Privacy Policy — CopeSwipe Application

Effective: 05/04/2026 · Last updated: 05/04/2026

TherAptAI, Corporation. ("Company," "we," "us," or "our") operates the CopeSwipe application and website (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our Service. By using the Service, you agree to the practices described in this policy.

1. Who we are and who this policy covers

CopeSwipe is a psychoeducational tool designed for licensed mental health professionals (“Therapists”) and their clients (“Users”). This Privacy Policy applies to:

  • Licensed therapists and mental health clinicians who register for and use the Service
  • Clients and individuals who access coping skill cards through the Service
  • Visitors to our website at therapt.ai

2. Information we collect

2.1 Information you provide directly

We collect information you voluntarily provide when you:

  • Create an account: name, email address, professional license number (for therapists), and password
  • Complete your profile: practice name, employer name, logo, and professional credentials (optional for therapists)
  • Submit coping cards: card content, descriptions, clinical rationale, and associated brand materials
  • Contact us: name, email, and message content
  • Subscribe or pay: billing information processed by our third-party payment processor (we do not store full payment card numbers)

2.2 Information collected automatically

When you use the Service, we automatically collect:

  • Usage data: features accessed, cards viewed, session duration, and interaction patterns
  • Device information: IP address, browser type, operating system, and device identifiers
  • Log data: access times, pages visited, and error reports
  • Cookies and similar technologies: session cookies, preference cookies, and analytics identifiers

2.3 What we do NOT collect

CopeSwipe is designed as a psychoeducational tool. We do not intentionally collect:

  • Patient names, dates of birth, Social Security numbers, or other personally identifying patient information
  • Clinical diagnoses, treatment records, session notes, or any clinical documentation
  • Any information that would constitute Protected Health Information (PHI) under HIPAA

3. How we use your information

We use the information we collect to:

  • Provide, operate, and maintain the CopeSwipe app
  • Process therapist registrations and authenticate users
  • Enable therapists to assign coping card decks to clients
  • Display submitted coping cards and associated therapist attribution within the app
  • Send transactional communications such as account confirmations and service updates
  • Send marketing communications where you have consented to receive them
  • Analyze usage patterns to improve the Service and develop new features
  • Enforce our Terms of Service and Submission Terms
  • Comply with applicable legal obligations
  • Facilitate any merger, acquisition, or sale of Company assets

4. How we share your information

4.1 We do not sell your personal information

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

4.2 Service providers

We share information with third-party vendors who assist us in operating the Service, including:

  • Cloud hosting and infrastructure providers
  • Payment processors
  • Email and communication service providers
  • Analytics providers
  • Customer support tools

4.3 Therapist attribution

If you submit a coping card and voluntarily provide your name, credentials, practice name, or logo, this information may be displayed publicly within the CopeSwipe application alongside your submitted card, as described in our Submission Terms & Conditions.

4.4 Business transfers

In the event of a merger, acquisition, financing, or sale of all or a portion of Company assets, your information may be transferred to the successor entity. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

4.5 Legal requirements

We may disclose your information if required to do so by law or in response to a valid legal process, including to meet national security or law enforcement requirements.

5. Cookies and tracking technologies

We use cookies and similar tracking technologies to:

  • Maintain your login session
  • Remember your preferences
  • Analyze how the Service is used
  • Improve performance and user experience

6. Data retention

We retain your information for as long as your account is active or as needed to provide the Service. Specifically:

  • Account data: retained for the duration of your account and for 3 years following account termination
  • Submitted coping card content: retained indefinitely as permitted by our Submission Terms
  • Usage and log data: retained for up to 12 months
  • Payment records: retained as required by applicable tax and financial regulations

7. Data security

We implement commercially reasonable technical and organizational measures to protect your information, including:

  • Encryption of data in transit using TLS 1.2 or higher
  • Encryption of data at rest
  • Access controls limiting employee access to personal data
  • Regular security assessments

8. HIPAA notice — important for therapists

CopeSwipe is designed as a psychoeducational tool and is NOT a HIPAA-covered electronic health record or practice management system.

Therapists are solely responsible for ensuring their use of CopeSwipe complies with all applicable professional licensing requirements, ethical guidelines, and federal and state privacy laws including HIPAA.

  • Do NOT enter any patient name, date of birth, diagnosis, treatment information, or any other Protected Health Information (PHI) into CopeSwipe
  • Do NOT use a patient's real name when assigning or customizing coping cards
  • CopeSwipe does not function as your Electronic Health Record (EHR) and should not be used as one
  • We are not a Business Associate as defined under HIPAA and we do not sign Business Associate Agreements

9. Children's privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at support@therapt.ai and we will delete such information promptly.

For users between the ages of 13 and 17, access to CopeSwipe should be facilitated by a licensed therapist or parent/guardian.

10. Your privacy rights

10.1 All users

Regardless of your location, you have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate personal information
  • Request deletion of your personal information, subject to legal retention requirements
  • Opt out of marketing communications at any time

10.2 California residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act, including the right to know what personal information is collected, the right to deletion, and the right to non-discrimination for exercising privacy rights. To exercise your California rights, contact us at support@therapt.ai.

10.3 European users (GDPR)

If you are located in the European Economic Area, you have rights under the General Data Protection Regulation including the right to access, rectification, erasure, restriction of processing, data portability, and to object to processing. Our legal bases for processing include contract performance, legitimate interests, and consent. Contact us at support@therapt.ai to exercise your rights.

11. Third-party links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party sites you visit.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on our website and updating the Effective Date above. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.