Policies & Notices

Website Privacy Policy & HIPAA Summary

Effective Date: October 1, 2026

This page explains privacy practices for Alira’s public website and summarizes how information from its connected inquiry and mobile-app services can become part of clinical work. It is not the complete HIPAA Notice of Privacy Practices (NPP). For the full notice, including uses and disclosures of protected health information and your HIPAA rights, read the Notice of Privacy Practices or download a PDF copy.

Information collected and why

  • Website requests: Services delivering and protecting the website receive technical information such as your IP address, browser or device information, the page requested, and request time. This is used to deliver pages, maintain the site, and address security or operational problems. Merely visiting the public site does not create a therapist-client relationship.
  • Hosted inquiries: The contact page displays a form hosted by a separate Dashboard service. Contact details and any service, health, or other information you choose to submit go from your browser to the Dashboard; this website does not store your answers. Alira uses inquiries to respond to you, assess next steps, and support related administrative or clinical work. Please do not include more sensitive detail than needed in a first inquiry.
  • Connected reports: The Island of Shared Meaning app can send card activity, initials, and reports containing information you enter to the Dashboard. Details you provide may identify you even before linking. An installation may be connected to an identified referral after in-app confirmation or when an authorized Dashboard administrator claims an unlinked report. Retained reports, including previously submitted reports, can then be associated with that referral and accessed by authorized staff. If the report-highlights feature is enabled, authorized staff may request a generated highlight of qualifying report details, which sends those details to AWS Bedrock for processing. See the Mobile Application Privacy Policy for app-specific details.

Who receives information

Website hosting and delivery providers process technical requests. This website loads Google Fonts, so a browser requesting those fonts connects to Google. The Dashboard and its service providers process submitted inquiries and app information; authorized clinical and administrative personnel access information as needed for inquiry handling, care, and related operations. Conditional report highlights involve AWS Bedrock as described above. Links to scheduling, the client portal or EHR, and newsletters can take you to separate services with their own privacy practices. Information may also be disclosed when required or permitted by applicable law.

Cookies, tracking, and your choices

This website does not use advertising or analytics cookies or tracking scripts. External resources and linked services, including Google Fonts, the embedded intake form, and linked scheduling, can receive technical request information under their own privacy practices. Your browser settings control cookies; linked services may also have their own cookie practices. Read Website Data & Cookies for more about this website. If optional tracking practices materially change, this policy and the relevant cookie notice will be updated.

Health information, rights, and requests

When information is used in clinical care, the full Notice of Privacy Practices (PDF) explains applicable uses and disclosures for treatment, payment, and health care operations, as well as your rights concerning protected health information. You may ask about access to or correction of information, confidential communications, restrictions, or an accounting of disclosures as applicable. California residents may also have privacy rights for information covered by California law. Some medical information governed by HIPAA or California’s Confidentiality of Medical Information Act is treated differently under the California Consumer Privacy Act; a request to delete information is not a promise that clinical records can be erased. We review requests according to the information involved and applicable law. Deleting the app does not delete reports already submitted to the Dashboard.

Changes, questions, and complaints

If this policy materially changes, we will post the revised policy here, update its effective date, and provide additional notice when required. To ask a privacy question, make a request, or raise a concern, email hello@aliratherapy.com. Please avoid sending sensitive health details in an initial email. For concerns about protected health information, you may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights; you will not be retaliated against for making a complaint.

Clinical and crisis information

The content on this website and in the app is informational and educational, not a substitute for evaluation, diagnosis, or treatment. Accessing either does not establish a therapist-client relationship. If you are experiencing a crisis, call 988 or contact emergency services immediately.