Privacy Policy

Choiceful, Inc. (collectively, “Choiceful”, “we”, “us”, “our”) is in the business of providing AI guided OCD support. Choiceful is the creator of the Choiceful website located at https://www.choicefulocd.com (the “Website”), and other related websites and platforms including the Choiceful application (collectively, the “Platform”). The Choiceful Website and Platform including all relevant content, products, services, features, applications and functionality associated with the Website and Platform and any other affiliated software or application owned by Choiceful Health, Inc., are collectively referred to as the “Services.”

We are committed to protecting your Personal Information (as defined below) and making sure you understand your rights related to our use and disclosure of such information while providing Services to you. Your access and use of the Platform, any part thereof, or anything associated therewith, including its content (“Content”), any products or services provided through the Platform or Website or otherwise by Choiceful, and any affiliated website, software or application owned or operated by Choiceful (collectively, the “Services”) are subject to this Privacy Policy unless specifically stated otherwise. Capitalized terms not otherwise defined in this Privacy Policy have the same meaning as set forth in the Terms of Service.

In keeping with this commitment, this Privacy Policy describes:

• Personal Information that we receive from you when you interact with the Services, including search queries on the Platform
• How we use and process the Personal Information that we receive
• If and why Personal Information may be disclosed to third parties
• Your choices regarding the collection and processing of your Personal Information

When you access the Services or send your Personal Information to us via email, text messages, or other electronic messages, you consent to receive communications from us, in accordance with this Privacy Policy.

Please read this Privacy Policy carefully. If you don't agree with this Privacy Policy, do not use our Services. By accessing or using our Services, you agree that you have read this Privacy Policy and you understand, and consent to be bound by, the terms and conditions herein. If you have not done so already, please also review our Terms of Service. The Terms of Service contain provisions that may limit our liability to you. If you are using the Services on behalf of an individual other than yourself, you represent that you are authorized by such individual to act on such individual's behalf and that such individual acknowledges and agrees to the terms and conditions herein.

We reserve the right to amend this Privacy Policy at any time. We will notify you and/or require you to accept the updated Privacy Policy only if the supplemented, amended or otherwise modified Privacy Policy implements material changes from Choiceful's then-current Privacy Policy. It is your responsibility to carefully review this Privacy Policy each time you visit, access or use the Service.

Choiceful may provide you with notices, including those regarding changes to this Agreement, using any reasonable means now known or hereafter developed, including by email, regular mail, SMS, MMS, text message, or postings on the Website or Platform. Such notices may not be received if you violate this Agreement by accessing the Website or Platform in an unauthorized manner. You agree that you are deemed to have received any and all notices that would have been delivered had you accessed the Services in an authorized manner. We will not make retroactive changes that reduce your privacy rights unless we are legally required to do so.

Your continued use of our Services after we make changes shall constitute your acceptance of those changes, so please check this Privacy Policy periodically for updates.

The amended Privacy Policy supersedes all previous versions.

The Personal Information we collect depends on how you interact with us, the portions of the Service you use, and the choices you make. We receive and collect information that you directly submit to us or that we gather when you use our Services or interact with our advertising and applications on third-party websites and services, including:

1. Personal information such as your name, mailing address, telephone number, email address, demographic information (e.g., age, gender, ethnicity), payment information, communications via text and email, and third-party website, network, platform, server and/or application information, and other identifiers or commercial information you provide to us or that we collect in connection with your use of the Services.
2. Non-personal information such as IP addresses and device information, usage data, including information that is passively or automatically collected through cookies, your browser or device, or other services, and information from third parties, and information we create or generate; provided, however, that where applicable law treats such data as Personal Information, Sensitive Personal Information, or consumer health data, we will treat it in accordance with applicable law.
3. Inferences from other data we collect, including using automated means to generate information about your likely preferences or other characteristics. For example, we may infer your general geographic location (such as city, state, and country) based on your IP address. We may also collect information on your precise physical location, which may be provided by you or collected through the use of our Website, Platform, or other communication channels.
4. Personal information related to your health that we collect or infer in connection with providing, administering, improving, securing, and evaluating your eligibility for Services, including additional services, and for related business purposes such as fraud prevention, analytics, and compliance (“Healthcare Information”). To the extent required by applicable law, this category may also include “consumer health data.” In this Privacy Policy, we refer to all of the above as “Personal Information.”

