Last updated: October 2026
This Privacy Policy explains how Morency Connect ("we", "us") collects, uses, and shares information when you use the App.
1. WHAT WE COLLECT
Account information: name, email address, role, organization affiliation, and any profile information you add.
Health and wellness data: mood entries, habit tracking, journal entries, goals, and other information you enter. If you are a client of a provider, this may constitute protected health information (PHI) under HIPAA.
Clinical records (providers only): session notes, assessments, and other clinical documentation your organization or practice generates.
AI conversation data: messages you send to Ally and Ally's responses.
Technical data: device type, operating system, app version, IP address, and usage analytics.
Consent records: timestamps and versions of agreements you accept.
2. HOW WE USE YOUR INFORMATION
- To provide and operate the App
- To authenticate you and protect your account
- To enable features you choose to use (mood tracking, scheduling, messaging, etc.)
- To generate AI responses via third-party language model providers
- To communicate with you about the service
- To detect and prevent abuse, fraud, and security incidents
- To comply with legal obligations
- To improve the App (in aggregated, de-identified form wherever possible)
We do not sell your personal information.
3. WHO SEES YOUR INFORMATION
Your provider or organization: If you are a client, the therapist, coach, program, or organization you are connected to can see data you generate in the App within the scope you have consented to.
Family members: Family sharing is not available in the App yet.
AI providers: Your Ally requests are processed by Amazon Web Services (AWS Bedrock) to generate responses, under a business associate agreement. AWS does not use them to train its models. If you are a client and you allow AI session prep, your coach's prep requests include information about you that your coach can see in the App; these requests are processed by AWS in the same way.
Service providers: We use third-party infrastructure providers (hosting, database, authentication, and app analytics) who process data on our behalf under written agreements. A current list is available on request.
Legal and safety: We may disclose information if required by law, to protect the safety of users or the public, to respond to valid legal process, or to enforce our Terms.
Business transfers: If Morency Connect is acquired or merged, your information may be transferred as part of that transaction, subject to equivalent privacy protections.
4. YOUR CHOICES
- Access: You can see the data you've entered at any time in the App.
- Export: To request a copy of your data, email support@morencyconnect.com.
- Correction: You can edit some information directly in the App. To correct anything else, email support@morencyconnect.com.
- Deletion: To request the deletion of your account, email support@morencyconnect.com. Clinical records held by a provider may be subject to state-mandated retention periods, often seven or more years.
- Sharing controls: If you are a client, you can change whether your mood and habit check-ins are shared with your care team, and whether AI session prep may be used, in the Sharing screen of your Profile.
- Marketing: You can opt in or out of product emails at signup.
5. HIPAA
If you are a covered entity or business associate under HIPAA, your handling of protected health information on Morency Connect must be governed by a separate Business Associate Agreement (BAA), signed before you enter any protected health information. The BAA prevails over this Privacy Policy for any conflict related to PHI.
6. CHILDREN'S PRIVACY
Morency Connect is not intended for use by children under 13. We do not knowingly collect information from children under 13 except through an account created by a parent or guardian, who confirms this at signup.
For users aged 13 to 17, we require parental or guardian consent. Parents may request access to or deletion of their child's information by emailing support@morencyconnect.com.
7. SECURITY
We use security measures including encryption in transit, access controls, and logs of consent choices and record exports. No system is perfectly secure. In the event of a security incident involving your data, we will notify you as required by HIPAA and applicable state laws.
8. DATA LOCATION AND TRANSFERS
Morency Connect data is stored on infrastructure located in the United States. By using the App, you consent to the processing of your data in the United States, which may have different privacy protections than your country of residence.
9. RETENTION
We retain account and personal data for as long as your account is active and for a reasonable period afterward for legal and operational purposes. Consent records and audit logs may be retained indefinitely to meet legal and compliance obligations. Clinical records are retained per the provider's or organization's legal retention requirements.
10. STATE-SPECIFIC RIGHTS
Residents of certain states (including California, Colorado, Virginia, Connecticut, and others) may have additional rights under state privacy laws, including the right to know what personal information we collect, the right to request deletion, and the right to opt out of certain processing. To exercise these rights, contact us using the information below.
11. CHANGES TO THIS POLICY
We may update this Privacy Policy. When we do, we will require you to acknowledge the update on your next login. The current version is indicated at the top of this document.
12. CONTACT
Privacy questions: support@morencyconnect.com.
By checking the "I have read the Privacy Policy" box at signup, you acknowledge that you have read and understood this Policy.