7 Cups Privacy Policy

Effective Date: May 15, 2020

7 Cups ("7 Cups," "we," "us" and "our") provides virtual mental health care services intended to increase access to emotional and social support, and to promote early detection of mental health symptoms. Privacy is extremely important to us, so we have taken several steps to protect your information and put you in control.

This privacy policy ("Privacy Policy") describes how we collect, use, disclose and store Personal Information you provide to us through the website and mobile application tools that provide the services described above (collectively, the "Services"). Please review this Privacy Policy carefully and in its entirety. If you have questions about this Privacy Policy, you can contact us at privacy@7cups.com.

This Privacy Policy describes:

• The Personal Information we collect when you interact with the Services;

• How we use and process the Personal Information that we collect;

• How we may share Personal Information with third parties; and

• The security of your Personal Information.

1. Acceptance of the Privacy Policy

PLEASE REVIEW THIS PRIVACY POLICY CAREFULLY. When you submit your Personal Information to or through the Services, you consent to the collection and processing of your Personal Information as described in this Privacy Policy. By using the Services, you accept the terms of this Privacy Policy, and our Terms of Use.

2. Effective Date and Changes to Privacy Policy

The Effective Date of this Privacy Policy is set forth at the top of this Privacy Policy. We may change this Privacy Policy from time to time at our discretion and when required by law, we will notify you of changes to this Privacy Policy. Material changes will be posted to this page and will be emailed to registered users. Your continued use of the Services after the Effective Date constitutes your acceptance of the amended Privacy Policy. The amended Privacy Policy supersedes all previous versions.

3. Personal Information We Collect

We require certain Personal Information to provide our Services to you. "Personal Information" may include contact information such as your first name, last name, email address, location, phone number, certain demographic information such as age, gender, race ethnicity, primary language spoken, sexual orientation, disabilities, and veteran status, information about your health and medical history that you may input while using or communicating through the Services, and information about how you interact with and use your device. Personal Information that has been anonymized is not Personal Information as it does not allow for a specific individual to be identified.

Listening and Therapy Chat Transcripts. While we generally do not monitor transcripts of chats between users and Listeners and Therapists, we may occasionally review the chat transcripts to conduct quality control, address potential safety issues, and prevent misuse of our platform, if certain suspicious or potentially harmful activity is detected. We may also use aggregated data from chat transcripts to conduct research and development. In reviewing this information, 7 Cups will maintain all applicable confidentiality/HIPAA/privacy standards.

Without providing your Personal Information you may not access Services through 7 Cups, contact or correspond with us, other users, therapists or other health care providers via the Services, or utilize the therapy exercises and programs available on the Services.

• Account Setup. When you sign up for an account with us, we ask for and collect Personal Information such as your name, a valid email address, phone number, birthdate and address. We need this information to provide you with the Services.

• Paid Services. If you purchase paid services, such as therapy or other upgrades, Personal Information such as billing name, address and credit card payment information will be collected to process payment.

• Listener and Therapist Applicants. If a visitor wishes to apply to be a Listener or Therapist on 7 Cups’ Listening Platform, the visitor will be required to submit Personal Information as requested. Any Personal Information supplied by or on behalf of a visitor for purposes of becoming a Listener or Therapist will be maintained by 7 Cups. Please note that 7 Cups may have additional privacy terms that apply to Listeners or Therapists. Such terms will be made available when an applicant applies to be a Listener or Therapist or otherwise accesses their account.

• Mental Health Services. We collect your Personal Information when you access mental health services through our Services, when you contact or correspond with us, therapists or other health care providers via the Services or when you utilize the therapy exercises and programs available on the Services.

• Public Forums, Chats, or Other Features. Depending on how you interact with the Services, you may share your Personal Information with other Users, such as peers and other users who participate in chat, forums or other non-private locations. Anything users post in the public forums, chats, or other features will be accessible to other users and may not be able to be deleted. Accordingly, 7 Cups strongly discourages posting any Personal Information in these places and it is your responsibility not to share Personal Information in such non-private location.

