Privacy Policy

What we collect

• ✓Account info: your name and email, provided when you sign in with Google
• ✓Session recordings: the audio you upload from your therapy or coaching sessions
• ✓Transcripts and summaries: the text and AI-generated summary derived from your recordings
• ✓Basic usage analytics: how you use the app (pages, actions, errors) so we can keep it working
• ✓The Do No Harm arena (our AI safety arena at getsesh.ai/arena), only if you play it: what you type in the arena, stored with your account and scrubbed for emails, phone numbers and ID numbers, plus a one-way daily hash of your IP address for abuse prevention. It's reviewed for safety research, and reviewers may read it. To delete it, email param.coach@getsesh.ai
• ✓Arena visit counts, even if you never sign in: we count page views and sign-in clicks on getsesh.ai/arena against a one-way hash that changes every day, with no cookies, no advertising identifiers and no profile of you.

We do not collect more than we need to run the service, and we never put your session content into a URL, search param, or anything shareable by accident.

How we use it

We use your data to provide Sesh, including the Do No Harm arena. Providing Sesh means storing your recordings, transcribing and summarizing them, powering your between-session chat, sending you essential emails, and keeping the app reliable. We do not sell your data, and we do not share it for advertising.

Who processes your data

To run Sesh, we rely on a small set of trusted third-party providers (“sub-processors”). Each one handles a specific job and only receives the data it needs to do it:

• ✓Encrypted storage and hosting, where your recordings, transcripts, and account live
• ✓Speech-to-text, to turn your session audio into a transcript
• ✓AI processing, to generate your summary and power the between-session chat
• ✓Email delivery, for sign-in, account, and service notices
• ✓Payment processing, for when paid billing launches (not active yet)

Your data is processed by these providers solely to deliver the service. It is never sold or shared for advertising.

How we protect it

Your data is encrypted in transit and at rest. We use row-level security at the database, which means each account can only ever access its own recordings, transcripts, and summaries, not anyone else's, and not ours to browse casually. Audio links are signed and short-lived.

Your control

You're in charge of your data. At any time you can:

• ✓Delete any individual recording, transcript, or summary
• ✓Delete your entire account and everything in it
• ✓Email us at param.coach@getsesh.ai with any data request

Deletion is permanent. Once you delete content or your account, it's gone and can't be recovered.

Recording consent

Recording a session is your responsibility. Consent laws vary by state, some require one party's consent, others require everyone's. Before each upload, Sesh asks you to confirm your therapist or coach knows you're recording. Please make sure you have the right to record before you do.

Not medical, not therapy

Sesh is a note-taking and reflection tool, not therapy, not medical advice, and not a crisis service. It doesn't diagnose or treat. Sesh is not a HIPAA-covered entity and does not sign Business Associate Agreements (BAAs). In a crisis, contact your provider or call or text 988.

Children

Sesh is for adults. You must be 18 or older to use it, and we don't knowingly collect data from anyone under 18.

Changes to this policy

If we make a material change to how we handle your data, we'll give you reasonable notice by email or in the app before it takes effect.

Contact

Questions about your privacy or your data? Email param.coach@getsesh.ai. You can also review our Terms of Service.