Bia
Privacy Policy

MyTherapy LLC d/ba Bia (“Bia,” “Company,” “We,” “Our”) respects your privacy and fully acknowledges the great responsibility that comes with safeguarding sensitive data. We are committed to protecting it through our compliance with this policy.

This document describes the types of information we may collect or that you may provide when you access, use or register with Bia's website and mobile applications (“Services”) and our practices for using, maintaining, protecting and disclosing that information.

Please read this carefully to understand our policies and practices regarding your information and how we will treat it. By using or registering with our Services, you agree to this Privacy Policy. Your continued use of our Services after we make changes is deemed to be acceptance of those changes, so please check the policy periodically for updates as it may change from time to time.

Information We Collect and How We Collect It

We collect information from and about users of our Services:

• Directly from you when you provide it to us.
• Automatically when you use the Services.

Information You Provide to Us

When you use or register with the Services, we may ask you provide information by which you may be personally identified, such as your name, telephone number, postal address, email address, location, payment information (which is handled by our third-party payment providers, as described under Payment Processing below) and any other identifier by which you may be contacted online or offline ("Personal Information").

This information includes:

• Information that you provide by filling in forms in the Services. This includes information provided at the time of registering to use the Services, completing questionnaires and assessments.
• Details of transactions you carry out through the Services and of the fulfillment of your orders. You may be required to provide financial information before placing an order through the Services.
• Records and copies of your correspondence (including e-mail addresses and phone numbers), if you contact us. We may also ask you for information when you report a problem with the Services.
• Your responses to surveys that we might ask you to complete for research purposes.

Automatic Information Collection

When you download, access and use the Services, it may use technology to automatically collect:

• Usage Details. When you access and use the Services, we may automatically collect certain details of your access to and use of the Services, including traffic data, location data, logs and other communication data and the resources that you access and use on or through the Services.
• Device Information. We may collect information about your computer, mobile device and internet connection, including the computer or mobile device's unique device identifier, IP address, operating system, browser type, and mobile network information.

Cookies, Web Beacons, and Tracking

Our website uses cookies, which are small text files that are intended to make the Services better for you to use. In general, cookies are used to retain preferences and save your data in between sessions, and to store information for things like shopping carts. You may, however, disable cookies on the Services. The most effective way to do this is to disable cookies in your browser. We suggest consulting the help section of your browser or doing your own web research on how to disable cookies.

Please note that linked third-party websites may also use cookies. We cannot control the use of cookies by these third-party websites. For example, when you link from our website or app to a third-party website, that website may have the ability to recognize that you have come from Bia by using cookies. If you have any questions about how third-party websites use cookies, you should contact such third parties directly.

Advertising and Conversion Measurement

We advertise Bia on platforms such as Google and Meta (Facebook and Instagram). To measure how well our ads perform, we may share an ad-click identifier (such as a Google or Meta click ID) with these platforms to record that a visit or subscription resulted from one of our ads. We do not share your account information, such as your name, email address, phone number, or any health-related information, with these advertising platforms for this purpose. We do not share this ad-measurement data for users located in the European Economic Area or the United Kingdom.

Use of Captcha Technology

Our services may use a self-hosted challenge on certain pages to protect against automated access and abuse. This challenge runs on our own infrastructure and does not transmit your information to any third party.

Use of Personal Information We Collect

We may use the information we collect from you in the following ways:

• To set up your account with us.
• To personalize your user experience and to allow us to deliver the type of content and offerings in which you are most interested.
• To deliver service messages and other services and content you request and send information related to accounts and services, including confirmations, invoices, technical notices, updates, security alerts, and support and administrative messages.
• To conduct an aggregated analysis of the performance of our Services, including referral data if you arrive at our website from an external source.
• To process your purchases and subscriptions through our third-party payment providers, who handle your payment information to expedite future orders and automate billing. Bia does not store your full payment card number.

All the data we collect at Bia is necessary for Bia to deliver the services you use. The amount we collect has been minimized wherever possible to respect your privacy.

Should you still disagree with the collection and processing of this data, we recommend you stop using our services or contact us at support@biajourney.com to delete your account.

Text Messages (SMS)

If you provide a mobile phone number and opt in, we may send you text messages for purposes such as verification codes, appointment reminders, and account or security notifications. We only send text messages to numbers that have opted in, and we do not send marketing text messages without your consent. These messages are delivered through Amazon Web Services (AWS), our infrastructure provider, and are not shared with any separate third party. Message and data rates may apply. You can opt out at any time by replying STOP to any message, or by contacting us at support@biajourney.com.

Legal Basis for Processing Personal Information

Our legal basis for collecting and using the personal information described above will depend on the personal information concerned and the specific context in which we collect it.

However, we will normally collect personal information from you only (i) where we need the personal information to perform a contract with you; (ii) where the processing is in our legitimate interests and not overridden by your rights; or (iii) where we have your consent to do so. We have a legitimate interest in operating our Services and communicating with you as necessary to provide these Services, for example when responding to your queries, improving our platform, undertaking marketing, or for the purposes of detecting or preventing illegal activities.

In some cases, we may also have a legal obligation to collect personal information from you or may otherwise need the personal information to protect your vital interests or those of another person.

If we ask you to provide personal information to comply with a legal requirement or to perform a contract with you, we will make this clear at the relevant time and advise you whether the provision of your personal information is mandatory or not (as well as of the possible consequences if you do not provide your personal information).

Some of the information you choose to share, such as the phobia or condition you are working on and your related progress data, may be considered health or special-category data under laws such as the GDPR. We process this information on the basis of your explicit consent, which you provide when you choose to share it with us in order to receive the Services. You may withdraw that consent at any time by contacting us or deleting your account, without affecting processing carried out before withdrawal.

Your Data Protection Rights Under The General Data Protection Regulation (GDPR)

If You or a User are a resident of the EEA, you have the following data protection rights:

• You may access, correct, update, or request deletion of your personal information.
• In addition, you can object to the processing of your personal information, ask us to restrict the processing of your personal information, or request portability of your personal information.
• You have the right to opt-out of marketing communications we send you at any time. You can exercise this right by clicking on the "unsubscribe" or "opt-out" link in the marketing emails we send you.
• Similarly, if we have collected and process your personal information with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.
• You have the right to complain to a data protection authority about our collection and use of your personal information. For more information, please contact your local data protection authority.

We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws. To exercise any of these rights, please contact us at support@biajourney.com.

Your Data Protection Rights under the California Consumer Privacy Act (CCPA)

The California Consumer Privacy Act (“CCPA”) provides consumers with specific rights regarding their Personal Information. If you are a California resident, you have the right to:

• Request we disclose to you free of charge the following information covering the 12 months preceding your request: (a) the categories of Personal Information about you that we collected; (b) the categories of sources from which the Personal Information was collected; (c) the purpose for collecting Personal Information about you; (d) the categories of third parties to whom we disclosed Personal Information about you and the categories of Personal Information that was disclosed (if applicable) and the purpose for disclosing the Personal Information about you; and (e) the specific pieces of Personal Information we collected about you;
• Request we delete Personal Information we collected from you, unless the CCPA recognizes an exception;
• Opt out of the sale or sharing of your Personal Information, and limit the use of your sensitive personal information.

Consistent with California law, if you choose to exercise your applicable CCPA rights, we won't charge you different prices or provide you a different quality of services. If we ever offer a financial incentive or product enhancement that is contingent upon you providing your Personal Information, we will not do so unless the benefits to you are reasonably related to the value of the Personal Information that you provide to us. If you are a California resident and wish to exercise your rights under the CCPA, please contact us at support@biajourney.com.

Bia does not sell your Personal Information, and does not share it for cross-context behavioral advertising. Because we do not sell or share your Personal Information, we do not provide a "Do Not Sell or Share My Personal Information" link, we do not use your sensitive personal information for purposes that would require a "Limit the Use of My Sensitive Personal Information" option, and Global Privacy Control (GPC) signals do not change how we handle your data.