• Log Data. When you use our Services, we store, process and transmit your information about how you use our Services to engage, educate and suggest behavioral activation strategies to you.

• Surveys. From time to time we may collect Personal Information from users via surveys. This information is used to improve the content of our web pages, the quality of our Services.

• Assessments. Periodically, 7 Cups will offer the opportunity to assess your emotional wellness based on questionnaires where you will be asked to provide Personal Information. It is your choice to participate in these assessments; not participating will not prevent you from participating in any other aspect of the Services offered.

• Requests for Information, News and other Content. You may sign up to receive information, news and other content related to new and existing products and services related to 7 Cups’ Sites, 7 Cups’ Listening Platform and events and other information related to 7 Cups that may be of interest to you. When signing up to receive such information, you will be asked to provide Personal Information, including your name, an email address, address and phone number.

• Technical Support Requests. If you need technical support related to 7 Cups’ Services, you will need to complete a form for the purposes of defining and clarifying your technical support request. When submitting a technical support request, you will be asked to provide Personal Information, including an email address and a description of the issue. When you contact us, we keep a record of email and chat communications to address and resolve any issues you are facing.

• Browser Information and Cookies. We use browser information (e.g., IP addresses and browser types), cookies and pixel tags to determine what data or information should be shown on your browser when you are visiting 7 Cups’ Site or using 7 Cups’ Listening Platform. We may also use browser information, cookies and pixel tags: to determine how you arrived at 7 Cups’ Site or Listening Platform, to determine whether you are a return visitor, to help us improve our product and service offerings, for quality assurance and training purposes, to help diagnose problems with our servers, to gather broad demographic information, to administer and optimize our services, and for other lawful purposes. Please refer to the "Cookies" section below for more information.

Users can request a download of their own Personal Information that 7 Cups currently stores, and also request deletion of their account and associated Personal Information. We reserve the right to prevent a User from exercising such rights in certain circumstances, as permitted by law. For example, if the User in question has broken the terms laid out in the Terms, caused harm or has abused our Services, or has negatively impacted other members. In this case, we retain the right to keep some of your Personal Information in order to provide more security and safety to our members.

4. Cookies and Other Tracking Technologies

Cookies are small files, typically of letters and numbers, downloaded onto your computer or mobile device when you visit certain websites.

• How We Use Cookies. Generally, we use first-party and third-party cookies for the following purposes:

  • to make our Services function properly;

  • to provide a secure browsing experience during your use of our Services;

  • to collect passive information about your use of our Services;

  • to help us improve our Services; and

  • to remember your preferences for your convenience.

• Types of Cookies on Our Services. We use the following types of cookies on our Services:

  • Strictly Necessary Cookies. These cookies are essential because they enable you to move around and use our Services. For example, strictly necessary cookies allow you to access secure areas on our Services. Without these cookies, some services cannot be provided. These cookies do not gather information about you for marketing purposes. This category of cookies is essential for our Services to work and they cannot be disabled.

  • Functional Cookies. We use functional cookies to remember your choices so we can tailor our Services to provide you with enhanced features and personalized content. For example, these cookies can be used to remember your name or preferences on our Services. We do not use functional cookies to target you with online marketing. While these cookies can be disabled, this may result in less functionality during your use of our Services.

  • Performance or Analytic Cookies. These cookies collect anonymous passive information about how you use our Services, including webpages you visit, and links you click. We use the information collected by such cookies to improve and optimize our Services. We do not use these cookies to target you with online marketing. You can disable these cookies.

  • Third-Party Cookies. These are cookies that are provided by third-party service providers and belong in one of the cookie categories described above. These third-party providers process your Personal Information on our behalf pursuant to our instructions and obligations consistent with this Privacy Policy.

