Privacy notice — TheraJoy

The short version

We collect the minimum necessary to run the app. We never sell data, never broker PHI, and never train a third-party model on anything you do in TheraJoy. Your private notes and reflections stay on your device — we can't read them.

What we collect.

Data	Why	Where it lives
Email & account ID	To let you sign in and restore purchases.	Our servers (encrypted at rest)
Subscription & billing	To process payment and prevent fraud.	Our payment processor (Stripe)
Session events (anon.)	Counts of presets run, not content. E.g. "someone ran Calm Place for 3 minutes."	Our servers (no user linkage by default)
Crash reports	To fix bugs. Stack traces only, no content.	Our servers, 30-day retention
Preset library (Practice plan only)	So your team shares the same library.	Our servers (encrypted, per-practice)

What we don't collect.

Your reflections or journal entries. These are stored locally on your device and end-to-end encrypted before any iCloud sync. We cannot read them.
Biometric data. No heart rate, no sleep stages, no location.
Advertising identifiers. We don't integrate with ad SDKs.
Clinician client notes. For Practice accounts, clinical notes remain in your existing EHR or your own system. We store presets and preset history, not clinical content.
Third-party model training data. Nothing you do in TheraJoy is used to train a model at OpenAI, Anthropic, Google, or anyone else.

Who we share data with.

We use a small set of vendors. Each one is under a data-processing agreement that binds them to our standards.

Stripe — payments. Name, email, card data they handle directly (we don't see card numbers).
Render — application hosting, in US-East region.
Postmark — transactional email (receipts, password resets).
Sentry — crash reports, with PII scrubbing on ingest.

We do not share data with data brokers, advertisers, or analytics platforms that re-sell data. We have never received a government data request; if we do, we will publish a transparency report.

Practice accounts & HIPAA.

For practices on the Practice plan, we sign a Business Associate Agreement (BAA). Our systems are architected so that our servers never hold protected health information (PHI): client notes stay on your device, and the preset library stores only what you explicitly put in it (preset names, parameters, and, optionally, private clinician notes-to-self).

If you're a practice and you'd like to review our full security one-pager and BAA template before signing up, please write to us.

Your rights.

Wherever you live, and regardless of whether your local law requires it, you can:

See what we have. Request a copy of all data tied to your account. We aim to respond in 7 days.
Correct it. Most things are editable in-app; write to us for anything that isn't.
Delete it. Cancel your account and we permanently delete your data within 30 days, with the exception of billing records we're legally required to retain.
Take it with you. Export your preset library and session history as a JSON file from Settings → Your data.

To exercise any of these, email privacy@therajoy.co.

Cookies & tracking.

The marketing site you're reading right now sets a single cookie — a small, anonymous session ID used to remember whether you've dismissed the download banner. No third-party analytics, no pixels, no retargeting. The app itself uses no cookies.

Changes.

If we change this notice materially, we'll email you at least 14 days before it takes effect, and you'll be able to export or delete your data before then. Minor wording changes go in the changelog.

Last updated March 10, 2026 · TheraJoy Studio Inc., 412 11th Street, Oakland, CA 94607 · Privacy inquiries: privacy@therajoy.co