Privacy & Confidentiality Policy

Last updated: March 2026

1. Data We Collect

When you create an Expathy account we collect the minimum information needed to deliver the service:

• Name, email address and timezone
• Questionnaire responses used for therapist matching
• Session booking and payment metadata

2. How We Use Your Data

• Match you with a culturally appropriate licensed psychologist
• Process payments and manage your subscription
• Send transactional emails (booking confirmations, reminders)
• Improve the platform experience through aggregated, anonymised analytics

3. Data Storage & Security

All data is stored in encrypted databases hosted within the EU. Access is restricted by role-based policies and row-level security. Supabase infrastructure provides encryption at rest and in transit.

4. Third-Party Services

We share the minimum necessary data with:

• Stripe — payment processing
• Daily.co — video sessions (no recordings stored)
• Resend — transactional email delivery

We never sell or share your data for advertising purposes.

5. Session Confidentiality

Video sessions are private and end-to-end between you and your therapist. Expathy does not record, monitor or store session content. Therapists are bound by their professional code of ethics and confidentiality obligations.

6. Your Rights

• Request correction of inaccurate information
• Delete your account and all associated data

If you have any questions or concerns regarding our Privacy Policy or the handling of your personal information, please contact us at expathy@expathy.org.

7. Cookies

We use essential cookies only for authentication and session management. No third-party tracking cookies are used.

8. Changes to This Policy

We may update this policy from time to time. Significant changes will be communicated via email or an in-app notice.

---

← Back to Profile