For California Residents

California’s "Shine The Light" law (California Civil Code Section 1798.83) lets California residents ask for information about their personal data. Once a year, and for free, you can ask us what types of personal information we have shared with other companies for direct marketing purposes, and the names and addresses of those companies. If you are in California and want to make this request, just contact us in writing using the email ID provided above.

If you are under 18, live in California, and use our services, you can ask us to remove personal data you may have submitted. To do this, contact us and include the email address tied to your account and a note saying you live in California. Keep in mind that we might not be able to remove everything from our systems, like backups.

Some information is not covered by California's Consumer Privacy Laws (CCPA) and the California Privacy Rights Act (CPRA). This is done to avoid conflicts with other laws that manage these types of information. These excluded types of information include:

• Protected health information (covered by HIPAA).
• Medical information (covered by California's CMIA).
• Clinical trial data.
• Public information from government records.
• De-identified or aggregated user data that cannot be linked to you.

Here is a list of personal information types that we might have collected from you in the last twelve months:

• Identifiers: These include things like your Android or Apple ID, nickname, or any other identifiers you shared with us.

• Conversation Data: This includes any remaining identifiers left in your text messages after we've tried to remove them. This includes any identifiers you might share while creating or maintaining a safety plan.

• Correspondence Data: This includes your name and email address when you write to us. Device Data: This includes your IP address or information about how you interact with our website or apps.

• Recruitment Data: This includes the name of your current or past company, your employment dates, and any information you provide in a job application.

• Promotion Data: This includes your email address when you sign up for an event.

• App Event Data: This includes insights and reports about your preferences, habits, and behaviors based on the other data we've collected.

• Business Data: This includes your name, email address, and contact information used for business purposes like lead generation, business development, account management, and marketing.

We collect your personal information in different ways, like when you use our app and services, visit our website, or contact us on social networks. Sometimes, we get information from your Institution if needed to help you use our services. We use this information as explained in our Privacy Policy.

In the last twelve months before our Privacy Policy was updated, we might have shared your personal information with our service providers, Wysa affiliates, and related companies. We keep the information you give us when using the app according to our retention policy in the Privacy Policy. Information from research studies is always kept safe. You can read more about how we protect your information in our Privacy Policy.

Wysa does not sell your data, but we do share required data with approved third-parties to provide our app and services. You can ask us about the information we have shared and use your data protection rights. You have the right to request data deletion, opt-out of "sales," and not be treated unfairly for using your rights.

Do-Not-Track
"Do Not Track" (or "DNT") is a setting you can choose in some web browsers to protect your privacy. We do not pay attention to DNT signals sent by web browsers.

Right to non-discrimination
When you use the App, we do not ask for any personal information. You can stay as anonymous as you want. We have safety measures in place to collect as little personal data as possible. We will never treat you unfairly or ignore your data protection rights.

Right to opt-out of sale
You can choose to keep your personal data from being sold or shared with others. Following the CCPA (CPRA) and other data protection laws, we do not sell any personal data. We also do not know of any instances where the personal data of children under 16 years old has been sold.

For Virginia, Connecticut, Colorado, Utah, and Nevada residents