Privacy Policy

Last Updated: August 17, 2025

Introduction: At Calai Health ("Calai Health," "we," "us," or "our"), we understand the sensitive nature of the information you share with us as you navigate your recovery journey. This Privacy Policy explains how we collect, use, protect, and share your personal information when you use our website at www.calai.health, our mobile application, and related services (collectively, the "Service").

This Privacy Policy applies to all users of our Service, including users, caregivers, and healthcare professionals who access our platform for Dialectical Behavior Therapy (DBT) support and AI-powered coaching resources.

Please read this Privacy Policy carefully. By using our Service, you agree to the collection, use, and sharing of your information as described in this policy. If you do not agree with our practices, please do not use our Service.

Information We Collect

Information You Provide Directly

Account Registration Information:

Name and contact information (email address, phone number, mailing address)
Username and password
Date of birth and demographic information
Relationship to the individual receiving treatment (patient, parent, caregiver)

Profile and Treatment-Related Information:

Information about your eating disorder and recovery journey
Symptoms and treatment goals
Progress tracking and milestone information
Responses to assessments and questionnaires
Communication preferences

Communication Content:

Messages sent through our platform
Content shared in community forums or support groups
Feedback, questions, and support requests
Session notes and coaching interactions

Payment Information:

Credit card or payment method details (processed by third-party Stripe©)
Billing address and transaction history

Information We Collect Automatically

Device and Usage Information:

IP address and device identifiers
Browser type and version
Operating system and device type
App usage patterns and feature interactions
Time spent on different sections of the Service

Location Information:

General geographic location (city/state level) to customize content and comply with local regulations
We do not collect precise GPS location data

Cookies and Similar Technologies:

Session cookies for authentication and security
Analytics cookies to understand user behavior
Preference cookies to remember your settings
Marketing cookies (with your consent)

Information from Third Parties

Healthcare Providers:

Treatment information shared with your consent
Referral information from your clinical team
Progress reports and assessments

Social Media and External Platforms:

Basic profile information if you choose to connect social media accounts
Content you choose to share from external platforms

How We Use Your Information

To Provide and Improve Our Service

Deliver personalized AI-powered coaching and support
Facilitate DBT principles and guidance
Provide access to educational resources, trainings, and workshops
Enable community connections and peer support
Track progress and celebrate milestones in recovery
Customize content based on your specific needs

Communication and Support

Send service-related notifications and updates
Respond to your questions and provide customer support
Share educational content and recovery resources
Notify you of new features, workshops, or community events
Facilitate connections with Dr. Dany and clinical experts

Safety and Security

Protect against fraud, abuse, and security threats
Monitor for inappropriate content or behavior
Ensure compliance with our Terms of Use
Maintain the safety of our community environment

Analytics and Research

Analyze usage patterns to improve our Service
Conduct research on treatment effectiveness (in aggregate, de-identified form)
Develop new features and resources
Better understand the needs of families in recovery

Legal and Business Operations

Comply with applicable laws and regulations
Enforce our Terms of Use and other policies
Protect our rights and interests
Support business operations and administration

How We Share Your Information

With Your Consent

We will share your personal information with third parties when you provide explicit consent, such as:

Sharing progress with your healthcare team
Connecting with other users in our community
Participating in research studies or testimonials

Service Providers

We share information with trusted third-party service providers who help us operate our Service, including:

Cloud hosting and data storage providers
AI and machine learning technology partners
Payment processing services
Customer support and communication platforms
Analytics and marketing service providers

All service providers are contractually required to protect your information and use it only for the specific services they provide to us.

Healthcare Integration

With your permission, we may share relevant information with:

Your treatment team or healthcare providers
Clinical partners who support our DBT approach
Researchers studying eating disorder treatment (in de-identified form)

Legal Requirements

We may disclose your information when required by law or to:

Comply with subpoenas, court orders, or legal process
Protect the rights, property, or safety of Calai Health, our users, or others
Enforce our Terms of Use or investigate violations
Prevent fraud or other illegal activities

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity, subject to the same privacy protections outlined in this policy.

