Privacy Policy
Updated and Effective: March 28, 2025
INTRODUCTION
Welcome to TalkJoy ("Company," "we," "our," or "us"). TalkJoy is a digital therapy and coaching platform dedicated to connecting individuals with mental health professionals and personal development coaches. We take your privacy seriously and are committed to safeguarding your personal data.
What is this document?
Privacy policies can often feel overwhelming and difficult to navigate. Our goal is to make this policy as clear and accessible as possible. This document outlines how we collect, use, and protect your personal information when you use TalkJoy. If you have any questions while reviewing it, feel free to reach out to us at contact@talkjoy.co.For the purposes of this Privacy Policy, “data” refers to any information linked to an individual or household, including but not limited to name, email address, phone number, device ID, third-party identifiers, contact information, and communications with therapists or coaches using our digital platform (the “Platform”). Some jurisdictions may classify this as “personal data,” “personally identifiable information,” or “sensitive personal data.” By using our app or website, you agree to both our Terms and Conditions and this Privacy Policy, including our use of certain data with service providers to facilitate TalkJoy’s services.
Will this document be updated?
We may update this Privacy Policy from time to time. If we make significant changes, we will notify you through our website or app when you log into your account. We encourage you to review this policy periodically to stay informed about how we handle your data.
Navigating this document
This Privacy Policy is divided into clear sections by topic to help you find the information you need. Below is a list of key topics covered, along with the types of questions each section answers. Simply scroll to the relevant section or use the navigation links (if applicable) to jump directly to the information that interests you.
1
Gathering and processing your data
Does TalkJoy collect, store, or process my data?
Yes, TalkJoy collects and processes certain types of data to operate our platform effectively and provide you with a seamless experience. This includes maintaining platform functionality, facilitating communication, and sending necessary emails or text messages. Some of these communications help deliver services, while others may include marketing updates. You can opt out of marketing messages or text notifications at any time.
If you opt in, we may also process and share specific data with third-party partners for advertising purposes. You can find more details in the relevant sections of our Privacy Policy.
What data does TalkJoy collect and why?
The data we collect depends on how you interact with our website, app, and platform. Below, we outline the types of data we process and the reasons for doing so. We also specify the legal basis for processing, as we may rely on multiple legal grounds.
As highlighted in the table below, we process Therapy and Coaching Data, which may include health, treatment, or coaching-related information necessary for facilitating sessions.
For details on data retention and how to request data deletion, please refer to the “How long does TalkJoy retain my data and how can I request its deletion?” section of our Privacy Policy.
Additional Data Processing for Therapists and Coaches
If you are a therapist or coach on our platform—or in the process of being recruited—we may also process the following types of data to support your onboarding and participation:
• Therapist/Coach Data, Quality Data, Engagement Data, User ID, Onboarding Data, and Account Registration Data to:
• Assist in the recruitment and onboarding process.
• Facilitate client matching based on your expertise and preferences.
• Verify your identity and secure your account.
• Conduct background checks and credentialing as required (for therapy).
• Process payments and comply with relevant tax laws.
• Provide feedback and quality statistics to enhance service delivery.
• Share information about new platform features, opportunities, and incentives.
• Send you notifications, reminders, and updates via email, calls, or SMS.
The legal basis for processing therapist- and coach-related data includes legitimate interest, contract performance, and consent.
Additionally, we may share certain data with service providers to support platform operations and functionality. If you opt in, some data may also be shared with third parties for advertising purposes. For more information, see “What are the purposes for sharing my data?”
Does TalkJoy process location data?
We process IP addresses to determine your approximate location to personalize your experience. For example:
• Displaying relevant information based on your country.
• Auto-filling your state/country during onboarding.
We do not request or process precise GPS-based location data from your device.
We do collect address information when you provide it as part of your emergency contact details during therapy onboarding. This is required to comply with professional and legal standards and may be used in case of an emergency if your therapist believes you are in immediate danger. For convenience, we may also use rough location data to provide autocomplete suggestions when you enter your address.
Additionally, ReCAPTCHA, a security tool used to prevent fraudulent access, processes rough location data based on IP addresses. You can review the ReCAPTCHA Privacy Policy and Terms of Service for more information.
For further details on data processing, refer to:
• Why does TalkJoy collect and process my data?
• Is my data used for advertising?
• Additional Privacy Notice for California Residents
For more details, visit our Privacy Policy or contact our support team.
2
About data sharing
Does TalkJoy share your data?
