Privacy Policy
Last updated: June 1, 2026
HALY, Inc. ("HALY," "we," "us," or "our") is committed to protecting your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard information when you use our platform, website, and services (collectively, the "Services").
This Policy supplements our HIPAA Notice of Privacy Practices, which governs the use and disclosure of Protected Health Information (PHI) collected in the course of providing healthcare services.
1. Information We Collect
Information you provide directly: When you create an account, book an appointment, or contact us, we collect your name, email address, phone number, date of birth, insurance information, and any health information you choose to share.
Information collected automatically: We collect device identifiers, IP addresses, browser type, pages visited, and session duration through standard web analytics tools.
Information from providers: Providers on the HALY network may share appointment notes, treatment summaries, and clinical documentation with us as part of care coordination.
2. How We Use Your Information
- To match you with behavioral health providers that fit your needs
- To facilitate appointment scheduling and reminders
- To verify insurance coverage and process billing
- To communicate service updates and important notices
- To improve platform performance and user experience
- To comply with legal obligations and enforce our Terms of Service
3. Sharing Your Information
We do not sell your personal information. We may share your information with:
- Providers: We share information necessary to facilitate your care, including appointment details and intake responses.
- Insurance companies: With your authorization, we share information required for coverage verification and claims.
- Service providers: We engage trusted third parties (cloud hosting, payment processors, analytics) under strict confidentiality agreements.
- Legal authorities: When required by law, court order, or to protect the safety of users and the public.
4. Data Security
We implement administrative, technical, and physical safeguards designed to protect your information against unauthorized access, alteration, disclosure, or destruction. All data is encrypted in transit (TLS 1.3) and at rest (AES-256). Our systems are regularly audited for security vulnerabilities.
5. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access, correct, or delete your personal information
- Restrict or object to certain processing activities
- Receive a copy of your data in a portable format
- Withdraw consent where processing is based on consent
To exercise these rights, contact us at privacy@halychild.com.
6. Cookies
We use essential cookies required for the platform to function, and optional analytics cookies to understand how our services are used. You may disable non-essential cookies through your browser settings.
7. Retention
We retain personal information for as long as your account is active or as needed to provide services, comply with legal obligations, resolve disputes, and enforce agreements. Health records are retained in accordance with applicable state and federal law.
8. Minor Patients and Parental Consent
HALY is a platform specifically designed to connect families with pediatric behavioral health providers. Account holders must be 18 years of age or older. Parents or legal guardians create and manage accounts on behalf of their minor children and are responsible for all activity under that account.
We collect personal and health information about minor patients only with the consent of a parent or legal guardian. By creating an account on behalf of a child, you represent that you have the legal authority to do so and to consent to our collection and use of that child's information as described in this Policy.
State-specific minor privacy rights. In some states, adolescents 12 years of age or older have independent privacy rights over certain mental health records (including the right to consent to treatment without parental knowledge). Where state law grants a minor independent rights, we may be required to limit parental access to that portion of the minor's records. We apply these requirements in accordance with applicable state law.
9. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes by email or through a prominent notice on our platform at least 30 days before the changes take effect.
10. Contact
Questions about this Policy? Reach our Privacy Team at privacy@halychild.com or write to HALY, Inc., 340 Pine St, Suite 800, San Francisco, CA 94104.