The policy covers information linked to a person or household
Data includes identifiers, contact details and communications with therapists. Using the app or website is stated to accept this policy and the linked Terms, including certain sharing with service providers. The linked Terms are outside this supplied policy.
Details not recorded for this card
Supporting quotations
For purposes of this Policy and unless otherwise specified, "data" includes information that is linked to one person or household
When you use and access our app or website, you accept and agree to both the Terms and Conditions and this Privacy Policy, including that we'll share certain data with Service Providers.
Not stated here
The linked Terms and Conditions are not supplied; their substantive obligations cannot be described here.
Legal Rights & Agreement Rules · Restriction or exception
Insurance PHI and subscription data follow different notices
In the US, the insurance offering is available when appropriate and providers are in-network with the health plan. Insurance-member PHI, including therapy data and other data after login, follows the associated provider-group NPP instead of this policy. For subscription members this policy controls and the NPP does not apply. Where data is HIPAA PHI, the NPP supersedes conflicting practices. The linked NPP is not supplied, so its detailed rights and practices are outside this analysis.
Details not recorded for this card
Supporting quotations
To the extent any data is considered protected health information (“PHI”) under The Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), the Notice of Privacy Practices (“NPP”) of our associated provider groups will apply and supersede any conflicting practices set forth in this document.
First, the ability to pay using your health insurance, when appropriate, if the BetterHelp providers are in-network with your health plan ("Insurance Offering").
This Privacy Policy will not be applicable to your PHI, which includes therapy data and other data after you log in.
If you are a member of our Subscription Offering ("Subscription Member"), then this Privacy Policy is the controlling document that outlines how we may use data associated with you, and the NPP does not apply.
Qualifications & exceptions
Insurance eligibility depends on provider network and appropriateness; the NPP governs insurance-member PHI.
Not stated here
The linked NPP is not supplied; its detailed PHI handling rules and rights cannot be described here.
BetterHelp may update the policy and says significant changes will be notified through its website or app when you log in. It encourages periodic review. This stored version is effective October 14, 2026.
Details not recorded for this card
Supporting quotations
Last Updated and Effective: October 14, 2026
When we make significant changes to this Policy, we will notify you through our website or app when you log in to your account.
Legal Rights & Agreement Rules · Restriction or exception
External links do not establish control or endorsement
The platform may link to other sites/services whose policies and terms BetterHelp does not control. A link is not an endorsement, authorization or representation of affiliation or of the external party’s privacy/security practices.
Details not recorded for this card
Supporting quotations
We do not control external websites, and do not have control over their privacy policies and terms of use. The fact that we link to a website is not an endorsement, authorization, or representation of our affiliation with that external party or of their privacy and security policies or practices.
Legal Rights & Agreement Rules · Context
The California supplement addresses CCPA and CPRA rights
The California notice supplements the general policy for CCPA/CPRA compliance. It describes California residents’ rights over the preceding twelve months’ collection categories and use/disclosure purposes, and correction of personal information. Its later detailed rights and exceptions remain controlling.
Details not recorded for this card
Supporting quotations
This Privacy Notice for California Residents supplements the Privacy Policy to comply with the California Consumer Privacy Act of 2018 ("CCPA") and the California Privacy Rights Act ("CPRA") of 2020.
The CCPA and the CPRA are California laws that provide its residents with certain rights over information about them, including notice about the categories of personal information we have collected from them in the preceding twelve (12) months and the purposes for which the information is used or disclosed, and correction of personal information.
Legal Rights & Agreement Rules · Company commitment
DPF principles govern conflicts for covered European-origin data
BetterHelp states compliance/certification under the EU-US DPF, UK Extension and Swiss-US DPF for data received from the EU, UK including Gibraltar, and Switzerland. If the policy conflicts with those principles, the principles govern. The certification website is linked, but its text and independent certification evidence are outside this supplied source.
Details not recorded for this card
Supporting quotations
BetterHelp complies with the EU-U.S. Data Privacy Framework ("EU-U.S. DPF"), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework ("Swiss-U.S. DPF") as set forth by the U.S. Department of Commerce (collectively "the Data Privacy Framework").
BetterHelp has certified to the U.S. Department of Commerce that it adheres to the EU-US DPF Principles with regard to the processing of Personal Data received from the European Union, and the United Kingdom (and Gibraltar) and to the Swiss-US DPF Principles with regard to the processing of Personal Data received from Switzerland. If there is any conflict between this Privacy Policy and the DPF Principles, the DPF Principles shall govern.
Qualifications & exceptions
The priority statement concerns the covered DPF principles and data.
Not stated here
The linked framework/certification site is not supplied; certification is reported as the policy’s statement.
Legal Rights & Agreement Rules · Procedure
DPF complaints go first to BetterHelp, with conditional arbitration after other routes
EU, UK and Swiss individuals should first contact DPO@betterhelp.com for DPF-related data complaints. BetterHelp says it will investigate and attempt resolution within 45 days, is subject to FTC enforcement/sanctions, and will comply with applicable European DPAs. The notice links EU, UK and Swiss supervisory contacts and commits to resolving DPF transfer complaints. Binding arbitration may be available under certain conditions after other dispute processes are exhausted; those detailed conditions are on an unsupplied external site.
