Privacy Policy

1. Who We Are

Heal Attachment ("we," "us," "our") provides a somatic attachment healing platform accessible via web and mobile applications. This Privacy Policy explains how we collect, use, store, and protect your personal information.

Heal Attachment is a self-guided education and practice product. It is not emergency care, a licensed therapy service, or a medical provider, and it does not create a clinician-patient relationship.

2. Data We Collect

We collect the following categories of data:

Account Data

• Email address
• Name (first name)
• Authentication provider info (Google account)

Health & Behavioral Data

• Attachment style assessment results
• Mood check-in scores
• Anxiety and regulation state data
• Body map selections
• Journal reflections (free-text entries)
• Crisis and escalation event logs
• Practice session history
• Nervous system regulation state

Usage Data

• Feature usage patterns and event logs
• Subscription status
• Historical partner/couple linkage status, where previously created

Technical Data

• IP address (for consent logging)
• Browser user agent

3. Why We Collect This Data

• Personalisation: To tailor somatic healing exercises, meditations, and insights to your attachment style and emotional state.
• Crisis support: To detect and respond to emotional crisis events with appropriate interventions.
• Progress tracking: To show your healing journey over time.
• Deferred couple features: Partner linking and shared linked-partner exercises are unavailable in the current public launch. Historical linkage data may be retained only under the retention, access, and deletion terms in this policy; it does not enable current partner sharing.
• Service operation: Authentication, subscription management, and email communications.

4. Third-Party Data Processors

We use the following processors to operate the service:

5. Data Retention

We retain your data for as long as your account is active. If you delete your account, all personal data is purged within 30 days in accordance with GDPR requirements.

6. Your Rights

Under GDPR and applicable privacy laws, you have the right to:

• Access: View all data we hold about you.
• Export: Download a copy of your data in JSON format from your Account Settings.
• Erasure: Delete your account and all associated data from your Account Settings.
• Rectification: Correct inaccurate data in your profile.
• Withdraw consent: You may withdraw your consent at any time by deleting your account.

7. Cookies & Tracking

We use essential browser storage for authentication and session management. Analytics services load when a page loads. Before you choose, Google consent mode uses denied analytics and advertising storage, while restricted cookieless or aggregate measurement may still occur. PostHog is configured without session recording or automatic interaction capture.

Choosing Accept enables optional analytics storage and explicit product-usage measurement. Choosing Decline keeps optional analytics storage off. Advertising storage and personalisation stay denied in either case. The choice is saved in your browser so the banner does not reappear on every visit.

8. Data Security

We use encrypted connections, authenticated access, and database access policies to protect stored data. No online service can promise absolute security; contact us if you believe your account or data has been exposed.

9. Children's Privacy

Heal Attachment is not intended for use by individuals under 18 years of age. We do not knowingly collect data from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or an in-app notice. Continued use of the service after changes constitutes acceptance.

11. Contact

For privacy-related inquiries, contact us at: [email protected]