Legal
Last updated: July 6, 2026
Therapy Ally (“we,” “our,” or “us”) is committed to protecting your privacy and the privacy of your clients. This Privacy Policy explains how we collect, use, disclose, and safeguard information in connection with our Clinician Console and companion application.
At Therapy Ally™ your privacy is our top priority. We're committed to protecting your personal information and being clear about how we handle it.
Therapy Ally is built for use within your therapeutic process with your therapist. Your therapist recommends it, and you use it between sessions to reflect and move forward. You decide what to share with your therapist about your conversations with the Ally, and this policy explains exactly how your information is handled.
Therapy Ally is HIPAA-compliant, and we sign a BAA with your Therapy Practice to maintain that compliance. We store the minimum possible PII and PHI that we need in order to provide each user with a tailored, conversational experience. Your conversation with the Ally is private, and neither Therapy Ally nor our business partners store the contents of your conversations. If you decide to, you can share AI-generated summaries of your AI conversations with your therapist, who can access them through our HIPAA-compliant portal in order to facilitate the support of your therapeutic process.
Therapy Ally gives you control over what your therapist sees. During setup and any time in Settings, you choose whether to share AI-generated summaries of your sessions and weekly progress overviews. Both are off by default.
The transcripts of your conversations are neither stored nor shared with anyone, including your therapist. Only AI-generated summaries are available to share, and only when you've turned that on. Homework and safety-related information are always visible to your therapist.
Your information is never shared with other clients, sold, or used for advertising.
We collect only what we need to give you a personalized, supportive experience. This includes:
- Account information, such as your email address
- Usage analytics, collected in anonymized form, to help us improve Therapy Ally
We don't collect your precise or approximate location unless you give us permission.
The conversations are processed on secure cloud servers. When you talk with the Ally, your audio is processed through AI to generate responses. AI-generated summaries of your conversations, along with your homework responses, are stored in our secure cloud database. Before we store the summaries, we remove any Personally Identifiable Information (PII) you've shared during those conversations.
We use a small set of trusted service providers to process and store required data, including providers for AI processing, database storage, hosting, and error monitoring. Each of these providers is bound by agreements that require them to protect your information (HIPAA BAA’s) and use it only to support Therapy Ally. We're happy to provide more detail about our service providers on request.
Our BAA with our AI companies requires them to use their service that is called “zero retention”. That means that after your conversation with the AI, the AI company retains no data about your conversation. The only record of your conversation with the Ally is the AI-generated summary, stripped of any PII that we store in our database. We only use that data to provide real-time context to the AI for your next conversation or to be shared with your therapist if you allow them to see it.
We use your data to provide a personalized experience with your Ally, make that experience available to your therapist when you've chosen to share it, improve Therapy Ally, and troubleshoot issues.
We do not:
- Sell your data to advertisers
- Use your data for profiling or targeted advertising
- Use your conversation data to train AI models
Protecting your information is something we take seriously, and here's how we do it.
- Encryption in transit. All data moving between your device and our servers is encrypted.
- Encryption at rest. Your homework responses are protected with envelope encryption, and your session data is protected with industry-standard AES-256 encryption.
- Access control. Access to your data is limited to authorized personnel who need it to do their jobs.
- Breach notification. If a data breach occurs, we'll notify affected users as soon as possible and take appropriate steps to limit its impact.
You have the right to:
- Access your personal data
- Request deletion of your data and your account
- Export your data
- Opt out of analytics
- Choose what your therapist sees, and change it any time in Settings
To exercise any of these, you can use the app or contact us using the details below. Keep in mind that if you decide to share summary data about your conversations with your therapist, some summary data may be retained as part of your clinical record in line with your therapist's obligations and applicable law.
We keep your data only as long as needed to provide Therapy Ally with the capability to tailor conversations and to support your therapeutic process, or as required by law.
We'll delete your data upon request or after a reasonable period of inactivity, subject to any clinical record-keeping requirements that apply to your therapist.
If you have questions about our privacy practices, contact us at info@therapyally.ai.