When you are asked to provide Personal Information, you may decline, and you may use web browser or operating system controls to prevent certain types of automatic data collection. Some of the information identified above, including precise geolocation information, identification document information, and biometric information, may be considered Sensitive Data under certain laws. If required under applicable law, we will collect and process sensitive personal data only with your consent. But if you choose not to provide or allow information that is necessary for certain services or features, those services or features may not be available or fully functional.

Cookies are small text files placed by a website and stored by your browser on your device. A cookie can later be read when your browser connects to a web server in the same domain that placed the cookie. The text in a cookie contains a string of numbers and letters that may uniquely identify your device and can contain other information, as well. This allows the web server to recognize your browser over time, each time it connects to that web server.

Web beacons are electronic images (also called single-pixel or clear GIFs) that are contained within a website or email. When your browser opens a webpage or email that contains a web beacon, it automatically connects to the web server that hosts the image (typically operated by a third party). This allows that web server to log information about your device and to set and read its own cookies. We may also include web beacons in our email messages or newsletters to tell us if you open and act on them.

Mobile analytics and advertising IDs are generated by operating systems for mobile devices (iOS and Android) and can be accessed and used by apps in much the same way that websites access and use cookies. Our apps contain software that enables us and our third-party analytics and advertising partners to access these mobile IDs.

We may use automated, machine learning, generative artificial intelligence, or similar technologies, including conversational assistants, support chatbots, companion-style chat features, transcription, summarization, recommendation, classification, scheduling workflow automation, and decision-support tools (collectively, “AI Features”), in connection with the Services.

Where applicable under this Privacy Policy and relevant law, Personal Information includes information processed through those features, including prompts, messages, files, documents, images, audio, video, recordings, transcripts, metadata, and other information you or authorized users provide or submit to those AI-enabled features (collectively, “AI Inputs”). AI Features may generate responses, summaries, transcripts, notes, recommendations, classification, scheduling, workflow automation, and decision-support tools, as well as analyses and other content (collectively, “AI Outputs”).

We and our third-party partners, including large language models accessed through AWS Bedrock (including Claude, developed by Anthropic), may use and process AI Inputs, AI Outputs, and related Personal Information to provide, maintain, support, secure, and improve the Services and AI-enabled features; generate requested outputs; troubleshoot and debug; monitor performance; and detect misuse, fraud, and security incidents. AWS Bedrock does not use your data to train, fine-tune, or evaluate underlying AI models.

Your rights and choices regarding such processing, including any rights to access, correct, delete, restrict, object to, opt out of, or withdraw consent for certain processing, are described in the “Your Rights” section of this Privacy Policy and may also be exercised by contacting us at support@choicefulOCD.com, in each case to the extent provided by applicable law.

Choiceful processes your Personal Information for legitimate business purposes, the fulfillment of our services to you, compliance with our legal obligations, and/or your consent. We use Personal Information to:

• Fulfill the reason for which you shared such information. For example, if you enter your payment information, we will use it to process a payment, manage your subscription, and process renewals
• Provide you with information, products, or services you request
• Communicate with you about and manage your account
• Understand you and your preferences to enhance your experience and enjoyment using our services
• Properly store and track your data within our system
• Determine your eligibility for the products and services available through the Services, including confirming your location
• Respond to lawful requests from public and government authorities, and to comply with applicable state/federal law, including cooperation with judicial proceedings and court orders
• Protect our rights, privacy, safety, or property, and/or that of you or others by providing proper notices, pursuing available legal remedies, and acting to limit our damages
• Manage and improve our operations, the Services, including the development of additional functionality
• Evaluate the quality of service you receive, identify usage trends, conduct research, and improve your experience
• Personalize your therapeutic experience, including adapting treatment content, modules, and AI interactions based on your progress and reported symptoms
• Identify patterns that may indicate therapeutic risk, including safety behaviors or reassurance-seeking, in order to provide more effective support
• Send you push notifications, in-app messages, and other communications related to your treatment progress and engagement with the Services
• Develop, test, add to, or improve the Services and content, features and/or products or services offered via the Service, and identify or create new products or services
• Keep our Services safe and secure
• Send you information about changes to our terms, conditions, and policies
• Carry out our obligations and enforce our rights arising from any contracts entered into between users and us, including for collection of payments
• Provide you with email alerts, event registrations, and other notices concerning our products or services, or events or news, that may be of interest to you
• Testing, research, analysis and product development

