V7.0.0 | Jul 24, 2025

• Rename the Privacy Policy to Wysa Global Privacy Policy”.
• Addition of two services and their details- “DRA” and “Co-Pilot”
• Certain services are also available in Spanish, French, German, and Brazilian Portuguese.
• Addition of “When you use our DRA services” and “When you text your institution clinician or well-being advisor within co-pilot service”.
• Added a section to cover processing for “Provision of personalised recommendations of supportive well-being resources and tools”.
• Updated the legal grounds across all sections within the “Uses of your Information”.
• Update to the processing in “Use of Conversation data” section within the “Uses of your Information”.
• Updates to “How We Protect Your Information” for DRA and Provision of personalised recommendations.
• Re-surface the important point around “The AI Coach is meant to provide evidence-based tools and techniques and to encourage mental well-being in a self-help and self-monitoring context”.
• If you are between 13 and 18 years or where approved by your Institution, we may seek parental consent to use our service. as required by applicable laws in your country of residence. Write to us at [email protected].
• Updated the section “When you use the Wysa+ or Generative AI Service”.
• We may not be able to cater to user right requests where the processing is required to provide continuity of our services.
• Transition of inline change log into a separate webpage.
• Added new sub-processors
  1. Outgrow
  2. Dubpro

V6.2.0 | Apr 30, 2025

• Updated to align with the intended use of the applications
• Replaced “e-triage” to “DFD” across the policy
• Changed contact email ID to [email protected] across the policy

v6.1.0 | March 27, 2025

• The Wysa+ privacy policy notice has been discontinued and is now integrated into this main privacy policy.
• Added handling data when you join research studies or initiatives.
• Added retention of data provided when you join research initiatives.
• Added information about limitations of our AI system.
• Added that we may retain your data longer, if we need to retain data to ensure the reliability of our research studies.
• Replace references to Chronic Care Management to Healthcare
• Added “Generated Insights within Weekly Report” in the section When you use the Wysa+ Service.
• Remove links and reference to Wysa+ Privacy Policy and Terms of Use.
• Minor corrections, sentence reframing, handling omissions and correction of erroneous links.
• Changes to “How to exercise your rights”.

v6.0.0 | Oct 1, 2024

• Supplementary privacy notices for USA state residents
• Data collection and processing for our whatsapp based service, voice-enabled services, multi-lingual services, Chronic Care Management services.

• Overhaul of the Privacy Policy to make it more readable for ages 13 and above.
• List of service providers

v5.6.0 | July 23, 2024

• Added Wysa+ Generative AI in the list of Services governed by this privacy policy and the additional Wysa+ Generative AI Privacy Policy.

• Changed the section “How do we use Generative AI technology?” to “Your use of Wysa+ Generative AI Services.” This section has also been changed to reflect about the service and to provide links to the additional Wysa+ Generative AI terms of use and privacy policy.

V5.6.0 / July 20, 2024

• Added Wysa+ Generative AI in the list of Services governed by this privacy policy and the additional Wysa+ Generative AI Privacy Policy.
• Data collection and processing for our whatsapp based service, voice-enabled services, multi-lingual services, Chronic Care Management services.

• Overhaul of the Privacy Policy to make it more readable for ages 13 and above.
• List of service providers
• Overhaul of the Privacy Policy to make it more readable for ages 13 and above.

v5.5.0 | Dec 18, 2023

• Included “Validated preventative guided programs” in Wysa’s list of Services for Institutional users.
• Wysa emotional well-being professional service is included in Hindi and Spanish language Apps.
• Use of 3rd party tools to detect and replace any inadvertent personal identifiers within your text messages for better privacy protection.
• Details about user level data sharing with Institutional users and about processing health data as a business associate within What personal data do we process and handle as a Processor or Sub-processor?
• New service provider Turn.io (as a Business Solution Provider for our whatsapp service)
• New service provider private AI (to redact inadvertent personal identifiers in text messages)
• New section that provides details on “How do we use Generative AI technology?”
• Additional privacy and security messages from USA FTC and the Department of Health and Human Services (HHS) about how to protect your information when using digital technologies.