• How to Manage Cookies. Depending on whether you would like to manage a first-party or third-party cookie, you will need to take the following steps:

  • First-Party Cookies. You can enable, disable or delete our cookies through the browser you are using to access our Services. To do this, follow the instructions provided by your browser (usually located within the "Help", "Tools" or "Edit" settings). Please note, if you set your browser to disable cookies, you may not be able to access secure areas of our Services, and/or parts of the Services may not work properly for you. You can find more information about how to change your browser cookie settings at http://www.allaboutcookies.org.

  • Third-Party Cookies. Modern browsers also allow you to block third-party cookies using the steps described above.

• Pixel Tags. We also use pixel tags throughout or Services. Pixel Tags are small graphic images that are embedded in a web page or email for purposes of tracking activity on web pages or whether a user has opened or accessed an email. A pixel tag may be set to identify on what browser and computer it was viewed, whether that browser has cookies received from a server associated with the pixel tag, and whether the web page or email with the pixel tag was forwarded or copied.

5. Why We Collect Your Personal Information

We may use Personal Information that we collect about you for various purposes, including:

• To operate, provide and improve our Services;

• To communicate with you regarding our Services, and promotions;

• To ensure network and information security;

• To provide customer support and respond to your inquires; and

• To protect you, us and other users.

6. Personal Information We Share

We may share and disclose Personal Information as follows:

• Third Party Service Providers Performing Services on Our Behalf. We share Personal Information, with certain third-party service providers that assist us in providing the Services and which are bound by duties of confidentiality. For example, we may use third parties to host the Services, to send out email updates about the Services, administrative services, financial services, quality assurance, data aggregation or remove repetitive information from our user lists.

• Therapists. If you elect to consult with a licensed therapist through 7 Cups, we may share your information with your therapist to enable and facilitate care.

• Healthcare Providers. If you have been referred to the Services as part of a care plan by your healthcare provider, we may share your Personal Information with your healthcare provider to facilitate care.

• For Legal Purposes. We will disclose your Personal Information as we deem necessary to respond to a subpoena, regulation, binding order of a data protection agency, legal process, governmental request or other legal or regulatory process. We may also share your Personal Information as required to pursue available remedies or limit damages we may sustain.

• Welfare Assurance. We may disclose your Personal Information directly to law enforcement or local authorities in the event that it has been reasonably determined that your safety or the safety of others may be at risk.

• Business Transfer. In the event of a merger, reorganization, consolidation, restructuring, bankruptcy, sale of substantially all interests or assets, or other similar transaction, we may transfer you Personal Information to the subsequent owner or operator of the Services.

• Anonymized Data. We may de-identify your Personal Information, in compliance with applicable law and aggregate such de-identified data with the de-identified data of other users.Such anonymized, aggregated data is no longer considered Personal Information. We may then share such anonymized aggregated data with the sponsors of programs that facilitate your access to the Services, such as government health agencies, researchers or healthcare providers. At 7 Cups, we believe that global mental health is a collaborative effort. The sharing of anonymized data plays a key role in helping both 7 Cups users and people worldwide to understand and better their mental health while maintaining a high level of privacy and anonymity to individuals.

7. Security of Your Personal Information

We employ reasonable security measures designed to protect the security of information submitted through the Services. However, the security of information transmitted through the Internet can never be guaranteed. To protect you and your Personal Information we may suspend your use of the Services, without notice, pending an investigation, if any breach of security is suspected.

• Your Responsibilities. Users of the Services are responsible for maintaining the security of any password, user ID or other form of authentication involved in obtaining access to password protected or secure areas of any of the Services.

• Unauthorized Access. Access to and use of password protected and/or secure areas of the Services are restricted to authorized users only. Unauthorized access to such areas or information is prohibited.

• Encryption and Firewalls. All information, including but not limited to chat transcripts and personal information is encrypted during transmission. We use standard Secure Socket Layer (SSL) encryption that encodes information for such transmissions. All information received is maintained on secure servers in encrypted format. Access to stored information is protected by multi-layered security controls including firewalls, encryption, role-based access controls, and passwords.