In some states, we may be required to obtain your consent prior to collecting and using certain sensitive Personal Information that constitutes Healthcare Information. See the “Your Rights” section, below.

We may de-identify your information and use, create and sell such de-identified information for any business or other purpose not prohibited by applicable law.

We may use your Personal Information to contact you with offers, promotions, and other marketing communications. You may opt out of receiving these messages at any time by following the unsubscribe link within the applicable message or by contacting us at support@choicefulOCD.com.

By opting to use the Services provided by Choiceful, you consent to receive SMS (text) messages from Choiceful, its affiliates, and its partners pertaining to your account, services you have requested, and your interaction with Choiceful's Services. These messages may include, but are not limited to, appointment reminders, updates on services, promotional offers, and information relevant to your account and services.

You acknowledge and agree that:

1. You are the owner of the mobile device you used in order to initiate the SMS Enrollment and that you are authorized to consent to receive and pay for messages at that number
2. SMS messages may be sent using automated technology
3. You do not have to consent to receive SMS messages as a condition of purchasing any goods or services
4. Standard message and data rates may apply to any SMS messages sent or received
5. The frequency of messages varies — you may receive messages periodically based on your interaction with Choiceful's Services
6. Choiceful shall not be liable for delayed or undelivered messages

To opt out of SMS messages at any time, reply “STOP” to any message you receive. Upon receiving your request, we will send you a confirmation message and cease sending you SMS messages. For assistance or more information, reply “HELP.”

If you are experiencing any issues with Choiceful's text messaging or email services, please contact us directly at support@choicefulOCD.com.

We may use the following analytics program(s) to collect information about you and your behaviors as a consumer. To learn more about the analytics program(s) and how you can opt out of information sharing, see below.

1. Facebook: Privacy Policy • Opt Out Settings
2. Google Analytics: Privacy Policy • Opt Out Settings
3. Reddit: Privacy Policy • Opt Out Settings

You can also use third party opt-out controls such as NAI and DAA.

We do not sell, share, or otherwise disclose your Personal Information for reasons other than those described in this Privacy Policy.

We may disclose your Personal Information to a few third parties, including:

• Our parent company, subsidiaries and affiliates
• The third-party service providers, contractors, subcontractors, and business associates we use to support our business (e.g., AWS, AWS Bedrock, PostHog, Sentry, and other cloud providers, LLM providers, and marketing partners)
• Law enforcement or government agencies in order to protect the security, safety, and rights of our users and ourselves or when we believe that doing so is necessary to comply with applicable law or respond to valid legal process
• Marketing and advertising partners, including marketing analytics vendors, in compliance with applicable law
• To any company we might merge with or acquire, or that acquires us, or in the event of structural change of our company of any form (e.g., a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding)

We may also disclose, without restriction, aggregated information about our users and information that does not identify any individual user. Our continued use of aggregated and de-identified data will comply with applicable law.

Some cookies on our Site are placed by third parties, such as analytics providers, advertising networks, and social media platforms. These third parties may collect information about your online activities over time and across different websites. We do not control these third party cookies, and their use is governed by the privacy policies of the respective third parties.

You can access, review and update or change your account information through our Services. If you have any questions about how to access other Personal Information, or if you would like to correct or delete any Personal Information we collect and maintain, please contact us at support@choicefulOCD.com.

