Privacy

Your words stay yours.

What you share here is personal. This page explains, in plain language, what we collect, why, who can see it and how we protect it.

Last updated 8 October 2026

In short

  • 01

    Never sold

    We don't sell your information or use your conversations for advertising.

  • 02

    Encrypted

    Transcripts, notes, messages, photos and contact details are encrypted at rest.

  • 03

    A small, named team

    Only Malak Shaaban and Islam Shaban review care records, and every view is logged.

  • 04

    You stay in control

    See what your supporter remembers, ask it to forget, and request your data.

Who we are

NLP MALAK is a wellness and coaching service founded by Malak Shaaban. Islam Shaban leads the platform. Together they form the clinic team responsible for your information.

What we collect

  • Account details you give us: name, email, mobile number, date of birth, and optionally your city, address and photo.
  • Your consents, with the date and version you agreed to.
  • Your conversations with your supporter. Voice is processed live to make the call work; we keep the written transcript, not a recording.
  • AI summaries of conversations and the helpful details your supporter remembers, such as your goals or what helps you relax.
  • Messages and photos you send to professionals or the clinic team, appointments you book, and your talk-time balance.
  • Payment records. Card details are entered on Stripe's page and never reach our servers.
  • Security records such as sign-ins and a protected (hashed) form of your IP address.

How we use it

To run your conversations, remember what matters to you between sessions, book and manage appointments, handle payments, keep the service safe, and improve its quality.

If a conversation suggests you may be at risk, we use it to follow our safety protocol, which can include alerting the clinic team. The Safety page explains how this works.

AI and your conversations

Supporters are AI, not people. To hold a conversation, your voice and words are processed in real time by our AI provider, xAI. Summaries and memories are also created by AI.

AI can make mistakes. Summaries are never a diagnosis, and a real professional reviews anything that matters for your care.

Who can see your information

  • You, always.
  • The clinic team, Malak Shaaban and Islam Shaban, can review your conversations, summaries, memories and messages for your care, your safety and service quality. You agree to this when you join, and every access is logged.
  • Professionals you choose to book or who are assigned to your care can see what they need to support you.
  • Service providers that run the platform for us, under contract and only to provide the service: Vercel (hosting) and Neon (database), both in the EU (Frankfurt), xAI (AI processing), Stripe (payments) and Resend (email).
  • Nobody else, unless the law requires it or someone's life is in danger.

Kept like a sealed letter.

Sensitive fields are encrypted before they're stored, and the keys are kept apart from the data. Even inside our own systems, care records open only for the clinic team, and each time they do, it's written to an audit log.

How we protect it

All connections use HTTPS. Sensitive fields are encrypted in our database. Staff access is limited by role, and every look at a care record is recorded in an audit log the clinic team reviews.

No system is perfect. If we ever discover a breach that affects you, we'll tell you and explain what we're doing about it.

How long we keep it

  • Transcripts stay in your history so you can read back what you talked about. They can't be deleted from the app; if you want them removed, ask us.
  • Short-term memories expire automatically, and you can make your supporter forget any memory at any time.
  • When you ask us to delete your account, we close it and remove your personal information, except records we must keep by law, such as invoices.

Your choices and rights

You can see and update your profile, see and remove memories, read every transcript, and ask for a copy or deletion of your data.

You can withdraw consent at any time. Some consents are needed to run the service, so withdrawing them means we can no longer provide conversations.

Age

NLP MALAK is for adults. You must be 18 or older to create an account.

Changes to this policy

If we change how we handle your information in a meaningful way, we'll tell you in the app and ask for your agreement again where needed.