At TalkJoy, we prioritize transparency regarding how and why we share your data. Here’s an overview of the reasons we may share certain information:
Legal Compliance
Your data may be shared to comply with applicable laws. For example, if a court issues a subpoena, we may be legally required to provide certain information. This is not unique to TalkJoy and applies to both online and in-person therapy and coaching. As a general rule, we defer to your chosen therapist or coach to determine whether to disclose any session notes or private messages you have exchanged with them. Many jurisdictions have strict laws governing therapist-client and coach-client confidentiality. If you have concerns, we recommend discussing them with your therapist or coach early in your sessions.
Who within TalkJoy has access to my data?
To ensure the smooth operation of TalkJoy, we work with trusted third-party service providers that assist with various functions, including:
-
Cloud Hosting and Data Storage Providers: Secure cloud-based platforms such as Amazon Web Services (AWS) store and manage data.
-
Technology Providers: Tools that enable live video, audio, and group meetings within the platform.
-
Customer Service Providers: Secure tools that help us track and manage inquiries from members, therapists, coaches, and visitors.
-
Email Management and Communication Providers: Tools that allow us to communicate with you efficiently and securely.
-
Marketing and Advertising Providers: Agencies that assist with outreach and advertising efforts. These providers can only use data as directed by TalkJoy and are prohibited from disclosing identifiable information.
-
Billing and Payment Processing Providers: Secure platforms such as Stripe help process payments, issue therapist and coach payments, and manage tax documentation.
-
Analytics and Reporting Providers: Services that analyze how users interact with our platform to help us improve functionality.
-
Legal and Business Advisors: Data may be shared with attorneys or advisors to assist with operational and compliance matters.
-
Security and Safety Providers: Some providers help monitor platform security, prevent fraud, and ensure user safety.
How does TalkJoy share data for therapist and coach recruitment?
If you are a therapist or coach applying to work with TalkJoy, we may share certain information with recruitment partners to help facilitate the hiring process. Additionally, if you become a provider on our platform, we may share relevant information—such as your name, credentials, specialties, and qualifications—with insurance providers or accreditation bodies to help with the credentialing process.
Will my data be shared if I receive services through an employer or organization?
If you access TalkJoy through an employer, organization, or business partner, we may share non-identifiable, aggregated usage data with the sponsoring entity. If you are using services through an Employee Assistance Program (EAP), your EAP will provide notice of any individual-level data shared, and you will be required to consent before any data is disclosed. If you have concerns, we recommend reaching out to your EAP directly.
What happens to my data if TalkJoy undergoes a business transaction?
In the event of a business transition, such as an asset sale, merger, or bankruptcy, certain data may be shared or transferred as part of the transaction.
What happens if I share information publicly on TalkJoy?
If you choose to post publicly on the platform, such as in discussion forums, any information you share may be visible to others. Please be mindful of what you post in public spaces.
How does TalkJoy use my data to comply with the law?
When required by law, we cooperate with government authorities. This applies to both therapy and coaching. For example, if a court issues a subpoena, we may be required to provide certain requested information. As a general rule, we defer to your chosen therapist or coach to decide whether to disclose session notes or messages.
Therapists and coaches may also be legally obligated to disclose information if:
-
There is suspected abuse or neglect of a child, elder, or dependent adult.
-
A person is at serious risk of harm to themselves or others.
-
A court orders mandatory disclosure as part of legal proceedings.
If you have concerns, we encourage you to discuss them with your therapist or coach.
Does TalkJoy sell my data?
No, we do not sell your personal data. However, under certain privacy laws, including those in California, some data-sharing activities for advertising purposes may be classified as a “sale.” If you opt into Advertising Cookies, limited data about site interactions (excluding therapy or coaching activity) may be shared with advertising partners.
Is my data used for advertising?
To reach people who may benefit from therapy or coaching, we advertise on third-party websites and apps. If you opt into Advertising Cookies, limited non-personal data (excluding your activity while logged into therapy or coaching sessions) may be used for advertising purposes.
If you use the TalkJoy mobile app:
-
iOS Users: If you allow tracking, your mobile device identifier may be shared with Google for advertising purposes. You can disable this in your device’s privacy settings.
-
Android Users: You can opt out by adjusting the “Sharing Settings” within the app.
Even if you opt into advertising cookies, we do not share personal data, such as session records, therapist or coach messages, or private client communications, with third-party advertisers.
For additional details, please refer to our Third-Party Partner Disclosure List.
3
Data storage, removal, and transfer
How long does TalkJoy retain my data, and how can I request data erasure?