For Residents of Washington please review our Washington Privacy Policy. For Residents of California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia, ONLY:

We retain Personal Information as long as it is necessary and relevant for our operations. We also retain Personal Information from closed accounts to comply with applicable law, prevent fraud, resolve disputes, troubleshoot problems, assist with investigations, enforce our Terms of Service, collect any fees owed, and take other actions permitted by law. After it is no longer necessary for us to retain information, we dispose of it according to our Data Retention Policies.

We strive to use industry-standard data collection, storage, and processing practices and security measures to protect against any unauthorized access to, accidental loss of, or disclosure of your information. These safeguards may vary based on the sensitivity of the information that we collect and store.

Remember, no security method or combination of methods is foolproof. We will always do our best and will work with third-party service providers that strive to do the same, but we cannot warrant or guarantee the absolute security of any Personal Information that may be transmitted to or from our Services. There is no guarantee that Personal Information may not be accessed, disclosed, altered, or destroyed by breach of any of our physical, technical, or managerial safeguards. Therefore, any transmission of Personal Information is at your own risk.

We are not responsible for any interception or interruption of any communications through the internet or for changes to or losses of data. You are responsible for maintaining the security of any password, user ID or other form of authentication involved in obtaining access to password protected or secure areas of our Services.

Please note that we will never send you an email requesting confidential information, such as account numbers, usernames, passwords, or Social Security Numbers.

In the event of a data or security breach, we will: (i) promptly investigate the security incident, validate the root cause, and, where applicable, remediate any vulnerabilities; (ii) comply with laws and regulations directly applicable to us in connection with such security incident; (iii) cooperate with any affected user in accordance with the terms of our contract with such user; (iv) document and record actions taken in connection with the security incident; and (v) conduct a post-incident review and actions/recommendations to prevent similar incidents in the future. We will notify you of any data or security breaches as required by and in accordance with applicable law.

We may retain your Personal Information for as long as necessary for our business purposes, or as required to comply with our legal obligations, resolve disputes, and enforce our agreements. We reserve the right to retain and use your information as necessary to provide our Services and fulfill our business operations. We may dispose of or delete any such information at our discretion, subject to any other agreement you may have with us or as required by applicable law.

Our Services may contain links to third-party websites, services, applications, or other resources not operated by us (“Third Party Services”). Any information you provide to these parties is not subject to the terms of this Privacy Policy. It is your responsibility to review these policies, as they govern how these third parties handle your Personal Information.

This Privacy Policy does not address, and we are not responsible for, the privacy, information, or other practices of any Third-Party Service. The inclusion of a link on the Services does not imply our endorsement of the linked site or service.

We are not responsible for the information collection, use, disclosure, or security policies or practices of other organizations, such as Facebook, Twitter, Instagram, YouTube, Pinterest, LinkedIn, Apple, Google, Microsoft, or any other app developer, app provider, social media platform, operating system provider, wireless service provider, or device manufacturer, including any Personal Information you disclose to other organizations through our Website, Platform, or social media pages.

Our Services are intended for users who are 18 years of age or older. We do not knowingly collect Personal Information from anyone under the age of 18. If you are under 18, please do not use our Services or provide any Personal Information to us. If you are a parent or guardian and believe that your child has provided Personal Information to us, please contact us immediately at support@choicefulOCD.com and we will take steps to delete such information.

We may send communications, including emails, to you using your Personal Information. You may opt out of receiving certain communications (e.g., newsletters, promotions) by emailing us your preference. However, even if you opt out, we may still send you communications necessary to provide ongoing services you request from us.

We will only send you offers, promotions and other marketing communications if you have expressly agreed to receive those types of messages. If you agree to receive these communications, but later change your mind and wish to opt-out, you may do so by emailing support@choicefulOCD.com.

We are located in the United States. We may store and process your Personal Information in any country where we have facilities or in which we engage service providers. By using the Services, you understand that your information may be transferred to countries outside of your country of residence, including the United States, which may have data protection rules that are different from those of your country.

If you'd like to receive additional information about our privacy practices, have questions, or would like to make a request, you may contact us at: