1. Introduction

‍Marigold Health (“we,” “us,” or “our”) provides a safe, anonymous community platform for individuals facing mental health or substance use challenges. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use the Marigold Health mobile application (the “App”).

1.1. Important Note on HIPAA and Protected Health Information (PHI)

‍Some of the information we collect through your participation in insurance-sponsored programs or via direct clinical referrals may constitute "Protected Health Information" (PHI) under the Health Insurance Portability and Accountability Act (HIPAA). To the extent that we maintain or process PHI on behalf of a covered healthcare entity or your health insurance provider, our use and disclosure of such data is governed strictly by our Business Associate Agreements (BAAs) and the respective Notice of Privacy Practices (NPP) of your health provider or plan, which supersedes any conflicting provisions in this general Privacy Policy. We do not sell or lease your PHI under any circumstances.

2. Information We Collect  

We collect information that you voluntarily provide to us, as well as information automatically generated by your device.

• Account Data: When you sign up using your 6-digit access code, we collect your name, email address, phone number, and account credentials.
• Community and Support Data: We collect the contents of messages, posts, and interactions you share within our anonymous support groups and 1:1 sessions with Certified Peer Recovery Coaches.
• Device and Usage Information: We automatically collect your IP address, device type, operating system, and App usage statistics (such as feature engagement and timestamps).

2.1 Google Play Data Safety Disclosures

‍For the purposes of transparency under Google Play policies, please note the following data tracking practices:

• Personal Identifiers: Collected to authenticate your account and ensure secure login.
• Health/Fitness Information: Any self-reported health, mental health, or substance use recovery tracking metrics are used solely to tailor peer support and are encrypted in transit and at rest.
• App Interactions & Crash Logs: Collected anonymously to monitor app performance, diagnose technical errors, and optimize user experience.

3. How We Use Your Information

We use your information to operate, maintain, and improve our services, including:

• Providing anonymous peer support groups and 1:1 coaching.
• Authenticating your access via organization-issued 6-digit codes.
• Operating safety mechanisms: We use Natural Language Processing (NLP) to monitor chat text solely to identify areas of highest need, detect safety or crisis risks, and ensure a supportive environment. This processing activity is performed on our secure infrastructure and is never utilized for advertising or third-party tracking.

4. Sharing Your Information
‍
We do not sell your personal information. We may share information under the following limited conditions:

• With Your Consent or Care Team: With your authorization, we may coordinate directly with your designated medical care team or health insurance plan to align peer support with your broader treatment goals.
• Service Providers: We share data with secure vendors who perform hosting, analytics, or infrastructure services on our behalf under strict confidentiality agreements.
• Legal & Safety Obligations: We may disclose information if required by law, subpoena, or if we believe in good faith that disclosure is necessary to prevent imminent physical harm or address a medical crisis.

5. Data Security
‍
We implement industry-standard physical, technical, and administrative safeguards designed to protect your personal data. Consistent with HIPAA security standards, all sensitive health and personal data transmitted through the App is encrypted in transit using Transport Layer Security (TLS 1.2 or higher) and encrypted at rest using AES-256 bit encryption.

6. Your Rights and Choices
‍
You have control over the information you share on Marigold Health.

• Anonymity: Your public-facing profile in support groups remains anonymous to other members.
• Opt-Out: You may choose to stop participating in Marigold services or text-messaging communication at any time. Stopping participation does not impact your baseline health insurance coverage.

6.1. Account Deletion & Data Retention
‍
You have the right to request the deletion of your account at any time. You can initiate account deletion directly within the App’s Account Settings menu or by submitting a formal request via our online form at [marigoldhealth.com/contact-us](https://marigoldhealth.com/contact-us) or by selecting “Delete Account” within the application. Upon verified request, we will inactivate your account within 24 hours preventing access and archive your user profile and personal identifiers from our active user databases. Please note that as a healthcare-adjacent provider, certain records (such as coaching notes or data subject to HIPAA retention rules) must be legally retained by us for mandated statutory periods, after which they will be permanently and irreversibly destroyed or completely anonymized.

7. Contact Us
‍
If you have any questions about this Privacy Policy or our compliance practices, please contact our Data Protection and Compliance Team at:

Marigold Health
Email: compliance@marigoldhealth.com
Phone/Text: 857-957-6820