TalkJoy is committed to ensuring that all member and provider data is retained only for as long as necessary to provide relevant services and comply with legal obligations. Below, we outline how long we retain data, as well as how you can request its deletion
How long does TalkJoy retain data?
Certain categories of data may be retained even after you cancel your account or become inactive. This allows for a seamless reactivation should you return and ensures therapists and coaches can reference historical information. Data retention is also necessary for the proper functioning of our platform.
Data Retention Policy
TalkJoy’s retention policies depend on whether a member has engaged in therapy or coaching, whether a request for data erasure has been submitted, and whether data deletion is triggered due to prolonged inactivity.
How can I request data erasure?
You have the right to request that TalkJoy erase your personal data. Here’s how:
-
Self-Service Request
-
Log in to your account and navigate to Menu > My Account (or Account Settings) > My Personal Information.
-
Click the link to request complete erasure of your account and follow the instructions.
-
You will receive an email confirmation within 24 hours of your request.
-
-
Direct Contact
-
If you are unable to access your account, you can contact Member Success for assistance.
-
You may also email drf@talkjoy.co for additional support.
-
We will verify your identity before processing your request.
-
-
Opt-Out Options
-
Visit our opt-out instructions page to modify settings or request data deletion.
-
Are there any circumstances where TalkJoy cannot erase my data?
In some cases, legal or regulatory obligations may prevent us from deleting your data immediately. These include:
-
Pending legal requests or litigation holds: If your data is subject to an active legal request or regulatory requirement, we may be unable to delete it.
-
Compliance with laws and business integrity: Some data must be retained for compliance with health and safety regulations.
-
Clinical Health Records: These are subject to a 10-year retention period before they can be deleted.
-
Records of complaints and data requests: We must retain records of requests related to data deletion and any previous complaints.
If we are unable to comply with your request for erasure, we will provide an explanation, including how we have balanced your rights against our legal obligations.
How can I request a copy of my data?
You can opt out of marketing emails at any time by selecting the unsubscribe link at the bottom of any promotional email you receive from us.
How long does TalkJoy retain business-related data?
For users affiliated with an organization using TalkJoy Business services:
-
Business-related data is automatically deleted three years after the termination of the organization's relationship with TalkJoy or, if no such relationship existed, three years after data collection.
-
To manually request deletion of business-related data before this timeframe, use the “Update Email Preferences”link in the footer of TalkJoy Business emails or the website banner.
Note: Business-related data is separate from member data. If you have both a TalkJoy membership and a TalkJoy Business account, you will need to follow separate processes for data deletion in each category.
For example, an account administrator who also receives therapy or coaching would need to follow the Requesting Data Erasure process for their personal therapy/coaching data and the TalkJoy Business Data Erasure process for their business-related data.
If you have any additional questions about data retention or deletion, please contact us at drf@talkjoy.co.
4
Data security and confidentiality
How does TalkJoy keep my data secure?
At TalkJoy, we follow industry security standards and best practices to protect your data from unauthorized access or disclosure. While internet-based services carry inherent security risks, our platform is designed with your privacy and security in mind. Our infrastructure, encryption technology, and operational processes are continuously updated and maintained to provide a secure environment for therapy and coaching.
TalkJoy has a dedicated team of security professionals who work to ensure that we use advanced technology to safeguard your data. Our Information Security team rigorously tests internal systems, anticipates potential threats, and implements defensive measures to protect against breaches. Some of our key security practices include:
-
End-to-End Encryption: All messages between members and their therapists or coaches are secured with 256-bit encryption to ensure confidentiality.
-
Secure Data Storage: Our servers are distributed across multiple Tier 3 AWS Data Centers for optimal protection and redundancy.
-
Encrypted Databases: All stored data is encrypted and scrambled, making it unusable in the unlikely event of unauthorized access.
-
Secure Browsing Protocols: We use SSL encryption following modern best practices to protect your connection to our platform.
-
Proactive Threat Monitoring: We maintain 24/7 security monitoring and alert systems, combining automated detection with active personnel to respond to potential threats.
Who can see my interactions with my Therapist or Coach?
Your interactions on TalkJoy are designed to remain private between you and your provider:
-
Your therapist or coach can see the messages you send and any worksheets you submit.
-
Journal entries are only visible to your therapist or coach if you opt-in to sharing them.
-
Quality assurance reviews: If you consent, a licensed therapist employed as part of the TalkJoy Clinical Operations Team may review correspondence for quality assurance purposes. This may happen if you raise concerns about your therapist or coach, or if we need to assess a provider’s clinical care.
