Privacy Policy
Last updated: January 15, 2026
Contents
1. Introduction
Welcome to Sych ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal health information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mental healthcare platform.
By using Sych, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.
2. Information We Collect
2.1 Personal Information
We collect information that identifies, relates to, or could reasonably be linked with you, including:
- Name, email address, phone number, and date of birth
- Account credentials (username and encrypted password)
- Payment and billing information
- Profile information and preferences
2.2 Protected Health Information (PHI)
As a HIPAA-covered entity, we collect health information including:
- Medical history and current symptoms
- Mental health assessments and diagnoses
- Treatment plans and progress notes
- Appointment records and session notes
- Journal entries and mood tracking data
- Communications with healthcare providers
2.3 Technical Information
We automatically collect certain information when you use our platform:
- Device information (type, operating system, browser)
- IP address and location data
- Usage data (pages visited, features used, time spent)
- Log files and analytics data
3. How We Use Your Information
We use your information for the following purposes:
3.1 Providing Healthcare Services
- Facilitate video consultations and messaging with providers
- Maintain your medical records and treatment history
- Process appointments and send reminders
- Enable symptom tracking and journaling features
3.2 Platform Operations
- Create and manage your account
- Process payments and manage billing
- Provide customer support
- Send important service updates and notifications
3.3 Improvement and Analytics
- Analyze platform usage to improve our services
- Conduct research and development (with de-identified data)
- Enhance security and prevent fraud
- Optimize user experience
5. Data Security
We implement robust security measures to protect your information:
5.1 Technical Safeguards
- 256-bit SSL/TLS encryption for data in transit
- AES-256 encryption for data at rest
- End-to-end encryption for video sessions
- Regular security audits and penetration testing
- Intrusion detection and prevention systems
5.2 Administrative Safeguards
- Strict access controls and authentication
- Employee training on HIPAA compliance
- Regular security awareness programs
- Incident response procedures
5.3 Physical Safeguards
- Secure data centers with 24/7 monitoring
- Redundant backup systems
- Disaster recovery plans
6. Your Rights and Choices
Under HIPAA and applicable privacy laws, you have the following rights:
6.1 Access and Portability
You have the right to access and download your health information at any time from your account dashboard.
6.2 Correction
You may request corrections to inaccurate or incomplete health information.
6.3 Deletion
You may request deletion of your account and associated data, subject to legal retention requirements.
6.4 Restriction
You may request restrictions on certain uses or disclosures of your information.
6.5 Accounting of Disclosures
You may request an accounting of disclosures of your health information.
6.6 Opt-Out
You can opt out of marketing communications at any time, though we may still send service-related messages.
To exercise any of these rights, please contact us at privacy@sychapp.com or through your account settings.
8. Children's Privacy
Sych is intended for users 13 years and older. For users between 13 and 18, parental or guardian consent is required. We do not knowingly collect information from children under 13. If we learn we have collected information from a child under 13, we will promptly delete it.
Parents or guardians may review, modify, or delete their child's information by contacting us at privacy@sychapp.com.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:
- Posting the updated policy on this page
- Updating the "Last Updated" date
- Sending an email notification for significant changes
We encourage you to review this Privacy Policy periodically. Your continued use of Sych after any changes constitutes acceptance of the updated policy.
10. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:
Visit our contact page for the available support options.
HIPAA Notice: If you believe your privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services Office for Civil Rights.