Privacy & Ethics Policy

Privacy Policy

We recognize that sharing personal and health information is an act of trust. In Therapy complies with HIPAA (Health Insurance Portability and Accountability Act), GDPR, and applicable state/federal privacy laws. Our platform, staff, and partners are bound by strict confidentiality agreements.

Data We Collect

• Personal Identifiers: Name, date of birth, contact information, emergency contacts.
• Clinical Information: Medical history, mental health assessments, session notes, treatment plans, and progress reports.
• Technical Data: IP address, device type, browser information, and secure session logs for platform integrity.
• Financial Information: Insurance details, payment methods, and billing records (processed by PCI-compliant third parties).

How We Use Your Information

Your data is used solely to provide, coordinate, and improve your care. Specific uses include:

• Delivering therapy sessions and clinical services
• Processing insurance claims and payments
• Ensuring clinical safety and continuity of care
• Complying with legal and regulatory requirements
• Improving platform security and user experience

Information Sharing

We do not sell, trade, or rent your personal information. Data is only shared when:

• You provide explicit written consent
• Required by law or court order
• Necessary to prevent imminent harm to you or others
• With authorized healthcare providers for coordinated care (via signed release)

Security Measures

We implement industry-leading safeguards including AES-256 encryption, multi-factor authentication for staff, regular security audits, access controls with role-based permissions, and automatic session timeouts. All clinical records are stored on secure, compliant servers with daily encrypted backups.

Your Rights

Under applicable privacy laws, you have the right to:

• Access, review, or request copies of your records
• Request amendments to inaccurate or incomplete information
• Receive an accounting of disclosures
• Restrict certain uses or disclosures of your data
• Request data portability or deletion (where legally permissible)
• Revoke consent at any time (except where legally required to retain records)

Data Retention

Clinical records are retained for a minimum of 7 years after your last session, or longer if required by state law. Upon request or upon account closure, non-essential personal data will be securely deleted or anonymized.

Code of Ethics

In Therapy's clinical team adheres to the ethical principles established by the American Psychological Association (APA), American Counseling Association (ACA), and relevant state licensing boards. Our practice is guided by beneficence, fidelity, integrity, justice, and respect for autonomy.

Confidentiality & Limits

Everything shared in therapy is strictly confidential. Exceptions are made only when:

• There is an imminent risk of harm to yourself or others
• Suspected abuse or neglect of a minor, elderly, or vulnerable adult
• Court-ordered disclosure or subpoena
• Consultation with supervisors or colleagues for clinical guidance (without identifying details)

Informed Consent

Before treatment begins, you will receive a detailed informed consent document outlining the nature of therapy, fees, cancellation policies, confidentiality limits, and your rights. You will have the opportunity to ask questions and provide written consent before any services commence.

Professional Boundaries

Our therapists maintain clear professional boundaries to ensure safe, effective care. Dual relationships, financial entanglements, or personal relationships with clients are strictly prohibited. Gift-giving, social media connections, and off-hours contact outside clinical channels are avoided to protect the therapeutic frame.

Competence & Scope

All clinicians practice within the scope of their training, licensing, and competencies. We continuously engage in continuing education, peer consultation, and supervision. If your needs fall outside a therapist's expertise, you will be referred to a qualified provider at no additional cost.

Cultural Sensitivity & Inclusion

We respect and affirm the diversity of our clients, including race, ethnicity, gender identity, sexual orientation, religion, disability, socioeconomic status, and neurodiversity. Therapists receive ongoing training in culturally responsive, trauma-informed, and anti-oppressive practices.

Clinical Record Keeping

Accurate, timely, and objective documentation is maintained for every client. Records include consent forms, session notes, treatment plans, progress notes, and correspondence. Access is restricted to authorized clinical staff and strictly audited.

Emergency Protocols

In Therapy is not a crisis service. If you are experiencing a medical or psychiatric emergency, please call 911, go to your nearest emergency room, or contact the 988 Suicide & Crisis Lifeline. Our intake team will conduct a safety assessment and provide appropriate referrals if crisis-level support is needed.

Report a Concern or Violation

If you have questions about this policy, wish to exercise your rights, or believe a privacy or ethical violation has occurred, please contact our designated officers below. All complaints are investigated promptly, confidentially, and in accordance with professional standards.

You also have the right to file a complaint with the U.S. Department of Health & Human Services (HHS) Office for Civil Rights or your state's licensing board. We will not retaliate against anyone who raises a good-faith concern.