-
Trust and Safety Review: In rare cases, our internal Trust and Safety or Legal teams may review correspondence if there is reason to believe a security, legal, or fraud issue is occurring with a specific account.
-
No Third-Party Sharing: Messages with your therapist or coach are not shared with any third party. Live sessions are not recorded, and we do not share details of when you message or have a session with your therapist or coach.
How can I protect my own security?
While we implement robust security measures, you should also take steps to protect your information:
-
Beware of Phishing Scams: TalkJoy will never ask for your login credentials or payment details in an unsolicited email or message. Always ensure you are providing information through our secure system.
-
Be Cautious of External Links: Our platform may contain links to third-party websites or services. TalkJoy does not control the privacy policies of external websites, so always review their security measures before sharing information.
Can I sign up for TalkJoy anonymously?
Yes, TalkJoy allows you to maintain a level of anonymity when signing up. When you create an account, we do not require your full name. You can use a nickname instead of your real name. However, you must provide an email address for account verification and communication purposes. If you wish to remain as anonymous as possible, you may choose an email address that does not contain your real name.
If you proceed with therapy or coaching, we will ask for emergency contact information in case your provider believes you or someone else is in immediate danger. Your therapist or coach may also request additional details as required by their professional licensing or accreditation standards.
While we limit the types of required personal information, complete anonymity on any internet-based service is difficult. If you would like to further limit what data is collected, you can adjust your privacy settings, opt out of cookies and tracking, or visit our opt-out instructions page for more information.
How does TalkJoy handle data from children?
TalkJoy does not knowingly collect or solicit any personal data from anyone under the age of thirteen (13), nor do we knowingly allow children under 13 to use our platform. If we become aware that we have collected personal information from a child under 13, we will take immediate action to delete that information. If you believe we have inadvertently collected data from a child, please contact us so we can remove it.
For further details on how TalkJoy processes data, please see:
-
What specific data does TalkJoy process?
-
Does TalkJoy process location data?
-
Why does TalkJoy collect and process my data?
-
How does TalkJoy use cookies and tracking technologies?
5
Data collection:
Cookies & Beacons explained
What are cookies and web beacons?
A cookie is a small data file stored on your device that helps with record-keeping and improves your experience on the platform. Cookies enhance platform performance, personalize your interactions, and may also be used for third-party tracking (as described above). For example, cookies can help you quickly log into TalkJoy without needing to re-enter your credentials every time.
A web beacon (also known as a “pixel”) is a tiny image or embedded code placed on a webpage or email. Web beacons can track when a page is visited or an email is opened and may report this information to a third party. These tools are often used for analytics, advertising optimization, or to understand platform engagement.
Why does TalkJoy use cookies and web beacons?
We use cookies and web beacons to enhance security, improve platform performance, analyze user behavior, and comply with legal requirements. These tools help us deliver a faster, safer, and more personalized experience for members, therapists, and coaches.
To learn more about the specific cookies we use, their purposes, and how to adjust your settings, click here to manage your preferences.
How can I protect my own security?
While we implement robust security measures, you should also take steps to protect your information:
-
Beware of Phishing Scams: TalkJoy will never ask for your login credentials or payment details in an unsolicited email or message. Always ensure you are providing information through our secure system.
-
Be Cautious of External Links: Our platform may contain links to third-party websites or services. TalkJoy does not control the privacy policies of external websites, so always review their security measures before sharing information.
How can I opt out of cookies, web beacons, and other tracking technologies?
If you want to limit tracking, you can visit our opt-out instructions page to disable cookies, web beacons, or remove previously set cookies from your device.
How can I stop receiving marketing emails from TalkJoy?
You can opt out of marketing emails at any time by selecting the unsubscribe link at the bottom of any promotional email you receive from us.
6
Data security and confidentiality
Additional Privacy Notice for California Residents
This Privacy Notice for California Residents supplements the TalkJoy Privacy Policy to comply with the California Consumer Privacy Act (CCPA) of 2018 and the California Privacy Rights Act (CPRA) of 2020.
These California privacy laws grant residents specific rights over their personal information, including notice of the types of data collected, how it is used, and the ability to correct or delete personal information.
What data does TalkJoy collect and process?
The following sections outline the data TalkJoy collects and processes, the purpose for collection, and the sources of such data:
-
What specific data does TalkJoy process?
-
Does TalkJoy process location data?
-
Why does TalkJoy collect and process my data?
-
How does TalkJoy use cookies and web beacons?
