Privacy Policy

1. Introduction

BridgeCalm, Inc. ("BridgeCalm," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application, website, and therapist portal (collectively, the "Services").

BridgeCalm is a wellness practice tool — not a medical device, diagnostic instrument, or substitute for professional therapy. Jann, our AI wellness companion, helps you practice evidence-based skills between therapy sessions.

2. Information We Collect

Account Information

• Name and email address
• Password (stored securely using industry-standard hashing)
• Role (patient or therapist)

Wellness Data

• Mood check-in entries and one-word reflections
• Conversations with Jann (your AI wellness companion)
• Task and skill practice progress
• Self-report wellness check responses (e.g., PHQ-9, GAD-7)
• Streak and engagement data
• Voice recordings (when you use voice input with Jann)

Profile Summary Data

• A summary profile card generated from your onboarding quiz answers, presenting concerns, therapy history, and conversation patterns
• This profile is used to personalize Jann's responses to your specific needs

Therapist-Specific Data

• Professional license type and practice name
• Patient management preferences and homework assignments

Technical Data

• Device type and operating system
• App version and crash reports
• IP address (for security and abuse prevention only)

3. How We Use Your Information

• To provide and personalize the BridgeCalm experience
• To generate AI-guided wellness practice responses through Jann
• To track your skill development and progress over time
• To share progress summaries with your therapist (only when you opt in)
• To generate pre-session briefs for therapists (from patient self-reports)
• To detect crisis signals and route you to professional resources (988, 741741)
• To improve the quality and safety of our Services

4. How We Protect Your Data

• Encryption: All data is encrypted in transit (TLS 1.2+) and at rest (AES-256)
• HIPAA Compliance: We maintain administrative, physical, and technical safeguards required by HIPAA
• Access Controls: Row-level security ensures patients only see their own data and therapists only see their own patients
• No data sold: We never sell, rent, or trade your personal or wellness data
• No AI training: Your conversations with Jann are never used to train AI models

5. Third-Party AI Services

BridgeCalm uses third-party AI services to power Jann, your wellness companion. We believe you should know exactly what data is shared, with whom, and why.

Anthropic (Claude API) — AI Conversation Processing

When you chat with Jann, the following data is sent to Anthropic's Claude API to generate responses:

• Your messages: The text you type or dictate in your conversations with Jann
• Conversation history: Recent messages in the current conversation for context continuity
• Your profile summary: A summary card containing your presenting concerns, therapy history, preferred conversation styles, and wellness goals — used to personalize Jann's responses
• Mood context: Your recent mood check-in data to help Jann respond appropriately to your current state

Anthropic's data handling:

• Anthropic operates under a zero data retention API policy — your data is not stored by Anthropic after processing
• Your data is never used to train Anthropic's AI models
• Data is transmitted over encrypted connections (TLS 1.2+)
• Anthropic processes data under a contractual data processing agreement with BridgeCalm

OpenAI (Whisper API) — Voice Transcription

When you use voice input with Jann, the following data is sent to OpenAI's Whisper API:

• Audio recordings: Your voice messages are sent to OpenAI solely for transcription into text
• The resulting text is then processed by Anthropic as described above

OpenAI's data handling:

• OpenAI operates under a zero data retention API policy for Whisper — audio is not stored after transcription
• Your audio is never used to train OpenAI's AI models
• Data is transmitted over encrypted connections (TLS 1.2+)
• OpenAI processes data under a contractual data processing agreement with BridgeCalm

Your Consent

Before using Jann for the first time, you will be asked to review and consent to this data sharing. You can revoke your consent at any time from the app's Settings → Privacy screen, though this will disable Jann's conversation features since they require AI processing.

6. Other Data Sharing

Beyond the AI services described above, we share your data only in these limited circumstances:

• With your therapist: Only when you explicitly opt in to progress sharing. Your therapist can see wellness check scores, task completion, mood trends, and Jann-flagged items — but never your full conversation text
• Supabase: Our database hosting provider, which stores your encrypted data under strict contractual obligations and HIPAA-compliant infrastructure
• Legal requirements: We may disclose information if required by law or to protect the safety of our users
• Crisis situations: If our system detects immediate risk of harm, we route you to professional crisis services

7. Your Rights

• Access: You can request a copy of all data we hold about you
• Export: You can export your progress data at any time from the app
• Deletion: You can request deletion of your account and all associated data
• Correction: You can update your personal information at any time
• Opt out: You can stop sharing data with your therapist at any time
• Revoke AI consent: You can revoke consent for AI data processing at any time from Settings → Privacy (this will disable Jann's conversation features)

To exercise any of these rights, contact us at liam@bridgecalm.com.

8. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days. De-identified, aggregate data may be retained for research and product improvement purposes. Third-party AI processors (Anthropic, OpenAI) do not retain your data beyond the immediate processing of each request.

9. Children's Privacy

BridgeCalm is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a minor, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Services after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

BridgeCalm, Inc.
Email: liam@bridgecalm.com