HIPAA-Compliant Privacy & Data Security

Privacy Policy & Clinical Data Safeguards

Last Updated: August 31, 2026 • Version 2.5

1Our Privacy Commitment to Clinicians & Patients

TherapyAssist operates with clinical-grade data privacy and confidentiality. We treat all therapist profile information, patient demographics, clinical notes, therapy session logs, homework assignments, and journal reflections as strictly confidential Protected Health Information (PHI).

We do not sell, rent, monetize, or disclose your clinical or patient data to third parties, advertising networks, insurance brokers, or data brokers under any circumstances.

2Patient & Client Data Privacy Protections

2.1 Reflection Journals & Assessments: Your private reflections, happiness entries, and CBT records are encrypted. Only you and your authorized treating therapist have access to your clinical records.

2.2 No Cross-App Tracking: The TherapyAssist patient PWA does not utilize tracking cookies, marketing analytics, or device fingerprinting.

2.3 Deletion Requests: You may request the export or deletion of your companion app profile at any time through your therapist or our privacy support team.

3Information We Collect & Process

  • Practitioner Profiles: Full name, professional email address, clinical licensure type, practice title, and contact phone number.
  • Patient Care Records: Secure invite codes, encrypted patient profiles, session notes, task worksheet submissions, mood tracking logs, and CBT thought records.
  • Appointment Scheduling & Notification Data: Session timestamps, reminder preferences, and web push device subscription tokens.

4HIPAA Security & Technical Safeguards

256-bit Encryption

All communications and stored databases are secured with TLS 1.3 in transit and AES-256 at rest.

Strict Tenant Isolation

Data is segmented by verified therapist accounts with strict authorization barriers.

Zero Third-Party Tracking

No tracking pixels, behavioral cookies, or invasive analytics on clinical pages.

5Telehealth Video & Audio Stream Privacy

Telehealth video appointments operate over peer-to-peer and encrypted server media relays. Video and audio streams are ephemeral and not recorded or stored unless explicitly requested by the practitioner with formal informed consent.

6Contact Privacy Officer

If you have questions regarding our HIPAA compliance protocols or privacy practices, please contact our privacy compliance team at privacy@therapycareassist.com.

© 2026 TherapyAssist Inc. All rights reserved.