← Back to home

Privacy Policy

Last updated: 14 June 2026

1. Who We Are

  • Timely Help is a mental health platform connecting clients with licensed psychologists, psychiatrists, and counsellors. We act as the data controller for the personal data described in this policy.

2. Data We Collect

  • Account data: name, email, phone, province, language preferences, and role.
  • Health data (PHI): session notes, secure messages, mood entries, goals, and prescriptions. These fields are encrypted at rest.
  • Verification documents: NIC and professional registration certificates (practitioners).
  • Usage and security data: audit logs of sensitive actions, login attempts, and device push tokens.

3. How We Use Your Data

  • To provide and operate the service: booking sessions, secure messaging, prescriptions, and clinical tools.
  • To support safe care: practitioners can review client-provided information during sessions and clinical workflows.
  • To secure the platform: authentication, two-factor verification, and fraud/abuse prevention.
  • We do not sell your personal data.

4. Legal Basis & Consent

  • We process health data to deliver care you have requested and with your consent. You can manage notification and consent preferences at any time from your account settings.

5. Data Retention

  • We retain your data for as long as your account is active. Clinical records may be retained longer where required by law or professional obligation.
  • When you delete your account, we anonymize your personal data immediately and permanently purge remaining records after a 30-day recovery window.

6. Your Rights

  • Access & portability: download a copy of all your data from Settings, or via GET /users/me/data-export.
  • Erasure: delete your account from Settings; this anonymizes your PII and schedules permanent deletion.
  • Rectification: update your profile information at any time.
  • Consent control: adjust email and push preferences in privacy settings.

7. Security

  • Health data is encrypted at rest (AES-256-GCM) and in transit (TLS). Access is restricted by role, all sensitive actions are audit-logged, and two-factor authentication is required for practitioners and administrators.

8. Contact

  • For privacy questions or to exercise your rights, contact support@timelyhelp.com.
Privacy Policy — Timely Help | Timely help