Privacy Policy

1. Information We Collect

Personal Information

When you use Wellzy, we may collect the following information:

• Account Information: Name, email address, password (encrypted), and optional profile details
• AI Therapy Conversations: Messages exchanged with our AI therapist (encrypted and private)
• Journal Entries: Personal reflections and notes you create (encrypted)
• Usage Data: How you interact with our platform, pages visited, features used
• Device Information: Browser type, IP address, device type, operating system

Health Information

As a mental health platform, we collect health-related information including:

• Mental health concerns and symptoms you share
• Therapy goals and progress
• Wellness activity participation
• Feedback on therapy sessions

Important: All health information is protected under HIPAA regulations and encrypted with AES-256 encryption.

2. How We Use Your Information

We use your information to:

• Provide Services: Deliver AI therapy, match you with therapists, and offer wellness tools
• Personalize Experience: Tailor recommendations and content to your needs
• Improve Our Platform: Analyze usage patterns (anonymized) to enhance features
• Communicate: Send important updates, security alerts, and optional newsletters
• Ensure Security: Detect and prevent fraud, abuse, or security threats
• Legal Compliance: Meet regulatory requirements and respond to legal requests

AI Training and Improvement

We may use anonymized and aggregated conversation data to improve our AI therapist's responses. Your personal information and identifiable conversations are never used for training or shared with third parties.

3. Information Sharing and Disclosure

We only share information in these limited circumstances:

With Your Consent

When you explicitly authorize us to share information (e.g., connecting with a therapist through our directory).

Service Providers

We work with trusted third-party providers who help us operate our platform:

• Cloud hosting providers (AWS, with HIPAA-compliant configurations)
• Analytics services (with anonymized data only)
• Email service providers (for account communications)
• Payment processors (for premium features, if applicable)

All service providers are bound by strict confidentiality agreements and HIPAA Business Associate Agreements.

Legal Requirements

We may disclose information when required by law or to:

• Comply with court orders or legal processes
• Protect our rights, property, or safety
• Prevent imminent harm to yourself or others (e.g., suicide risk)
• Investigate fraud or security incidents

4. Data Security

We implement industry-leading security measures to protect your information:

• Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
• Access Controls: Strict authentication and authorization protocols
• Regular Audits: Security assessments and penetration testing
• HIPAA Compliance: Full compliance with HIPAA privacy and security rules
• Secure Infrastructure: Hosted on enterprise-grade, HIPAA-compliant cloud servers
• Employee Training: All staff trained in data privacy and security protocols

5. Your Privacy Rights

You have the following rights regarding your personal information:

Access and Portability

You can access, download, and export your data at any time through your account settings.

Correction and Update

You can edit your personal information and preferences in your account dashboard.

Deletion

You can delete your account and all associated data at any time. This action is permanent and cannot be undone. Visit your account settings to request deletion.

Opt-Out of Communications

You can unsubscribe from marketing emails by clicking the "unsubscribe" link in any email. You cannot opt-out of essential service communications (e.g., security alerts).

California Privacy Rights (CCPA)

If you're a California resident, you have additional rights including:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of sale of personal information
• Right to deletion of personal information
• Right to non-discrimination for exercising privacy rights

6. Cookies and Tracking

We use cookies and similar technologies to:

• Keep you logged in
• Remember your preferences
• Understand how you use our platform
• Improve performance and user experience

You can control cookies through your browser settings. Note that disabling cookies may limit some platform functionality.

Analytics

We use analytics services (Google Analytics) to understand usage patterns. We configure these services to respect your privacy and anonymize IP addresses.

7. Children's Privacy

Wellzy is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will promptly delete it.

Users between 13-18 should use Wellzy with parental or guardian consent and supervision.

8. International Data Transfers

Wellzy is based in the United States. If you access our services from outside the U.S., your information will be transferred to and processed in the United States, which may have different data protection laws than your country.

By using Wellzy, you consent to the transfer of your information to the United States and its processing in accordance with this Privacy Policy and U.S. law.

9. Data Retention

We retain your information for as long as your account is active or as needed to provide services. When you delete your account:

• Personal information is deleted within 30 days
• Anonymized usage data may be retained for analytics
• Backups are securely deleted within 90 days
• Legal or regulatory data may be retained as required by law

10. Third-Party Links

Our platform may contain links to external websites (e.g., therapist websites, mental health resources). We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. We will:

• Post the updated policy on this page
• Update the "Last Updated" date
• Notify you via email for material changes
• Request your consent for significant changes that affect your rights

Your continued use of Wellzy after changes indicates acceptance of the updated policy.

12. Contact Us