Consumer health data we collect, and why
- Brain and body measurements: EEG recordings (neural data), sensor contact, measures calculated from them, and heart rate and heart rate variability where supported. Used to run your neurofeedback program, show your progress, and compare your measurements with reference data.
- Care details: the type of psychedelic care you receive, the substance and dose, session timings, facilitator notes, and the areas you are working on. Used to provide and personalize your program.
- What you write: intentions, journal entries, questionnaire answers (for example, about mood, anxiety and stuck patterns), and messages with your facilitator. Used to support your care and track change over time.
- Website submissions: your assessment score and results if you ask for them by email, and any health information you include in a request to start care. Used to send you your results and to reply to you.
- Your age range and sex, if you share them. Used to compare your measurements with people like you.
With your consent, we also use consumer health data to improve Psio's own algorithms and software (inside Psio, with your name and contact details kept separate) and to create combined statistics that never show an individual's own results, and we use it to keep the service secure and fix errors. Research and publication, and showing your own results in our materials, happen only if you turn on those separate choices.
Where it comes from
- From you, through the Psio app, the headband, your web account and our website forms.
- From your facilitator or clinic, who enter details about your care.
- From the Psio headband and your phone or tablet, which record measurements while you wear it.
Consumer health data we share, and with whom
We do not sell consumer health data. We do not share it with third parties except:
- Your facilitator or clinic, who you choose to work with, so they can provide your care.
- Research partners, only if you turn on the research choice, and then only de-identified data, under a written agreement that forbids re-identifying anyone.
- When the law requires it, for example in response to a valid legal order.
We also use processors, which handle data only on our instructions and only to run Psio: Google Cloud and Firebase (hosting, storage, sign-in, notifications, crash reports), Supabase (older parts of Psio being moved to Google Cloud), Resend (invitation emails), Netlify (website hosting and forms), Zapier and Google Workspace (passing on website submissions and emailing assessment results). We have no affiliates that receive consumer health data.
Your consent
We collect consumer health data only with your consent, which we ask for before you send it to us. In the Psio app, a consent screen appears before anything is recorded, with one checkbox to consent to collection and use and a separate checkbox to consent to sharing with your facilitator, clinic or Psio care team. On our website, a checkbox on each form asks for your consent before you send health information. You can withdraw consent at any time in the app (Settings, Privacy, Brain data) or by emailing help@psio.app.
Your rights
Depending on where you live, you have the right to:
- Confirm whether we collect, share or sell your consumer health data, and see it, including a list of the third parties and affiliates we have shared it with.
- Withdraw your consent to our collecting and sharing it.
- Have it deleted, including by the processors and third parties we have shared it with.
- Appeal if we decline your request.
To make a request, use our account and data request form, or email help@psio.app. We will confirm your identity, and respond within 45 days, or tell you within that time if we need up to 45 more days. We do not charge for requests and will not treat you differently for making one.
To appeal a decision, reply to our response with the word "Appeal" in the subject line. We will respond within 45 days and explain our decision. If you are still not satisfied, you can contact your state attorney general: in Washington, the Office of the Attorney General; in Nevada, the Office of the Nevada Attorney General; in Connecticut, the Office of the Attorney General's Privacy and Data Protection Section.
Location data
We do not collect your location, and we do not use geofencing around health care facilities.
Contact us
help@psio.app. By mail: Psio, Inc., 2525 Arapahoe Ave, Suite E4-1260, Boulder, CO 80302. See also our privacy policy.