Privacy Policy

What Information Do We Collect?

We collect several types of information to provide and improve our mental wellness services across all our products:

• Personal identification information (name, email address, phone number) when you register an account, apply for our beta program, or contact us
• Usage data including session duration, features used, interactions with our AI counselor (Harmonian AI), anonymous voice calls (EmoCall), EQ training activities (GuideX), and assessment results
• Conversation data with our AI wellness assistant, which may include personal experiences, feelings, and mental health-related information. Your conversations are never used for AI model training.
• Technical data such as your IP address, browser type, device type, operating system, and language preferences

We use your personal information for the following purposes:

• To provide and maintain our products — Harmonian AI (24/7 AI counseling), EmoCall (anonymous peer support calls), GuideX (workplace EQ training), and the IPC Super App (integrated wellness ecosystem)
• To personalize your experience, including mood tracking, journal insights, psychological assessments (PHQ-9, GAD-7), and EQ analysis via Mind Reports
• To improve our products and develop new features based on aggregated, anonymized usage patterns
• To communicate with you, including sending notifications about service changes, beta program updates, and affiliate program information
• To comply with legal obligations under Malaysian law (PDPA 2010) and international regulations (GDPR) and to protect our rights

We implement appropriate technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction, including:

• Encryption for all sensitive conversations and personal data stored in our PostgreSQL databases
• Strict access controls limiting who can view your information, with real-time PII detection built into our AI system
• Regular security monitoring and testing of our systems across all four products

We retain your personal information for as long as necessary to provide you with our Services and to comply with our legal obligations. If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are legally required to retain it. Chat conversation history is stored in our database and can be cleared at any time through the app.

We do not sell your personal information to third parties. We do not use your conversations for AI model training. We may share your information in the following circumstances:

• With service providers who help us deliver our Services, including cloud hosting (Google Cloud), database hosting (Neon), and our clinical partners (PsyHome Asia and International Psychology Centre) only when you explicitly request a referral
• When required by law or to respond to legal process under Malaysian jurisdiction
• In connection with a business transfer such as a merger or acquisition
• With your consent or at your direction

Under the Malaysia Personal Data Protection Act 2010 (PDPA) and where applicable, the EU General Data Protection Regulation (GDPR), you have the following rights:

• The right to access the personal information we hold about you
• The right to request correction of inaccurate information
• The right to request deletion of your personal information
• The right to restrict processing of your information
• The right to data portability
• The right to object to processing of your information

We use cookies and similar tracking technologies to track activity on our platform and hold certain information. Cookies are files with a small amount of data that may include an anonymous unique identifier. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. Please see our Cookie Policy for full details.

Your information may be transferred to and maintained on servers located outside Malaysia. Our primary infrastructure is hosted on Google Cloud and Neon (PostgreSQL). We ensure appropriate safeguards are in place to protect your information when it is transferred internationally, in compliance with PDPA and GDPR requirements.

Our products may include links to third-party websites or services, including our partner counseling centres (PsyHome Asia and International Psychology Centre). We are not responsible for the privacy practices of these third-party sites. We encourage you to review their privacy policies when you visit them from our platform.

Our Services are not directed to children under the age of 16. We do not knowingly collect personal information from children. If you are a parent or guardian and you believe your child has provided us with personal information, please contact us so we can take necessary actions.

If you have any questions or suggestions about our Privacy Policy, do not hesitate to contact us:

Harmonian Software (M) Sdn Bhd
A registered company in Malaysia

Email: hello@harmonian.online