• Updated data protection law definition to include India’s DPDP Act 2023
• Capture pronouns as other information processed on behalf of Institutions
• The list of Service Providers section to provide clarity on data type, purpose and storage involved in the data processing.
• Moved the Cloud Service Provider details in the “How do we share your data with third parties?” to the list of Service Providers section.
• Promotional event data and Business (B2B) data details within the “What data do we process after taking your Consent?” section.
• Data protection rights to inform our obligation where we require to process rights on behalf of your Institution.

v5.4.0 | June 13, 2023

• Wysa App is designed to offer general mental health advice and support and cannot offer condition specific advice for complex medical conditions
• Data processing when user participates and consents to Wysa commissioned controlled and real-world online research studies. Data processing details provided in “What additional personal data do we process when you participate in the online controlled or real-world studies?”.

• Lawful basis of processing has been updated to reflect the most appropriate that applies to the processing.
• We also provide Hindi and Spanish version apps for users in certain geographies.
• Event Data processing- to analyse app event data for improving product and service quality.
• Made minor grammatical corrections.
• In addition to CCPA also updated for CCPA related privacy requirements
• Updated the Insights & Involvement data in “What data do we process after taking your Consent?”

v5.3.0 | May 5, 2023

• Wysa does not take responsibility for any misrepresentation of age and use by the user.
• Included Institution data processing in “What personal data do we process and how do we use it?”.
• Processing of age-range to identify children entering the system and to safeguard in “What personal data do we process and how do we use it?”.
• Added new processors in “Other Service Providers”
  1. Salesforce / Pardot
  2. Zendesk
  3. Iterable
  4. 6Sense
• We may capture the Institution name for operational purposes from payment gateways.
• A copy of user data might be retained in our backup for a definite period of time.

• Clearly identify all Services governed by the Privacy policy.
• Wysa email ID to [email protected].
• Corrected for grammatical constructs and errors across all sections.
• Reworded across all sections to ensure readability for younger audiences.
• Safety Plan data processing in “What personal data do we process and how do we use it?”.
• Provided additional information about our NLP/NLU algorithm in “How does the Artificial Intelligence chatbot work and is it safe to use?”.
• Updated data retention section in “How long do we retain your data including personal data?”.
• Additional information to cover for multilingual apps.
• Removed two sections “What is Wysa App?” and “Who can use the service?” as already covered in TOS.
• Kubit.ai has been discontinued as our data processor.

v5.2.0 | January 18, 2023

• Added a new section on “What data do we process when you use the Wysa Digital Front Door Service?”

• Fix for grammar in “What data do we process after taking your Consent?”

v5.1.0 | December 21, 2022

• Included a para on Right to be Informed and deleted a redundant bullet “required to protect our rights and properties” in the “What are your data protection rights?” section.
• Included Cookie Policy to the line “By using our Apps and services, you agree to the collection and use of information in accordance with this privacy policy and cookie policy”.

v5.0.0 | December 06, 2022

• New section "What personal data do we process and handle as a Processor or Sub-processor?" to reflect data processing when Wysa is a data processor.
• Add details around use of marketing tools in "How do we share your data with third parties?".
• New additions, bullet 5 and 6, within "Processing of any of your personal data as per our Legitimate Interests".
• Addition of business data processing within "What data do we process after taking your Consent?".
• New section to organise details around "International transfer of personal data outside of the country you reside in or are currently located".
• Include Hindi as a language in use within the app in select geographies.
• Included details on retention of emergency contact information after the end of subscription in “How long do we retain your data including personal data?” Section.

• Reorganisation and reframing of sections to provide clarity, grammatical correctness and improved alignment to our current intent and purposes.
• Updates made to “Do Note” Section.
• Our Coach or therapist services are provided by global human well-being professionals. Changes made to reflect this across the policy.
• Updated paragraph on "Institution version of Wysa App".
• Minor updates to the table within "What personal data do we process and how do we use it?".
• Update on our use of ads in "What additional personal data do we process when you use our WhatsApp-based business service?".
• Replace an archived AWS Security link with the latest, within "How do we share your data with third parties?".
• Update, bullets 3, 4 and 14, within "Processing of any of your personal data as per our Legitimate Interests"
• Updates to the row on processing of app usage data and promotion data in "What data do we process after taking your Consent?"
• Updates made to "How do we secure your data?" section
• Update to paragraphs of “Right of Access” and “Right in relation to automated decision-making and profiling” within "What is your data protection rights?"
• Group the “withdraw consent”, “breach notification“ and “concerns and complaints” sections within a separate section "Other important information".
• Additional information provided within "Do California residents have specific privacy rights?"

v4.1.1 | July 5, 2022

• Addition of Wysa AI coach over WhatsApp to the list of services.
• New section “What additional personal data do we process when you use the WhatsApp service?”
• Addition of new sub-processor, Meta Ads Manager.

