Privacy Policy

Last updated: November 18, 2025

Your privacy is fundamental to everything we do. This policy explains how we collect, use, and protect your information.

🔒 Our commitment to you

We are HIPAA-compliant and follow strict healthcare privacy standards
Your therapy sessions and notes are encrypted end-to-end
We never sell your personal or health information
You have full control over your data and can request deletion anytime

Information we collect

We collect only the information necessary to provide you with quality mental health care:

Account information

Name, email address, phone number, date of birth, and payment information.

Health information (PHI)

Information you share during intake, therapy sessions, assessments, and communications with your therapist. This is protected under HIPAA.

Usage data

Session times, device information, IP address (for security), and technical data to improve our platform.

How we use your information

To provide therapy services: Matching you with therapists, facilitating sessions, and maintaining clinical records
To improve our platform: Analyzing usage patterns (anonymized) to enhance user experience
To communicate with you: Appointment reminders, updates, and support responses
To ensure safety: Detecting fraud, abuse, and maintaining platform security
For billing: Processing payments and insurance claims when applicable

How we protect your information

🔐 Encryption

All data is encrypted in transit (TLS 1.3) and at rest (AES-256).

🏥 HIPAA Compliance

We follow strict healthcare privacy and security standards.

🛡️ Access Controls

Only authorized personnel can access your information.

📝 Regular Audits

We conduct security assessments and penetration testing.

Sharing your information

We only share your information when necessary and with your consent:

With your therapist: To provide care and maintain clinical records
With your consent: If you authorize us to share with other providers or family members
For legal requirements: When required by law or to prevent serious harm
With service providers: Vetted partners who help us operate (under strict confidentiality agreements)
In emergencies: To prevent imminent danger to you or others

Your rights and choices

You have control over your personal information:

Access your data: Request a copy of your information anytime
Correct inaccuracies: Update or fix incorrect information
Request deletion: Ask us to delete your account and data (subject to legal retention requirements)
Restrict processing: Limit how we use your information
Data portability: Receive your data in a machine-readable format
Opt out of marketing: Unsubscribe from promotional emails anytime

Cookies and tracking

We use essential cookies to make our platform work and analytics cookies to understand how people use our service. We do not use advertising cookies or sell your data to third parties. You can control cookie preferences in your browser settings.

Children's privacy

Our services are not intended for children under 13. If you're a minor (13-17), you need parental consent to use EchoPsychology. We take extra precautions to protect minors' information.

International users

If you're outside the United States, your information may be transferred to and processed in the US. We comply with international data protection laws including GDPR for EU users.

Changes to this policy

We may update this policy occasionally. We'll notify you of significant changes via email or prominent notice on our platform. Your continued use after changes means you accept the updated policy.

Questions about privacy?

If you have questions or concerns about how we handle your information, we're here to help.

Email: privacy@echopsychology.com
Mail: EchoPsychology Privacy Officer, 123 Mental Health Way, San Francisco, CA 94102