Confidentiality Agreement

Last Updated: 21 June 2025

1. Our Commitment to Confidentiality

At Peacify, we understand that mental health conversations require the highest level of privacy and confidentiality. This agreement outlines our commitment to protecting your personal information and therapeutic communications.

We treat all user interactions with the same level of confidentiality expected in traditional therapeutic relationships, while acknowledging the unique aspects of AI-powered mental health support.

2. Information We Keep Confidential

The following information is considered confidential and protected:

  • All conversations with our AI therapeutic assistant
  • Personal journal entries and reflections
  • Mental health assessments and progress tracking
  • Wellness program participation and outcomes
  • Personal information provided during onboarding
  • Usage patterns and behavioral data
  • Any crisis intervention communications

3. How We Protect Your Information

We implement multiple layers of protection:

  • Encryption: All data is encrypted in transit and at rest using industry-standard protocols
  • Access Controls: Strict employee access controls with need-to-know basis
  • Anonymization: Personal identifiers are separated from therapeutic content where possible
  • Secure Infrastructure: HIPAA-compliant cloud infrastructure and security measures
  • Regular Audits: Ongoing security assessments and compliance reviews
  • Staff Training: All team members receive confidentiality and privacy training

4. Limited Exceptions to Confidentiality

While we maintain strict confidentiality, there are limited circumstances where disclosure may be necessary:

  • Imminent Danger: If there is immediate risk of harm to yourself or others
  • Legal Requirements: When required by law, court order, or legal process
  • Child Protection: Suspected abuse or neglect of minors as required by law
  • Your Consent: When you explicitly authorize disclosure

In such cases, we will only disclose the minimum information necessary and will notify you when legally permitted.

5. AI and Data Processing

Our AI system processes your conversations to provide therapeutic support:

  • Conversations are processed by secure AI models with privacy protections
  • No human staff routinely review your conversations
  • AI training data is anonymized and aggregated
  • Personal conversations are not used to train external AI models
  • All AI processing occurs within our secure, controlled environment

6. Third-Party Services

We work with carefully selected third-party services that meet our confidentiality standards:

  • All third parties sign comprehensive confidentiality agreements
  • Data sharing is limited to what's necessary for service provision
  • Third parties are required to maintain equivalent security standards
  • We regularly audit third-party compliance with our requirements

7. Your Rights and Controls

You maintain control over your confidential information:

  • Access and review your personal data at any time
  • Request corrections to inaccurate information
  • Delete specific conversations or journal entries
  • Export your data before account closure
  • Withdraw consent for certain data processing activities
  • Request account deletion and data removal

8. Data Retention

We retain your confidential information only as long as necessary:

  • Active account data is retained while your account is active
  • Deleted conversations are permanently removed within 30 days
  • Account closure results in data deletion within 90 days
  • Some anonymized data may be retained for research and improvement
  • Legal requirements may extend certain retention periods

9. Breach Notification

In the unlikely event of a data breach affecting your confidential information:

  • We will notify you within 72 hours of discovery
  • We will provide details about what information was affected
  • We will explain the steps we're taking to address the breach
  • We will offer guidance on protecting yourself from potential harm
  • We will report to relevant authorities as required by law

10. Contact and Complaints

If you have concerns about confidentiality or data protection:

  • Email our Privacy Officer: [email protected]
  • Use our secure contact form on the website
  • We will respond to privacy concerns within 48 hours
  • You may also contact relevant data protection authorities

This Confidentiality Agreement is part of our comprehensive Privacy Policy and Terms of Service. By using Peacify, you acknowledge that you have read and understood these confidentiality protections.