PRIVACY POLICY

Last updated: July 2026

1. WHAT WE COLLECT

We collect information you provide directly: your email address, tinnitus assessment responses, treatment tracker entries, AI Coach conversation history, and any notes or feedback you submit. We also collect standard server logs (IP address, browser type, pages visited) for security and performance purposes.

2. HOW WE USE YOUR DATA

To provide and personalize the Stop-Tinnitus platform
To generate AI Coach insights using your profile and tracking data
To send transactional emails (account verification, password reset, digests you opt into)
To improve the platform using anonymized, aggregated usage patterns

We do not sell your personal data. We do not use your data for advertising.

3. AI COACH & THIRD-PARTY AI

The AI Coach is powered by Anthropic's Claude API. When you send a message, your tinnitus profile (subtypes, triggers, impact scores) and conversation context are sent to Anthropic's servers to generate a response. Your email address and real name are never included. Anthropic's data handling is governed by their Privacy Policy.

4. DATA SHARING

We share data only as necessary to operate the platform:

Stripe — for payment processing. We never store your payment details.
Anthropic — for AI Coach functionality (anonymized profile data only).
Hosting provider — our server infrastructure processes all data.

We do not share identifiable data with researchers, advertisers, or any other third parties.

5. DATA RETENTION

We retain your data for as long as your account is active. You can permanently delete your account and all associated data immediately at any time from your dashboard (username dropdown → Close Account). Anonymized aggregate data (with no link to your identity) may be retained for research purposes.

6. YOUR RIGHTS

You have the right to access, correct, or delete your personal data. Account deletion is self-serve via the dashboard. To request data access or corrections, contact us at stop-tinnitus.com/contact or email us directly. We will respond within 30 days.

7. SECURITY

We use HTTPS encryption for all data in transit. Passwords are hashed and never stored in plain text. We do not store payment card details. Despite these measures, no online service can guarantee absolute security.

8. COOKIES

We use a single session cookie to keep you logged in. We do not use advertising cookies or third-party tracking cookies.

9. CHANGES TO THIS POLICY

We may update this policy from time to time. If we make material changes, we will notify you by email or by a notice in the platform. Continued use of the platform after changes constitutes acceptance.

10. CONTACT

Questions about this policy? Contact us.