Privacy Policy

1. Introduction

TheraTouch+ Inc. ("we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our platform.

This policy applies to all users, including patients, therapists, and administrators. For information specifically related to Protected Health Information (PHI), please also review our HIPAA Compliance page.

2. Information We Collect

Account Information

• Name, email address, and phone number
• Account credentials (encrypted)
• Role and professional credentials (for therapists)

Health Information (PHI)

• Medical history and conditions
• Insurance information
• Session notes and treatment records
• Messages between patients and therapists

Usage Information

• Log data (IP address, browser type, access times)
• Device information
• Pages visited and features used

3. How We Use Your Information

We use the information we collect to:

• Provide and maintain our healthcare platform services
• Facilitate appointment scheduling and management
• Enable secure communication between patients and therapists
• Process therapist credential verification
• Send appointment reminders and system notifications
• Maintain audit logs for HIPAA compliance
• Improve our services and user experience
• Respond to support requests

4. Data Protection

We implement comprehensive security measures to protect your data:

• Encryption at rest: All PHI is encrypted using AES-256 encryption
• Encryption in transit: TLS 1.3 for all data transmission
• Access controls: Role-based access with two-factor authentication
• Session security: Automatic timeout after 15 minutes of inactivity
• Audit logging: All access to PHI is logged and monitored
• Password policies: Strong password requirements with periodic rotation

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

• Treatment: Between you and your therapist as part of treatment
• Legal requirements: When required by law, court order, or regulatory authority
• Emergency: To prevent a serious threat to health or safety
• With your consent: When you authorize a specific disclosure
• Service providers: With vendors who assist in operating our platform, subject to strict confidentiality agreements

6. Data Retention

We retain health records for a minimum of 7 years in compliance with federal and state regulations. Account information is retained as long as your account is active. You may request deletion of non-regulated data by contacting us.

7. Your Rights

You have the right to:

• Access and obtain copies of your personal information
• Request correction of inaccurate data
• Request restrictions on how your data is used
• Receive an accounting of disclosures of your PHI
• File a complaint if you believe your privacy rights have been violated

8. Cookies and Tracking

We use essential cookies required for the platform to function, including session management and CSRF protection. We do not use third-party advertising trackers. Analytics cookies, if used, are anonymized and do not contain PHI.

9. Children's Privacy

TheraTouch+ is not intended for use by individuals under the age of 18 without parental consent. We do not knowingly collect personal information from children under 13. If you are a minor, your parent or legal guardian must consent to your use of the platform.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a notice on our platform. Your continued use of the platform after changes are posted constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact:

TheraTouch+ Privacy Officer
Email: privacy@theratouchplus.com
Phone: (555) 123-4567
Address: 123 Health Ave, Suite 400, San Francisco, CA 94105