• Updated Twilio services to include Business Service Provider service to integrate Wysa's AI coach with WhatsApp.
• Minor grammatical corrections.

v4.1.0 | May 26, 2022

• Include Cloudflare among our service providers
• Include Web-based apps along with website cookies in “What data do we process after taking your Consent?”
• Update to Disclosure to other third parties with details on reasonable steps
• Separately call out “Processing as per our Legitimate Interests”
• Added new definition for AI coach and Special Category data

• Definitions: Service provider and Data Processor are interchangeable terms.
• “What personal data do we process and how do we use it?” updates for clarity and appropriateness.
  1. Integrate wellness information as part of Conversation Data
  2. Conversation data by way of audio-video sessions separately outlined
  3. Included processing related to network data separately
  4. Carved out event data separately
• Mention DPA with Standard Contractual Clauses (SCCs) with every service provider
• Update the purpose for Google Workspace and 3rd party payment gateway providers for more clarity.
• Remove [email protected] email ID
• Update Privacy by Design measures
• Updates to point on data stored in databases in the Important Notes section.
• Update the Privacy by Design section
• Update purpose of processing in “What personal data do we process and how do we use it” section
• Updated the “How do we secure your data?” section for certifications and details
• Clear messaging about Wysa human professional well-being service

v4.0.0 | November 10, 2021

• Complete revamp to improve the readability of the Privacy Policy.
• Include information about the Audio-Video Service provided by Coach or Therapist.
• Introduction of AI Coach modules and tools for Spanish language users.
• Included our other applications including Ascension Wysa app in scope of this policy. This Privacy Policy replaces the existing Ascension Wysa's privacy policy.

v3.3.1 | July 16, 2021

• Review and remove Suicide helpline link from Important Notice.

v3.3.0 | July 01, 2021

• Included our other applications including Sleep by Wysa App in scope of this policy. This Privacy Policy replaces the existing Sleep by Wysa's privacy policy. Updated Important notice for key information about Sleep by Wysa.
• Add information on transfer of Your Data to regions other than Your resident country/state in the Important Notice section.
• Added section on data processed from candidates applying to Wysa's open job positions.
• Added processing of candidates information for current and future employment opportunities as our legitimate interest
• Added processing of information when using Wysa's video-based service with the Well-being Coach or Therapist
• Added FTC security and privacy guidance in What are some best practices to follow to keep your device secure?
• Explicitly added Right to withdraw Consent
• Provided details to our UK ICO registration

• Mention about ISO 27001 (ISMS) and ISO 27701 (PIMS) certifications and adhering to GDPR 7 Principles
• Minor updates in "What does this Privacy policy apply to?"
• Renamed GSuite to Google Workspace
• Mention of Wysa Well-being Coach or Wysa Therapist Services provided outside of the Wysa App for Institutional Users
• Energy questionnaire included in "How do we handle your responses to screening assessments?"
• More clarity about your data transmitted and stored
• Payment gateway related updates in how do we handle your payment data?
• Updated “Can children under 13 Use Wysa App?” with note of advice to parents and legal guardian.