Data Security

We apply security measures to protect against the misuse, loss, and/or alteration of personal information under our control. We follow industry best practices when transferring and storing your data. Though we cannot ensure or guarantee that misuse, loss or alteration of information will never occur, we use all reasonable efforts to prevent it. No storage facility, technology, software, security protocols or data transmission over the Internet can be guaranteed to be 100% secure. Computer hackers that circumvent our security measures may gain access to certain portions of your personal data, and technological bugs, errors and glitches may cause inadvertent disclosures of your personal data; provided, however, that any attempt to breach the security of the network, our servers, databases or other hardware or software constitutes a crime punishable by law. For the reasons mentioned above, we cannot warrant that your personal data will be absolutely secure. Any transmission of data at or through the Bia website and app is at your own risk.

Data Processors

The Services use Amazon Web Services (AWS), our infrastructure and data-processing service provider, to host and store your data and to deliver our emails and text messages. AWS processes this data on our behalf to provide the Services and does not use it for its own purposes.

Bia is based in the United States, and your information is processed and stored in the United States by AWS. If you access the Services from the European Economic Area, the United Kingdom, or another region with data-transfer restrictions, your information is transferred to the United States under appropriate safeguards, including the European Commission's Standard Contractual Clauses and, where applicable, AWS's certification under the EU-US Data Privacy Framework.

Payment Processing

We use third-party payment providers, including but not limited to Apple, Google Play, Stripe, and PayPal, to process transactions. When you make a purchase, your payment information is provided directly to these providers and is subject to their respective Privacy Policies and Terms of Service. We do not control and are not responsible for the collection, use, or disclosure of your information by these providers. Any data you choose to share with them is done at your own discretion and governed by their policies.

• Apple Privacy Policy
• Google Privacy Policy
• Stripe Privacy Policy
• PayPal Privacy Policy

Updating and Accessing Your Personal Information

If your Personal Information changes, we invite you to correct or update your information. We will retain your information for as long as your account is active or as needed to provide you services. If you wish to cancel your account, request that we no longer use your information to provide you services, or delete your Personal Information, you may do so through your account settings, or contact us at support@biajourney.com. We will respond to your request to have your Personal Information updated as soon as possible. We will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

Notice Concerning The Information Of Children

In accordance with the Children's Online Privacy Protection Act ("COPPA"), parents must create and manage accounts for children under 13. We do not knowingly permit children under 13 to register accounts independently.

Child account information is used solely to provide access to Bia's features and services. This information is not shared with third parties. Parents have the ability to view and permanently delete their child's information from the account page. If Bia gains actual knowledge that information has been collected from children under the age of 13 without parental consent, Bia reserves the right to immediately delete the account and wipe all related information from our servers.

For privacy questions or to exercise parental rights, please contact us at: support@biajourney.com.

Changes to this Privacy Policy

Bia reserves the right to amend this Privacy Policy from time to time to reflect changes in the law, our data collection and data use practices, the features of Bia’s services, or advances in technology. Please check this page periodically for changes. If we make a change to this Privacy Policy that, in our sole discretion, is material, we will notify you by posting notice of these changes in this Privacy Policy.

Contact Us

If you have any questions about this Privacy Policy, please contact us by email at support@biajourney.com.

Last Update: July 27, 2026

Changelog:

• July 27, 2026 - Privacy Policy is Updated. Replaced the reference to Google reCAPTCHA with a self-hosted challenge that does not transmit data to third parties. Clarified our use of Amazon Web Services (AWS) for hosting, storage, email, and text messages. Added disclosure of opt-in text message (SMS) communications. Clarified that this policy covers both our website and mobile applications, and that payment information is handled by our third-party payment providers rather than stored by Bia. Stated definitively that Bia does not sell or share your Personal Information for cross-context behavioral advertising, and clarified our position on Do Not Sell/Share, Limit the Use of Sensitive Personal Information, and Global Privacy Control signals. Added our legal basis (explicit consent) for processing health or special-category data, and disclosed that data transferred to the United States is protected by Standard Contractual Clauses and the EU-US Data Privacy Framework.
• September 21, 2024 - Privacy Policy is Updated. Specified that information of children requires parental consent and oversight in accordance with the Children's Online Privacy Protection Act. Specified that reCaptcha technology may be used.
• May 16, 2024 - Privacy Policy is Updated. Specified that AWS is used to process and store data.
• May 3, 2023 - Privacy Policy is Published