-
Based on the CCPA and CPRA definitions, the types of personal information we may have collected within the past 12 months include:
-
Identifiers (e.g., name, email, phone number, IP address)
-
Personal information categories listed under California law (Cal. Civ. Code § 1798.80(e))
-
Protected classification characteristics (as defined by state or federal law)
-
Commercial information (e.g., payment details, services purchased)
-
Internet or similar network activity (e.g., browsing history, platform usage)
-
Geolocation data
-
Sensory data
-
Sensitive personal information
-
Professional or employment-related information
-
Non-public education information (as defined under FERPA)
What data has TalkJoy shared or disclosed?
The data that may have been disclosed for business purposes in the last 12 months includes:
-
Identifiers
-
Personal information categories under California law
-
Protected classification characteristics
-
Commercial information
-
Internet or similar network activity
-
Geolocation data
-
Sensory data
-
Sensitive personal information
-
Professional or employment-related information
-
Non-public education information
For more details, see What are the purposes for sharing my data?
Does TalkJoy sell my data?
TalkJoy does not sell personal data for monetary compensation. However, under the CCPA and CPRA, data sharing for targeted advertising may be considered a “sale” of information. The types of data that may have been shared in the past 12 months for advertising purposes include:
-
Identifiers
-
Commercial information
-
Internet or similar network activity
If you wish to opt out of data sharing for targeted advertising, you can manage your cookie settings here.
What rights do I have under California law?
As a California resident, you have the right to:
-
Know what information TalkJoy has collected about you. Upon verification of your request, you can receive:
-
The categories of personal information collected
-
The sources from which the information was collected
-
The purpose for collecting or sharing the data
-
The categories of third parties with whom the data was shared
-
The specific personal information collected about you
-
-
Request correction of inaccurate personal information. If you find that your data is incorrect, you can request corrections.
-
Request deletion of your data. You may request that TalkJoy delete your personal information, subject to certain legal exceptions.
To exercise your rights, please email us at drf@talkjoy.co. We will verify your request by matching the provided information with our records.
Can I opt out or request data deletion?
Other California Privacy Rights
Under California's “Shine the Light” law (Cal. Civ. Code § 1798.83), you may request details on how we disclose personal information to third parties for direct marketing. To make a request, email drf@talkjoy.co.
Other California Privacy Rights
Yes, you may request data deletion as described in How long does TalkJoy retain my data, and how can I request data erasure? Once verified, we will proceed with deletion in accordance with our legal requirements.
However, some data cannot be deleted if it is required to:
-
Provide services or fulfill contractual obligations
-
Detect and prevent fraud or security threats
-
Debug technical issues
-
Exercise legal rights or comply with free speech protections
-
Comply with legal obligations (e.g., medical record retention laws)
-
Support public interest research, if deletion would prevent the research’s integrity
You can also opt out of targeted advertising by adjusting your cookie settings here.
General Data Protection Regulation (GDPR) and UK GDPR Notice
If you are a resident of the European Economic Area (EEA), the United Kingdom (UK), or Switzerland, TalkJoy processes your data in compliance with the General Data Protection Regulation (GDPR) and UK GDPR.
What rights do I have under GDPR?
If you are in an EU country, the UK, or Switzerland, you have the following rights:
-
Right to Access: Request a copy of your personal data.
-
Right to Rectification: Correct inaccuracies in your personal data.
-
Right to Erasure: Request that we delete your data in certain circumstances.
-
Right to Data Portability: Request that your data be transferred to another service provider.
-
Right to Object: Object to data processing for marketing purposes or in certain other contexts.
-
Rights Related to Automated Decision-Making: If applicable, you can request human intervention in automated decision-making.
To exercise your GDPR rights, contact us at drf@talkjoy.co.
Does TalkJoy transfer data internationally?
TalkJoy’s servers are located in the United States. Data transfers from the EU, UK, and Switzerland to the U.S. comply with the EU-U.S. Data Privacy Framework (DPF), ensuring high data protection standards. If data is transferred to countries outside the EEA without an adequacy decision, TalkJoy applies standard contractual clauses (SCCs) or obtains explicit user consent to ensure legal compliance.
For more details, visit Data Privacy Framework.
How to Contact TalkJoy’s Data Protection Officer
If you have concerns regarding your data privacy, you may contact:
TalkJoy Data Protection Officer Email: drf@talkjoy.co
If you are in the UK or EU, you may also lodge a complaint with your country’s Data Protection Authority (DPA).
For additional details on your privacy rights and TalkJoy’s data practices, please review our Privacy Policy.