Privacy Policy

Shine - Mental Health Therapy Platform
Last Updated: December 2024

Information We Collect

Personal Information
  • Name, email address, phone number, and date of birth

    Required for account creation and service delivery

  • Location information (city, state, country)

    Used for matching with local therapists and compliance

  • Mental health information and therapy preferences

    Essential for providing personalized therapy services

Health Information
  • Therapy session notes and progress reports

    Created by therapists to track your mental health journey

  • Activity feedback and exercise completion data

    Your responses to therapy exercises and modules

  • Appointment schedules and session history

    Records of your therapy sessions and scheduling preferences

Technical Information
  • Device information and IP address

    Used for security, analytics, and service optimization

  • Usage analytics and app interactions

    How you interact with our platform to improve user experience


How We Use Your Information

  • Provide and personalize therapy services

    Match you with appropriate therapists and create tailored therapy modules

  • Schedule and manage appointments

    Coordinate therapy sessions and send reminders

  • Track therapy progress and outcomes

    Monitor your mental health journey and provide progress reports

  • Process payments and manage billing

    Handle therapy session payments and financial transactions

  • Ensure platform security and compliance

    Protect your data and comply with healthcare regulations


Information Sharing and Disclosure

We are committed to protecting your privacy and will not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

  • With your consent

    We will ask for your explicit permission before sharing your information

  • For legal compliance

    When required by law, court order, or government regulation

  • For safety and emergency situations

    To prevent harm to you or others, as required by healthcare laws

  • With service providers

    Trusted partners who help us operate our platform (with strict confidentiality agreements)


Data Security and Protection

We implement industry-standard security measures to protect your personal and health information:

  • End-to-end encryption

    All data is encrypted in transit and at rest

  • HIPAA compliance

    We follow Health Insurance Portability and Accountability Act standards

  • Secure data centers

    Your data is stored in secure, monitored facilities

  • Access controls

    Strict authentication and authorization protocols


Your Rights and Choices

You have the following rights regarding your personal information:

  • Access your data

    Request a copy of your personal information

  • Correct inaccurate information

    Update or modify your personal data

  • Delete your account

    Request deletion of your personal information

  • Opt-out of communications

    Unsubscribe from marketing emails and notifications


Data Retention and Deletion

We retain your personal information only for as long as necessary to provide our services and comply with legal obligations:

  • Active account data

    Retained while your account is active and for 7 years after account closure for legal compliance

  • Health records

    Retained for 7 years as required by healthcare regulations

  • Analytics data

    Anonymized data may be retained for up to 2 years for service improvement

  • Account deletion

    You can request complete deletion of your data, which will be processed within 30 days


Third-Party Services and Analytics

Our platform may integrate with third-party services to enhance functionality:

  • Payment processors

    Secure payment processing services (Stripe, PayPal) - they handle payment data directly

  • Email services

    Email delivery and notification services (SendGrid, AWS SES)

  • Analytics services

    Usage analytics (Google Analytics, Mixpanel) - data is anonymized

  • Security services

    Fraud detection and security monitoring services


Children's Privacy

Our services are not intended for children under 13 years of age:

  • Age restriction

    Users must be 13 or older to create an account

  • Parental consent

    For users 13-17, parental consent may be required for certain services

  • No collection from children

    We do not knowingly collect personal information from children under 13

  • Contact for concerns

    If you believe we have collected data from a child under 13, please contact us immediately


International Data Transfers

Your data may be transferred to and processed in countries other than your own:

  • Adequate protection

    We ensure adequate data protection measures are in place for international transfers

  • EU-US transfers

    For EU users, we comply with GDPR requirements for data transfers to the US

  • Standard contractual clauses

    We use approved transfer mechanisms to ensure data protection


Mobile Application Privacy

Our mobile application may request additional permissions to provide optimal functionality:

  • Calendar access

    To schedule and manage therapy appointments

  • Email and notifications

    To send appointment reminders and important updates

  • Location services

    To find nearby therapists and provide location-based services

  • Storage access

    To save therapy materials and progress data locally

  • Camera and microphone

    For video therapy sessions and photo uploads (with explicit consent)

  • Biometric authentication

    For secure login using fingerprint or face recognition (optional)


Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

  • Phone

    +1 (555) 123-4567

  • Address

    123 Therapy Street, Mental Health City, MH 12345


This Privacy Policy is effective as of December 2024 and will remain in effect except with respect to any changes in its provisions in the future, which will be in effect immediately after being posted on this page.

We reserve the right to update or change our Privacy Policy at any time and you should check this Privacy Policy periodically.