De-identified Information

We may share aggregate, de-identified information that cannot be used to identify you for:

Research on eating disorder treatment effectiveness
Public health initiatives
Industry reports and publications

Your Privacy Rights and Choices

Access and Control

You have the right to:

Access the personal information we have about you
Correct inaccurate or incomplete information
Request deletion of your personal information (subject to certain limitations)
Download a copy of your information in a portable format
Restrict certain types of processing

Communication Preferences

You can control how we communicate with you:

Opt out of marketing emails through unsubscribe links
Adjust push notification settings in your account
Text "STOP" to opt out of SMS messages
Contact us to modify your communication preferences

Community Participation

Choose what information to share in community forums
Control your profile visibility to other users
Leave community groups at any time

Cookie Preferences

You can manage cookies through your browser settings or our cookie preference center. Note that disabling certain cookies may limit some functionality of our Service.

Data Security and Retention

Security Measures

We implement comprehensive security measures to protect your information, including:

SOC 2 and HIPAA compliant architecture
Encryption of data in transit and at rest
Regular security assessments and audits
Access controls and authentication measures
Employee training on data privacy and security
Incident response and breach notification procedures

Data Retention

We retain your information for as long as necessary to provide our Service and comply with legal obligations:

Account information: Until you request deletion or your account is inactive for 3+ years
Treatment-related data: 7 years to support continuity of care
Communication records: 3 years for customer support purposes
Analytics data: Up to 2 years in aggregate, de-identified form

Children's Privacy

Our Service is designed for adults with disordered eating. We do not knowingly collect personal information directly from children under 13 without verified parental consent.

For information about minors shared by parents/guardians:

We only use information necessary to provide family support services
We implement additional security measures for sensitive information about minors
Parents/guardians have full control over information shared about their child

If we discover we have inadvertently collected information from a child under 13, we will delete it immediately.

International Users

Our Service is primarily intended for users in the United States. If you access our Service from outside the U.S.:

Your information may be transferred to and processed in the United States
By using our Service, you consent to this transfer
We will comply with applicable international privacy laws where required

Third-Party Integrations

Our Service may include integrations with third-party platforms and services. This Privacy Policy does not cover:

Information collected by third-party websites or apps you access through our Service
Privacy practices of our business partners or service providers on their own platforms
Social media platforms you choose to connect with our Service

We encourage you to review the privacy policies of any third-party services you use.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes:

We will post the updated policy on our website
We will update the "Last Updated" date
We may notify you via email or in-app notification
Your continued use of the Service constitutes acceptance of the updated policy

We encourage you to review this Privacy Policy regularly to stay informed about how we protect your information.

State-Specific Rights

California Residents (CCPA/CPRA): If you are a California resident, you have additional rights under the California Consumer Privacy Act.

Right to Know: Request information about the personal information we collect, use, and share

Right to Delete: Request deletion of your personal information (subject to certain exceptions)

Right to Correct: Request correction of inaccurate personal information

Right to Opt-Out: Opt out of the sale or sharing of personal information (we do not sell personal information)

Right to Non-Discrimination: We will not discriminate against you for exercising these rights

Sensitive Personal Information: We limit the use of sensitive personal information to providing our Service, security purposes, and other specified uses under California law.

To exercise these rights, contact us at support@calai.health or use our online form.

Other State Rights

Residents of Virginia, Colorado, Connecticut, and other states with comprehensive privacy laws may have similar rights. Contact us for information about exercising your rights under applicable state laws.

General Privacy Questions

For questions about this Privacy Policy or our privacy practices:

Email: compliance@calai.health
Mail: Calai Health Privacy Team, 1111B S Governors Ave. STE 37472, Dover, DE 19904
Website: Contact form at www.calai.health/contact

Data Protection Requests

To exercise your privacy rights or submit data protection requests:

Email: support@calai.health
Subject Line: "Privacy Rights Request"
Include: Your name, email address, and specific request details

Response Time

We will respond to privacy requests within 30 days (or as required by applicable law). For complex requests, we may extend this period and notify you of the extension.

Your trust is essential to our mission of supporting individuals throughout eating disorder recovery. We are committed to protecting your privacy and using your information responsibly to provide the best possible support for your recovery journey.