BWH99 LLC / TherapyTrack, Last Updated: July 31, 2026
TherapyTrack is a mobile mental health journaling application developed and operated by BWH99 LLC, based in New York. You can reach us at info@jointherapytrack.com.
This Privacy Policy applies to all users of the TherapyTrack mobile application. TherapyTrack is intended for users 18 years of age and older. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that a user is under 18, we will take steps to remove their information and terminate their access.
TherapyTrack is available to users in the United States and Canada. This policy addresses the requirements of applicable US federal and state law, including the California Consumer Privacy Act (CCPA/CPRA) and the FTC Health Breach Notification Rule, as well as Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
We collect only the information necessary to provide the TherapyTrack service.
Account Information: When creating an account, you may provide:
Demographic Information: TherapyTrack may collect limited demographic information you voluntarily provide, such as age range, gender identity, and general location (state or region). This information is stored in our database (Google Firestore) in connection with your account, and administrators with database access are technically able to view it in association with a specific user. We use this information in aggregate to understand and improve our user community, and it is not linked to your journal entries, mood data, or other sensitive content. It is never used for advertising.
User-Generated Content: The core of TherapyTrack is content you create and store, including:
This content is entered voluntarily, stored securely, and used only to provide the app's features to you.
Voice and Audio Data: TherapyTrack includes a voice-to-text feature within the session notes section. When you use this feature, your audio is processed by Deepgram, a third-party speech-to-text service. Audio is transcribed and the resulting text is stored in your journal. See Section 6 for details on how Deepgram handles your data.
AI-Generated Insights: TherapyTrack uses an AI-powered Insights feature that analyzes patterns in your mood entries, session notes, and assessment scores to generate personalized reflections. This feature is powered by Google Cloud Vertex AI, a HIPAA-eligible AI service. Content you have entered into the app is processed by this service to generate your insights. See Section 6 for details.
Technical Information: To maintain and improve the app, we may collect limited technical data including device type, operating system, app version, and crash reports. This data is used for operational purposes only.
Your information is used to:
Sensitive user-generated content, including journal entries, mood data, session notes, assessments, and medication history, is never used for advertising purposes. We do not sell or rent your personal data to any third party.
We take the security of your data seriously. TherapyTrack uses Google Firebase as its cloud infrastructure. Firebase encrypts data at rest and all data transmitted between the app and our servers is protected using HTTPS/TLS encryption in transit.
Access to user data is restricted through Firebase Security Rules, which are configured so that each user can only access their own data. Access to our systems is limited to authorized personnel only.
However, no electronic storage system can be guaranteed to be completely secure. We encourage you to use a strong password and to contact us immediately if you suspect any unauthorized access to your account.
Local Biometric Security: To help protect your information if your device is lost, stolen, or left unattended, TherapyTrack requires you to verify your identity with Face ID, Touch ID, or a PIN if the app has been inactive for 5 or more minutes, or whenever you close and reopen it. This verification is performed entirely on your device by your device's operating system (Apple or Android). TherapyTrack does not receive, store, transmit, or otherwise have access to your biometric data at any point.
TherapyTrack relies on the following third-party services to operate. Each may receive certain user data as necessary to provide their function. We require all providers to maintain appropriate security standards.
Google Firebase: Our primary cloud infrastructure provider, used to store and manage user data. Data is encrypted at rest and in transit. See Google's Privacy Policy.
Deepgram: Provides voice-to-text transcription for the session notes microphone feature. When you use this feature, audio is transmitted to Deepgram's servers for processing. Deepgram is configured for our account with data retention and training opt-out settings appropriate for health-adjacent data. See Deepgram's Privacy Policy.
Google Cloud Vertex AI: Powers the AI Insights feature. Content from your mood entries, session notes, and assessments is processed through Vertex AI, a HIPAA-eligible service, to generate personalized insights. See Google Cloud's Privacy Notice.
RevenueCat: Manages TherapyTrack's subscription infrastructure. RevenueCat receives information necessary to process and manage your subscription only. It does not receive your journal content or health data. See RevenueCat's Privacy Policy.
We do not share your personal information with any other third parties except as required by law or as described in this policy.
TherapyTrack does not share your personal information with therapists, providers, or any third parties without your direct action. Your data may only be disclosed in the following limited circumstances:
Users may choose to export or share their content manually outside of the platform at their own discretion.
In the event of a data breach that may compromise your personal information, BWH99 LLC will notify affected users in accordance with the FTC Health Breach Notification Rule and any applicable state breach notification laws. This notification is a business obligation carried out by BWH99 LLC as the operator of TherapyTrack, not an automated feature of the app itself. Notification will be provided without unreasonable delay and will describe the nature of the breach, the data affected, and the steps we are taking in response.
User data is retained for as long as your account is active or as necessary to provide the service. If you delete your account, all associated personal data is deleted from our active database (Google Firestore) immediately upon your confirmation of the deletion request within the app, subject to any legal obligations that may require us to retain certain records.
You may request deletion of your account and associated data at any time through the app or by contacting us at info@jointherapytrack.com.
All users of TherapyTrack have the right to:
California Residents (CCPA/CPRA): If you are a California resident, you have additional rights under the California Consumer Privacy Act:
To exercise any of these rights, contact us at info@jointherapytrack.com. We will respond to verified requests within 45 days as required by law.
Canadian Residents (PIPEDA): If you are a Canadian resident, you have rights under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), including the right to access the personal information we hold about you, to correct inaccurate information, and to withdraw consent to our collection and use of your data. Contact us at info@jointherapytrack.com to exercise these rights.
TherapyTrack does not provide therapists, life coaches, or any other providers with direct access to your account or data. If you choose to share information with a provider, that sharing happens manually at your discretion outside of the app.
TherapyTrack is intended for users 18 years of age and older. We do not knowingly collect personal information from individuals under 18. If we become aware that a user under 18 has created an account, we will terminate that account and delete the associated data.
We may update this Privacy Policy periodically to reflect changes in our practices or applicable law. When we make material changes, we will notify users within the app and update the effective date at the top of this policy. Your continued use of TherapyTrack after a policy update constitutes your acceptance of the revised policy.
If you have questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us:
BWH99 LLC / TherapyTrack
info@jointherapytrack.com
jointherapytrack.com