9. Data Security

We implement appropriate technical and organizational measures including:

• Encryption
• Access controls
• Secure cloud infrastructure
• Regular security monitoring

No system is 100% secure, but we strive to protect personal data using industry best practices.

10. Your Rights

Depending on your location, you may have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion ("right to be forgotten")
• Restrict or object to processing
• Data portability
• Lodge a complaint with a supervisory authority

Requests can be sent to hello@mospital.app.

11. Children's Privacy

The Platform is not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Significant changes will be announced through the Platform.

13. Contact

For privacy-related questions or requests: hello@mospital.app

14. Cookies and Tracking Technologies

14.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They are widely used to ensure platforms function properly, enhance user experience, analyze performance, and deliver personalized content.

Cookies generally do not contain information that directly identifies you but may be linked to personal data we hold about you.

14.2 Types of Cookies We Use

Mospital uses the following cookie categories:

a) Strictly Necessary Cookies

These cookies are required for Platform operation and cannot be disabled. They enable:

• User authentication
• Account security
• Session management
• Fraud prevention

Without these cookies, the Platform cannot function properly.

b) Functional Cookies

These cookies allow the Platform to remember your preferences and settings, for example:

• Language selection
• Region or country
• User interface preferences

They enhance usability but are not strictly necessary.

c) Analytics and Performance Cookies

These cookies help us understand how users interact with the Platform by collecting aggregate and anonymized information such as:

• Pages visited
• Time spent on pages
• Interaction patterns
• Error reports

We use this data to improve Platform performance and user experience. Analytics cookies are only activated when legally permitted or with user consent depending on your location.

d) Marketing and Advertising Cookies

When applicable, these cookies may be used to:

• Measure marketing campaign effectiveness
• Deliver relevant content or promotions

Marketing cookies are only used with explicit consent where required by law.

14.3 Third-Party Cookies

Some cookies may be placed by third-party service providers that assist us with:

• Analytics
• Security monitoring
• Payment processing
• Platform optimization

These third parties process data in accordance with their own privacy policies and applicable data protection laws.

14.4 Legal Basis for Cookie Usage

Depending on cookie type and jurisdiction:

• Strictly necessary cookies are processed on the basis of legitimate interest
• All other cookies are processed on the basis of user consent

Users in jurisdictions requiring explicit consent (e.g., EU/UK) will be presented with a cookie consent notice.

14.5 Managing Cookie Preferences

You can manage or withdraw cookie preferences at any time through:

• The cookie management tool on the Platform
• Your browser settings

Please note that disabling certain cookies may affect Platform functionality.

14.6 Cookie Retention

Cookies are stored for varying durations depending on their purpose. Session cookies expire when you close your browser, while persistent cookies remain for a specified period unless deleted earlier.

14.7 Cookie Policy Updates

We may update our cookie practices from time to time. Significant changes will be reflected in this Privacy Policy or on a separate Cookie Policy page.

15. California Privacy Rights (CCPA / CPRA)

This section applies only to residents of the State of California and is provided in compliance with the California Consumer Privacy Act (CCPA) and the amendments made by the California Privacy Rights Act (CPRA).

15.1 Categories of Personal Information Collected

In the preceding twelve (12) months, Mospital may have collected the following categories of personal information as defined under California law:

• Identifiers (such as name and email address)
• Internet or electronic activity information (such as Platform usage data)
• Professional or commercial information (for professionals using the Platform)

Mospital does not collect sensitive personal information for the purpose of inferring characteristics about users.

15.2 Purposes of Collection

Personal information is collected for the purposes described in this Privacy Policy:

• Operating and improving the Platform
• Providing services and features
• Security and fraud prevention
• Legal and regulatory compliance

15.3 Sale or Sharing of Personal Information

• Mospital does not sell personal information.
• Mospital does not share personal information for cross-context behavioral advertising as defined under California law.

15.4 Your California Privacy Rights

California residents have the right to:

• Request disclosure of personal information we collect, use, or disclose
• Request deletion of personal information, subject to legal exceptions
• Request correction of inaccurate personal information
• Limit use of sensitive personal information (where applicable)
• Opt out of sale or sharing of personal information (if applicable)
• Non-discrimination for exercising your privacy rights

15.5 Exercising Your Rights

To exercise your California privacy rights, you may submit a request by contacting us at: hello@mospital.app

We may request identity verification before processing your request.

15.6 Authorized Agents

California residents may designate an authorized agent to submit a request on their behalf, subject to verification requirements.

15.7 Data Retention

Personal information is retained only as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required by law.