8. Retention Period

Generally, we will retain your Personal Information for as long as your account or profile is active, or for the length of time needed to fulfill the purposes outlined in this Privacy Policy unless a longer retention period is required or permitted by law. Private messages are stored for up to one year. Group messages (in chatrooms, groupchat) are stored for up to 30 days. Posts in community forums (including subcommunities) are maintained on community forums at the discretion of Community admins. 7 Cups will store your user account and associated Personal Information if your account is active. After a period of inactivity greater than 1 calendar year, 7 Cups may, at its discretion, purge Personal Information related to inactive accounts.

9. Links to Other Sites

The Services may contain links and widgets related to third-party websites and services ("Third Party Services") with which we have no affiliation. A link to any Third Party Services does not mean that we endorse it or the quality or accuracy of information presented on it. If you decide to visit any Third Party Services, you are subject to its privacy policy and practices and not this Privacy Policy. We encourage you to carefully review the legal and privacy notices of all other digital services that you visit. Users are prohibited from requesting offsite contact with other users. If a user is detected initating offsite contact, 7 Cups reserves the right to immediately terminate that account.

10. Nondiscrimination

7 Cups does not and shall not discriminate on the basis of race, color, religion (creed), gender, gender expression, age, national origin (ancestry), disability, marital status, sexual orientation, or military status, in any of its activities or operations.

11. Childrens Data

7 Cups complies with the Children’s Online Privacy Protection Act and Our Site and

Services clearly specifies that users must be at least 18 years old. Children between the ages of 13-17 years old may only participate in our Services with parental consent. If a parent or guardian becomes aware that their child has provided us with Personal Information without their consent, they should contact us at privacy@7cups.com. If we become aware that a child under 18 (or between the ages of 13-17 years old without parental consent) has provided us with Personal Information, we will take steps to delete such information from our files. Separately, a child under 18 may request deletion of information they posted on our Site or Services, which may be accomplished through anonymization.

12. Therapists as Mandated Reporters

Therapists are mandated reporters. Because of their profession, they have a legal obligation to report to authorities any signs of child abuse or vulnerable adult abuse. However, members cannot be forced to give any Personal Information. Adults who are in therapy provide Personal Information which will only be disclosed to the therapist if they or someone else is in imminent danger.

13. International Transfer

As a global entity, 7 Cups may store, transfer, and otherwise process your Personal

Information in countries outside of the country of your residence, including the United

States and possibly other countries. Such countries may have data protection laws that are less protective than the laws of the jurisdiction in which you reside. If you do not want your information transferred to, processed, or maintained outside of the country or jurisdiction where you are located, you should immediately stop accessing or using the Services.

If you are in the European Economic Area, United Kingdom, or Switzerland, please refer to the section below entitled Notice to Individuals in the European Economic Area, United Kingdom, and Switzerland.

14. Notice to Individuals in the European Economic Area and Switzerland

This section only applies to individual using our Service that are located in the European Economic Area, United Kingdom and/or Switzerland (collectively, the "Designated Countries") at the time of data collection.

We may ask you to identify which country you are located in when you use or access some of the Services, or we may rely on your IP address to identify which country you are located in. When we rely on your IP address, we cannot apply the terms of this section to any individuals that masks or otherwise hides their location information from us so as not to appear located in the Designated Countries.

Our Relationship to You. 7 Cups is a data controller with regard to any Personal Information collected from Users of its Service. A "data controller" is an entity that determines the purposes for which and the manner in which any personal information is processed. Any third parties that handle your Personal Information in accordance with our instructions are our service providers and are "data processors."

Legal Bases for Processing Personal Information. We describe our purposes for processing throughout this Privacy Policy. Below is a list of the purposes described in our policy with the corresponding legal bases for processing. Generally, the legal basis on which we rely on to process your personal information include: necessity to carry out our obligations arising from any contracts we entered with you or to take steps at your request prior to entering into a contract with you; your consent to the processing; satisfaction of our legal obligations; necessity to protect your vital interests; necessity to process in the public interest; or for our legitimate interests as described in those sections.