Details not recorded for this card
Supporting quotations
We will investigate and attempt to resolve any DPF Principles-related complaints within 45 days.
EU, UK and Swiss individuals with inquiries or complaints regarding our handling of Personal Data received in reliance on the DPF Principles should first contact BetterHelp at DPO@betterhelp.com
BetterHelp is also subject to the enforcement, and sanctioning powers of the FTC and will comply with the applicable Data Protection Authorities (DPAs) in regard to BetterHelp's processing of personal data that we receive from the EU, or UK, and Switzerland.
Contact details for EU DPAs can be found at:
Contact details for the UK Information Commissioner's Office can be found at:
Contact details for the Swiss Federal Data Protection and Information Commissioner can be found at:
BetterHelp commits to resolving complaints about our collection, use or handling of personal data transferred to the U.S pursuant to DPF principles.
Under certain conditions, more fully described on the DPF website, you may be entitled to invoke binding arbitration when other dispute resolution procedures have been exhausted.
Qualifications & exceptions
The 45 days is an investigation/attempt commitment; arbitration is conditional and follows exhaustion of other processes.
Not stated here
The linked DPF website is not supplied, so the full arbitration eligibility and procedure cannot be stated.
Legal Rights & Agreement Rules · Restriction or exception
Therapists may have professional duties to disclose or act
BetterHelp cooperates with government agencies when law requires and generally defers to the chosen therapist on psychotherapy notes/messages. Therapists may separately have duties to disclose information or act for suspected/reported abuse, serious suicidal potential, threatened harm or court-ordered treatment. Users are encouraged to discuss concerns with their therapist.
Details not recorded for this card
Supporting quotations
When required by law, we cooperate with government agencies.
Keep in mind that, as a general rule, we defer to your chosen Therapist to decide to produce (or not produce) any psychotherapy notes or messages you have had with them.
Specifically, some laws require mental health professionals to disclose information and/or take action for: (a) reported or suspected abuse; (b) serious suicidal potential; (c) threatened harm; and (d) court-ordered treatment.
Legal Rights & Agreement Rules · Context
The policy points to partner disclosures and a separate insurance NPP
The policy refers readers to a Third Party Partners Disclosure List for additional third-party information and sends insurance members to the NPP. Neither document’s detailed text is supplied as part of this assignment; no recipient list or insurance-PHI rule is inferred from those references.
Details not recorded for this card
Supporting quotations
For additional information regarding Third Parties that may share data with, please reference our Third Party Partners Disclosure List.
For Insurance Members: If you are an Insurance Member, then please refer to the NPP.
Not stated here
The referenced Third Party Partners Disclosure List and NPP text are not supplied; their detailed recipients and PHI practices remain outside this analysis.
Legal Rights & Agreement Rules · Company commitment
DPF onward transfers carry agent-processing responsibility with an exception
BetterHelp says it is responsible for DPF-covered data it receives and transfers to an agent acting on its behalf, and remains liable for agent processing inconsistent with the principles unless it is not responsible for the event causing damage. This is the notice’s stated DPF responsibility, not unlimited liability for every third-party act.
Details not recorded for this card
Supporting quotations
In the context of an onward transfer, BetterHelp is responsible for the processing of Personal Data it receives under the DPF Principles and subsequently transfers to a third party acting as an agent on our behalf.
BetterHelp shall remain liable under the DPF Principles if our agent processes your Personal Data in a manner inconsistent with the DPF Principles, unless BetterHelp is not responsible for the event giving rise to the damage.
Qualifications & exceptions
The exception applies where BetterHelp is not responsible for the event causing damage.
Legal Rights & Agreement Rules · Context
Processing, Third Party and Service Provider have defined boundaries
Processing includes collecting, storing and using data. Third Party excludes BetterHelp, service providers, therapists and any other specifically named parties. A service provider has a legal agreement to process data collected by or for BetterHelp, acts only at its direction, and cannot disclose identifiable data except to BetterHelp or subcontractors bound to no-less-restrictive processing terms. These definitions matter when reading promises about third-party sharing. The definition also permits reasonably necessary legal compliance, fraud/security prevention and debugging, plus internal technological research/demonstration that is reasonably necessary and proportionate to the sharing purpose.
Details not recorded for this card
Supporting quotations
In this Policy, we refer generally to activities done with data as "Processing" or "Process." Examples of Processing include collecting, storing, and using data.
For the purposes of this Policy, a Third Party means an entity that is not BetterHelp, not a Service Provider, not a Therapist or any other parties that are specifically called out in this Policy.
We define a Service Provider as a person or company that we have a legal agreement with to Process data collected by us or on our behalf.
Our Service Providers are not permitted to disclose data that is individually identifiable to any other person or company, other than to us or the Service Providers' own subcontractors provided that they're bound to data Processing terms that are no less restrictive than the Service Provider's terms.
The data obtained by Service Providers from their relationship with us must only be used for performing the services specified in our agreement with them, or as reasonably necessary to perform one or more of the following:
Comply with applicable law, regulation, or legal process;
Detect, prevent or mitigate fraud or security vulnerabilities;
Debug to identify and repair errors impairing existing intended functionalities; and/or
Conduct internal research for technological development and demonstration of our products or services, if such use is reasonably necessary and proportionate to achieve the purpose for which the data was shared.