Privacy Notice
Effective Date: January 1, 2026
BriteMind AI, Inc. d/b/a BriteMind
THIS NOTICE DESCRIBES HOW HEALTH INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
BriteMind AI, Inc., doing business as BriteMind, is committed to maintaining the privacy of your health information. This Notice describes our privacy practices and your rights regarding the health information we hold about you.
1. Your Rights Regarding Your Health Information
You have the following rights regarding the health information we maintain about you:
Right to Access Your Data
You have the right to inspect and obtain a copy of your health information, including your session records, mood data, and clinical notes. We will provide this within 30 days of your request.
Right to Amend
If you believe information in your health record is incorrect or incomplete, you may request that we amend it. We may deny your request if the information was not created by us or if we believe the record is accurate.
Right to an Accounting of Disclosures
You may request a list of disclosures we have made of your health data during the past 6 years (other than disclosures for treatment or health care operations).
Right to Request Restrictions
You may request that we restrict certain uses or disclosures of your health data. We are not required to agree to your request, but if we do, we are bound by that restriction except in emergencies.
Right to Confidential Communications
You may request that we communicate with you about your health information in a specific way or to a specific location (e.g., only by email to a particular address). We will accommodate reasonable requests.
Right to a Copy of This Notice
You have the right to receive a copy of this Notice at any time. Contact us to request a copy.
To exercise any of these rights, submit a written request to privacy@britemind.ai.
2. How We Use and Share Your Health Information
We may use and disclose your health information without your authorization for the following purposes:
Providing Your Care
We use your information to provide, coordinate, or manage your care on the platform. This includes sharing your information with your licensed clinician if you are enrolled in a clinician-paired plan.
Payment Processing
We may use your information to process subscription payments and manage billing.
Platform Operations
We may use your information for platform operations, which include:
- Quality assessment and improvement of our AI and clinical programs
- Training of AI models using de-identified data (we will never use identifiable health data for AI training without written authorization)
- Conducting compliance reviews and audits
- Business planning and development activities
Other Permitted Disclosures
We may also disclose your information without your authorization in limited circumstances, including:
- Legal Requirements: When required by law, including court orders, subpoenas, or government agency requests.
- Abuse or Neglect: To report suspected abuse, neglect, or domestic violence to appropriate authorities when required or permitted by law.
- Threat to Health or Safety: To avert a serious and imminent threat to your health or safety or the health or safety of another person.
- Service Providers: To vendors and service providers who perform functions on our behalf under data processing agreements.
3. Uses and Disclosures Requiring Your Authorization
For uses and disclosures beyond those described above, we are required to obtain your written authorization. This includes:
- Marketing: We will not use your health data for marketing purposes without your written authorization.
- Sale of Data: We will not sell your health data without your explicit written authorization.
- Psychotherapy Notes: Disclosures of psychotherapy notes require separate authorization.
You may revoke any authorization at any time by submitting a written notice to privacy@britemind.ai.
4. Our Duties
BriteMind AI, Inc. is committed to:
- Maintaining the privacy of your health information
- Providing you with this Notice of our privacy practices
- Abiding by the terms of this Notice currently in effect
- Notifying you promptly if there is a breach of your health data
5. Minimum Necessary Standard
When using or sharing health data, we make reasonable efforts to use, disclose, or request only the minimum amount of data needed to accomplish the purpose of the use, disclosure, or request.
6. Complaints
If you believe your privacy rights have been violated, you may file a complaint:
- With Us: Submit a written complaint to privacy@britemind.ai. We will investigate all complaints and respond within 30 days.
We will not retaliate against you for filing a complaint.
Contact Information - Privacy Officer
BriteMind AI, Inc. d/b/a BriteMind
Email: privacy@britemind.ai
Website: www.britemind.ai
Mailing Address: BriteMind AI, Inc., Privacy Officer, Los Angeles, CA
For questions about this Notice or your privacy rights, please contact our Privacy Officer. We are committed to responding to all privacy inquiries within 30 days.