• Based on our contract with you or to take steps at your request prior to entering into a contract

  • Section 3: Personal Information We Collect

    • Account Setup
    • Paid Services
    • Listener and Therapist Applicants
    • Mental Health Services
    • Technical Support Requests

  • Section 5: How We Use Your Personal Information

    • To operate and provide our Services

  • Section 6: How We Share Your Personal Information

    • Third Party Service Providers Performing Services On Our Behalf

• Based on your consent

  • Section 3: Personal Information We Collect

    • Surveys
    • Assessments
    • Requests for Information, News and other Content
    • Public Forums. Chats or Other Features

  • Section 6: How We Share Your Personal Information

    • Therapists
    • Healthcare Providers

• Based on our legal obligations

  • Section 6: How We Share Your Personal Information
    • For Legal Purposes
    • Welfare Assurance

• To protect your vital interests

  • Section 5: How We Use Your Personal Information
    • To ensure network and information security

• Based on our legitimate interests. When we process your personal data for our legitimate business interests we always ensure that we consider and balance any potential impact on you and your rights under data protection laws

  • Section 3: Information We Collect

    • Log Data
    • Browser Information and Cookies

  • Section 5: How We Use Your Personal Information

    • To improve our Services
    • To protect user safety

Marketing. We will only contact individuals located in the Designated Countries by electronic means (including email or SMS) based on our legitimate interests, as permitted by applicable law, or the individual’s consent. When we rely on legitimate interest, we will only send you information about our Services that are similar to those which were the subject of a previous sale or negotiations of a sale to you. You can object to direct marketing at any time and free of charge.

Transfer of Your Personal Information. We transfer your Personal Information subject to appropriate safeguards as permitted under the relevant data protection laws. The transfer of your Personal Information out of the Designated Countries is necessary for the performance of a contract between us, or for important reasons of public interest. We may also rely on legal transfer mechanisms such as Standard Contractual Clauses or we work with U.S. based third parties that are certified under the EU-U.S. and Swiss-U.S. Privacy Shield Framework.

Individual Rights. We take reasonable steps to ensure that your Personal Information is accurate, complete, and up to date. In certain situations, you have the right to access, correct, or delete the Personal Information that we collect about you. Under certain conditions, you are also entitled to restrict or object to the further processing of your Personal Information. You have the right to receive your Personal Information in a structured and standard format and, where technically and legally feasible, the right to have your Personal Information transmitted directly to a third party. If you believe that we have infringed or violated your privacy rights under applicable law or this Privacy Policy, please contact us at the contact information below so that we can work with you to resolve your concerns. You may also lodge a complaint with the competent data protection authority regarding the processing of your Personal Information.

If you would like to exercise your rights under applicable law, please contact us at privacy@7cups.com. We may seek to verify your identity when we receive an individual rights request from you to ensure the security of your personal information. We may limit your individual rights requests (a) where denial of access is required or authorized by law; (b) when granting access would have a negative impact on other's privacy; (c) to protect our rights and properties; or (4) where the request is frivolous or burdensome.

15. Your California Privacy Rights

Residents of the State of California who provide certain types of Personal Information in obtaining products or services for personal, family or household use are entitled to request and obtain from us once a calendar year information about certain types of Personal Information we shared, if any, with other businesses for their own direct marketing uses. It is our policy that we do not share your Personal Information with other businesses for marketing uses. Nevertheless, to make such a request, please send an email message to privacy@7cups.com with "Request for California Privacy Information" on the subject line and in the body of your message.

16. Do Not Track

The Services do not support Do Not Track with respect to the Services at this time. Do Not Track is a privacy preference that you can set in your web browser to indicate that you do not want certain information about your webpage visits collected across websites when you have not interacted with that service on the page. For all the details, including how to turn on Do Not Track, visit https://www.donottrack.us.

17. Notices

Please send all questions, comments and notices regarding this Privacy Policy to the 7 Cups Privacy Officer at privacy@7cups.com or toll-free 844-755-8757.