What we’ll never dowith your data.

Every workbook answer and check-in note is sealed with AES-256-GCM, with a fresh random IV for each record, before it’s stored. The staff console has no screen, search or export that opens them, and they’re kept out of logs, analytics, background jobs and notifications.

To be precise: the key lives on HEAL’s servers, not only on your device, so this isn’t end-to-end encryption. It’s a promise enforced by code and access rules.

Sharing is always deliberate: you pick the exact prompts, name the person and confirm. The link carries a random token, and HEAL stores only a hash of it. Links expire after 1 to 14 days (7 by default), and you can revoke one at any moment — it stops working straight away.

Not to advertisers, not to treatment centers, not “anonymized” and not in aggregate. HEAL doesn’t run ads and never targets anyone because they’re struggling. Future business partners will never get access to private writing as part of any deal.

Rooms are audio-only and HEAL doesn’t record them. The public schedule shows no RSVP or attendance numbers, and there’s no list or export of who came. During a meeting, people in the room — including the host — see only pseudonyms and emoji avatars.

Your display name can be anything from 2 to 32 characters, and HEAL refuses names that look like an email address or phone number. Avatars are an emoji on a colour, never a photo. Whether you’re in recovery, a family member or an ally is never shown publicly.

Ask from your profile in the app, or email support@teleheal.com. Each request is logged with a 30-day due date and handled by a person on the team, who replies by email. You can have one open request of each kind at a time.

No paid placements, no referral fees, no per-admission deals. A provider is approved only after every published check is met and at least two reviewers without a conflict vote yes — one of them independent. Relevant ownership and financial relationships are disclosed on the listing.