Privacy Policy

1. Introduction

Tandem Alliance is committed to protecting privacy. This policy explains how we handle information for two groups: (a) licensed mental health providers who create accounts (“Members”); and (b) members of the public who use the public directory or submit an introduction request (“Prospective Clients”). It covers the website, dashboard, referral board, public directory, and guided intake and introduction request form.

2. Information We Collect

Account information (name, email, encrypted password), professional information (license, credentials, specialties, education, bio), practice information (session formats, rates, insurance, languages, location, availability), profile media (headshot), communications (change requests, board posts, support inquiries), and payment information if applicable.

We automatically collect device/browser information, IP address, usage data, and cookies.

Mobile app: if you use the Tandem Alliance iOS app, we also collect a push notification token and your device platform (used only to deliver notifications you have enabled, and deleted when you sign out or disable them); the photograph you choose when you set or update your profile photo (we request photo library access only at that moment, and we do not browse or store anything else from your library); records of any content you report or members you block; and a record that you acknowledged the no-client-information rule for a given message thread. The app collects no location data, no contacts, no advertising identifiers, and does not track you across other apps or websites.

We do NOT intentionally collect PHI about your clients. The platform is not a HIPAA-compliant channel and must never be used to transmit client-identifying information. See Section 4 of the Terms of Service.

3. How We Use Your Information

To manage your account, verify credentials, display your directory profile, facilitate the Referral Board, process change requests, communicate with you, improve and secure the Platform, enforce Terms, and comply with legal obligations. We do not sell your information or use it for targeted advertising.

Moderation of reported content. Messages between Members are private in ordinary use and are not read by Tandem Alliance staff. When a message or conversation is reported, authorised staff may review the reported message together with the surrounding conversation, because a message read in isolation is often impossible to assess fairly. That access is limited to conversations for which a report has been made, is restricted to staff acting on the report, and is used only to decide what action the report requires — never for marketing, analytics or any other purpose. We do not monitor conversations that have not been reported. Reported posts and comments are reviewed the same way. We keep a record of reports, of content we remove and the reason for removal, so that repeat behaviour can be identified and so that we can respond to a licensing board or legal request.

4. How We Share Your Information

Public directory: name, credentials, photo, specialties, bio, session formats, location, insurance status, and availability are publicly visible. Email and phone are NOT public.

Referral Board: posts visible to approved Members. Anonymous posts hide your name from Members but not from Tandem Alliance.

Service Providers: Supabase (database/auth), Netlify (hosting), email providers, payment processors — all contractually obligated to protect your data.

Mobile app notifications: to deliver push notifications we share the notification title and body, and your device's push token, with Expo (our build and push delivery provider) and Apple's Push Notification service. Notifications never contain client information. You can turn them off at any time in the app under Profile → Notifications, or in your device settings.

Legal: we may disclose information if required by law.

5. Data Security

We use TLS/SSL encryption, secure password hashing, role-based access controls, and regular security reviews. No system is 100% secure.

6. Data Retention

We retain data while your account is active. Upon termination or deletion request, we delete or anonymize within 30 days except where legally required.

7. Cookies

Used for authentication, security, and analytics. No advertising cookies. You may configure your browser to reject cookies.

8. Your Rights

You may request access, correction, deletion, or portability of your data by contacting privacy@tandemalliance.com. We respond within 30 days.

In the mobile app: you can delete your account yourself at any time under Profile → Delete account. This removes your card from the network and closes your account. You can also control which emails we send you under Profile → Notifications, and turn push notifications off entirely in your device settings.

8.1 State-Specific Privacy Rights

Depending on your state of residence, you may have additional rights under state consumer privacy laws. Tandem Alliance complies with all applicable state privacy regulations, including but not limited to: California (CCPA/CPRA) — right to know, delete, correct, and opt out of sale; Virginia (VCDPA) — right to access, correct, delete, and obtain portable copy; Colorado (CPA) — right to access, correct, delete, and opt out of targeted advertising; Connecticut (CTDPA) — right to access, correct, delete, obtain portable copy, and opt out of sale; Utah (UCPA), Texas (TDPSA), Oregon (OCPA), Montana (MCDPA), and other states with enacted consumer privacy laws — applicable rights as defined under each state's law.

We do not sell personal information. To exercise state-specific rights, contact privacy@tandemalliance.com. We respond within the timeframe required by your state's law (typically 30–45 days). If we deny a request, you may appeal at the same address.

9. Information from Prospective Clients (Introduction Requests)

This section applies to members of the public who use the public directory or submit an introduction request (“Prospective Clients”). It is separate from the Member (therapist) information described above.

9.1 What We Collect

Browsing the directory and using the guided intake to filter results does not require you to provide any personal information. The criteria you select in the intake (such as area of concern, secondary preferences, session format, language, therapist gender, ethnicity, and affirming-care preferences) are used in your browser to filter the directory and display your results; these selections are not transmitted to or stored by Tandem Alliance unless included in an introduction request as described below. If you choose to request an introduction to a therapist, we collect: your name, email address, and (optionally) phone number; your state; your payment preference and, if provided, your insurance provider and plan; your primary area of concern, session format, and therapy type; and the therapist you selected. We also automatically collect device/browser information, IP address, and usage data as described in Section 7. Some of this information may be sensitive. Please share only what you are comfortable providing.

9.2 How We Use It

We use this information to facilitate the introduction you request with the therapist you select, to contact you about your request, and to maintain and improve the directory. We do not sell this information and do not use it for targeted advertising.

9.3 How We Share It

When you request an introduction to a therapist, we share the relevant details of your request with that therapist (and, where applicable, their practice) so they can follow up with you. We also share information with the service providers listed in Section 4, and may disclose information where required by law. We are a directory and referral service, not your healthcare provider; once your information is shared with a therapist, that therapist is responsible for their own handling of it.

9.4 Contact Consent

If you provide a phone number, you consent to be contacted about your request by email, phone call, or text message at the contact information you provide. Message and data rates may apply. You may opt out at any time by replying STOP to a text, using any unsubscribe link, or contacting privacy@tandemalliance.com.

9.5 Retention and Your Rights

We retain introduction-request information for up to 60 days after your introduction is completed or your request is closed, after which we delete or anonymize it, except where a longer period is required by law. Aggregate statistics that cannot identify you (for example, the number of introductions made in a given month) may be retained. You may request access to, correction of, or deletion of your information, and you have the state-specific rights described in Section 8.1, by contacting privacy@tandemalliance.com.

9.6 Age

You must be 18 or older to submit an introduction request. Where a request concerns a minor, it must be submitted by the minor’s parent or legal guardian.

10. Children’s Privacy

Member accounts are for professionals 18 or older, and introduction requests must be submitted by adults 18 or older. Where an introduction request concerns a minor, it must be submitted by the minor’s parent or legal guardian. We do not knowingly collect personal information directly from children under 18.

11. Changes

We notify of material changes 15 days in advance via email or Platform notification.

12. Contact

Privacy: privacy@tandemalliance.com — General: info@tandemalliance.com — www.tandemalliance.com