Headspace

You are agreeing to provide detailed health and wellness information, including therapy session content, to Headspace.

“We will collect the information you provide about your health and wellness as you use our Products or engage with the Services... You may also provide this type of information through the Services, such as talking with your coach or therapist...”

What that means: Highly sensitive mental health conversations and survey results are collected and stored by Headspace.

The policy explicitly collects sensitive mental and physical health data, including interactions with coaches and therapists. While HIPAA-protected for US providers, this data is central to the platform's operation and potential business transfers.

You are agreeing to let Headspace share your identifiers and browsing habits with ad partners for targeted advertising.

“Headspace partners with third parties to manage our advertising on other platforms. For that purpose, we may disclose limited personal information to third parties for our cross-context behavioral and targeted advertising purposes and this activity may fall under broader concepts of “selling” and/or “sharing” under the CCPA.”

What that means: Your personal details may be exchanged with ad partners to show you personalized ads on other sites.

While they do not sell data for direct payment, they classify sharing data for targeted advertising as 'selling' or 'sharing' under California law (CCPA). This applies to identifiers like IP addresses and emails.

You are agreeing to indefinite retention of your personal information based on their internal criteria.

“We will keep your personal information for as long as needed to perform our obligations to you, or for as long as legally permitted. The criteria used to determine our retention periods include: (i) the length of time we have an ongoing relationship with you...”

What that means: Your data stays in their system as long as they deem it necessary for legal or business reasons.

Data retention is tied to your ongoing relationship and legal needs rather than a fixed expiration date once you leave.

You are agreeing to input sensitive demographic information including race and sexual orientation into your profile.

“Profile and demographic information. Through your account in our Product, you may have the opportunity to provide additional information about yourself, such as your age, race and ethnicity, sexual orientation, preferred pronouns, gender or gender identity...”

What that means: You share deep personal demographic details that are often considered sensitive.

Users voluntarily provide highly sensitive demographic data including race, sexual orientation, and gender identity.

You are agreeing to automatic collection of your device data and usage patterns.

“Our Products and Websites may collect information from you automatically during your use which may include: Browser and device data... Usage data, such as time spent on the Products and Websites including pages visited, links clicked, approximate location...”

What that means: Your activity within the app and browser usage is monitored for analytics.

Standard analytics tracking occurs, including device info and usage patterns. Users can opt out via GPC signals.

You are agreeing to accept potential changes to this privacy policy over time.

“We may update this Privacy Policy from time to time... When we may make a significant change... we will notify you within the Platform or through another channel such as the email you supplied during account registration...”

What that means: Privacy rules may shift, though you are notified of major updates.

They can change the policy at any time but promise notice for significant changes via email or in-app.

You are agreeing that the platform is primarily for users 13 and older.

“Our Platform is not intended for individuals below 13 years old... There is a limited exception if you are a parent under a supported employee assistance program (EAP), you may refer your child of at least 6 years old to our Care Providers for in-person care but cannot create an app account for them.”

What that means: Young children might access in-person therapy via parents without direct app account creation.

Children under 13 generally cannot create accounts, but there is a narrow loophole for EAP referrals to in-person care for kids 6+.