Thinking Healthy Privacy Policy

1. Introduction

Welcome to Thinking Healthy. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy outlines how we collect, use, and safeguard your data when you use our maternal mental health application.

Thinking Healthy is developed and maintained by Upstate Medical University to support pregnant and postpartum mothers with evidence-based mental health resources and wellness tracking.

2. Information We Collect

Personal Information: Name and email address for account creation
Health Data: Mood tracking, energy levels, wellness check-ins, and practice work completion
User Content: Notes, journal entries, and responses to educational modules
Photos: Optional profile pictures (stored securely in Firebase Storage)
Usage Data: App feature usage, module completion, and navigation patterns
Device Information: Device type, operating system, and app version for technical support

3. How We Use Your Information

App Functionality: To provide wellness tracking, educational content, and personalized features
User Authentication: To securely identify you and protect your account
Data Visualization: To display your wellness trends and progress over time
Communication: To send important app updates or security notifications (if you opt-in)
Research: Anonymized, aggregated data may be used for maternal health research (opt-in only)
Legal Compliance: To comply with legal obligations and protect our rights

4. Data Sharing and Disclosure

We do not sell your data to third parties.

Limited sharing occurs only in the following circumstances:

Healthcare Providers: Only if you explicitly choose to share your data with your healthcare team
Community Health Workers: CHWs who generated your credentials may view your progress to provide support
Service Providers: Firebase (Google Cloud) for secure data storage and authentication
Legal Requirements: We may disclose information if required by law or to protect legal rights
Emergency Situations: To prevent harm or in response to crisis situations

5. Data Security

Encryption: All data is encrypted in transit (HTTPS/TLS) and at rest
Firebase Security: Google Cloud infrastructure with HIPAA-compliant capabilities
Secure Authentication: Firebase Authentication with industry-standard security
Local Encryption: Sensitive data stored locally on your device is encrypted
Access Controls: Role-based access with strict permissions
Regular Audits: Periodic security reviews and updates

Note: No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Your Rights

Access: Request a copy of your personal information
Correction: Update or correct inaccurate information
Deletion: Request deletion of your account and data at any time
Export: Download your data in a portable format
Opt-Out: Decline participation in research or marketing communications
Revoke Consent: Withdraw consent for data processing

To exercise these rights, contact us at ramanats@upstate.edu or use the in-app settings.

7. Data Retention

Active Accounts: Data is retained while your account is active
Deleted Accounts: Data is permanently deleted within 30 days of account deletion
Legal Requirements: Some data may be retained longer if required by law
Anonymized Research Data: May be retained indefinitely in de-identified form

8. Children's Privacy

Thinking Healthy is designed for adults (18+). We do not knowingly collect information from children under 13. If you are under 18, please use this app with parental or guardian supervision.

9. Third-Party Services

Firebase (Google Cloud): Authentication, database, storage, and analytics
Crisis Hotlines: Links to external crisis support services (988, PSI Helpline)
External Resources: Links to maternal health websites and organizations

These third parties have their own privacy policies. We recommend reviewing them.

10. International Users

Our services are hosted in the United States. If you access the app from outside the U.S., your data will be transferred to and processed in the United States.

11. HIPAA Compliance

Healthcare providers using this app should ensure a Business Associate Agreement (BAA) is in place
Individual users should be aware that certain features may create electronic Protected Health Information (ePHI)
For healthcare provider inquiries about HIPAA compliance, contact ramanats@upstate.edu

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:

Posting the new Privacy Policy in the app
Updating the "Last Updated" date above
Sending an email notification (if you've opted in)
Displaying an in-app notification

Your continued use of the app after changes constitutes acceptance of the updated policy.

13. Medical Disclaimer

Important: Thinking Healthy is not a substitute for professional medical advice, diagnosis, or treatment. Always seek the advice of your physician or other qualified health provider with any questions you may have regarding a medical condition.

Crisis Support: If you are experiencing a mental health crisis, please call:

988 - Suicide & Crisis Lifeline
1-833-943-5746 - PSI Maternal Mental Health Hotline
911 - For life-threatening emergencies

14. Contact Us

Email: ramanats@upstate.edu
Organization: Upstate Medical University
Address: 750 East Adams Street, Syracuse, NY 13210
Phone: (315) 464-5540

15. California Privacy Rights

Right to know what personal information is collected
Right to know if personal information is sold or disclosed
Right to opt-out of the sale of personal information (we don't sell data)
Right to request deletion of personal information
Right to non-discrimination for exercising privacy rights