• FB analytics has been discontinued. Added use of 3rd party analytics provided by Kubit AI whose details have been provided in “How do We use any Third Party Analytics tools and softwares?”

v3.2.0 | Apr 16, 2021

• Additional clarity on handling data where Wysa App is integrated with Your Institution system
• Additional clarity on use of minimal and anonymous conversation messages for improving performance of Bot algorithms
• Additional information around security controls and alignment to ISO 27001: 2013 and ISO 27701: 2019 global standards
• Additional clarity on anonymized and minimal data shared with third parties

• Video Call- based experimental Coach/therapist Service has been currently discontinued. Section “What do we process when You use the Video Call Service?” removed

v3.1.0 | Feb 10, 2021

• Additional clarity on the retention of data;
• Additional data processed from Institution users in section “What additional data do We collect from Institution Users?”

v3.0.0 | Feb 03, 2021

• An overall review and necessary updates were made to align Privacy Policy to ISO/IEC 27001:2013 (Information Security Management System) and ISO/IEC 27701:2019 (Privacy Information Management System);

• Included “For purposes of servicing You towards Wysa’s Gift Card program” as a Legitimate Interest basis;
• Three new subsections added at the end of “What Data do We collect and how do We Use it?”
  
  
  1. What do we process when You use the Video Call Service? (experimental service for android users only)
  2. How do We handle Your data when used for Research purposes?
  3. What data do we process as part of Gift Card purchase?

• Included details on use of branch.io and mailgun third party analytics software services;
• UK GDPR mentioned as another regulation requirement for this Privacy Policy;
• Additional items included in “Definition” Section;
• Additional clarity on need for parental consent for those between 13 and 18 years in “Who can use the Service” Section;
• Updated link to Wysa Cookie Policy in “Do we use Cookies?” Section;
• Additional clarity on the retention of data
• Additional clarity on “Do California residents have specific privacy rights?”
• Additional clarity on “What are the controls for Do-Not-Track features?”
• Additional clarity on changes to privacy policy

• Section “Governing Law and Dispute Resolution” to align with EU GDPR laws

V6.0.0 | Jul 24, 2025

• Rename the Terms of Service to Wysa Global Terms of Service”.
• Addition of two services and their details- “DRA” and “Co-Pilot” including details on their intended use.
• Certain services are also available in Spanish, French, German, and Brazilian Portuguese.
• Re-surface the important point around “The AI Coach is meant to provide evidence-based tools and techniques and to encourage mental well-being in a self-help and self-monitoring context.”
• If you are between 13 and 18 years or where approved by your Institution, we may seek parental consent to use our service. as required by applicable laws in your country of residence. Write to us at [email protected].
• Updated the section “About the Generative AI or Wysa+ Service”.
• Minor updates in “Use of Wysa Medical Assistant” and “Use of Gen AI or Wysa+ Service”.
• Addition of “Use of DRA Service” and “Use of Institution Clinician or Well-being advisors within Co-Pilot Service”.
• Transition of inline change log into a separate webpage.
• Added new sub-processors
  1. Outgrow
  2. Dubpro

V5.2.0 | Apr 30, 2025

• Updated to align with the intended use of the applications
• Updated the sections “About the AI coach service” and “About the Wysa coach service”
• Replaced “e-triage” to “DFD” across the policy
• Changed contact email ID to [email protected] across the policy

v5.1.0 | March 27, 2025

• Added additional service terms when you join our testing or research initiatives.
• Added information about limitations of our AI system.
• Provided more clarity on the intended use within “About our Apps and Services”.
• Replaced references to Chronic Care Management to Healthcare
• Removed links and reference to Wysa+ Privacy Policy and Terms of Use.
• The Wysa+ Terms of Service notice has been discontinued and is now integrated into this main Terms of Service.
• Company physical address has been removed. Refer to our website for the latest.
• The Wysa+ Terms of Use notice is now integrated into this main Terms of Service.
• Minor corrections, sentence reframing, handling omissions and correction of erroneous links.

• Covers services for our whatsapp based service, voice-enabled services, multi-lingual services, Chronic Care Management services (Using Wysa Medical Assistants).

• Overhaul of the Terms of Service to make it more readable.

• Added Wysa+ Generative AI in the list of Services governed by this privacy policy and the additional Wysa+ Generative AI Privacy Policy.

• Changed the section “How do we use Generative AI technology?” to “Your use of Wysa+ Generative AI Services.” This section has also been changed to reflect about the service and to provide links to the additional Wysa+ Generative AI terms of use and privacy policy.

• Included “Validated preventative guided programs” in Wysa’s list of Services for Institutional users.
• Wysa emotional well-being professional service is included in Hindi and Spanish language Apps.

• Updates made to “Wysa use of Generative AI technology”.