Privacy Policy

This Privacy Policy explains how Between ("we", "us"), operated by Jack Hazan, collects, uses, and protects your information.

1. Information we collect

• Account information: name, email, password (stored hashed), and for clinicians, a professional licence/order number and practice details.
• Check-in content: the text and voice notes patients submit, mood ratings, and theme tags — this may include sensitive health-related information.
• AI-generated content: if a patient opts in, summaries and theme tags derived from their check-ins.
• Payment information: handled by our payment processor, Stripe. We do not store full card numbers; we store a subscription status and identifiers from Stripe.
• Technical data: session tokens and basic logs needed to operate and secure the service.

2. How we use it

To provide the service (deliver check-ins to the right clinician, generate opt-in summaries and trends), to process subscriptions, to keep the service secure, and to comply with legal obligations. We do not sell your personal information.

3. AI processing and consent

AI analysis is off by default. It runs only after a patient gives explicit, opt-in consent, which can be withdrawn at any time. Patients can view what has been inferred about them and request corrections or deletion. Check-ins can be sent without AI analysis.

4. Who can see your data

• Your clinician: if you were invited to Between by a therapist, your check-ins and any opt-in summaries are visible to that clinician. Self-serve patients (who signed up on their own) have no clinician attached, and their data is not shared with any clinician.
• Service providers: we use processors to run Between, which may include Stripe (payments), and, where configured, providers for email delivery and voice transcription. They process data only to provide their service to us.
• Legal: we may disclose information where required by law.

5. Where data is stored

Between runs on third-party cloud infrastructure and processors, and your information — including check-in content — may be stored and processed in the United States and other countries where these providers operate. Our application and database are currently hosted on Render, and payments are handled by Stripe; where configured, email delivery and voice transcription are handled by additional providers. Because this can involve transferring personal information outside Quebec, we take applicable cross-border requirements into account, including Quebec's Law 25. If you would like details about where your data is stored, contact us at jojo11haz@gmail.com.

6. Your rights

Depending on where you live (including under Quebec's Law 25), you may have the right to access, correct, or delete your personal information, to withdraw consent, and to be informed about automated processing. In the app you can view what's on file, flag an AI summary as inaccurate, and request deletion of your history. To exercise other rights, contact us at jojo11haz@gmail.com.

7. Retention and deletion

We keep personal information only as long as needed to provide the service or as required by law. Patients can delete their check-in history from the app; deleting your account removes associated personal data, subject to any legal retention obligations.

8. Security

We use measures such as hashed passwords, session tokens, and restricted per-account data access. No system is perfectly secure, but we work to protect your information.

9. Children

Between is not directed to children under 18. If you believe a child has provided personal information, contact us and we will address it.

10. Changes

We may update this policy; material changes will be posted here with a new "last updated" date.

11. Contact

Privacy questions or requests: jojo11haz@gmail.com. If you are in Quebec, you may also contact the person responsible for the protection of personal information, Jack Hazan, at jojo11haz@gmail.com.