Privacy & data handling

Last updated: 9 June 2026

What we collect

• Account: email and the display (or preferred) name you choose.
• Conversations: chat messages with Heri AI and any support session you initiate.
• Clinical notes: session reports a clinician drafts about your support sessions.
• Crisis page: if you allow it, your approximate location to surface the nearest contacts. It is not stored.

Confidentiality & preferred name

You can set a preferred name in Account and ask Heri AI and clinicians to use it instead of your legal name. We display your preferred name across the patient and clinician views when you turn the toggle on.

Consent

• Data processing: required to use the service.
• Clinical handover: opt-in. Required only when you ask Heri AI to escalate to a human clinician.
• Calendar sharing: opt-in. Required only for scheduled sessions that drop a Google Calendar invite.

Who can see what

• Your messages with Heri AI are visible only to you.
• A support session is visible to you and the clinician you connect with.
• Your institution's admin can see session metadata for governance — never your private AI chats.

Crisis information

The crisis contacts page is available without signing in. If you grant location access, contacts nearest you are surfaced first. Calls placed through “Call from app” use a peer-to-peer voice room — we do not record them.

Your rights

You can export, correct or delete your data at any time from Account. Deleting your account removes your profile, conversations and consent record within 30 days.

Security

All data is encrypted in transit (TLS) and at rest. Access is gated by row-level security and reviewed regularly.

Contact

Questions or requests: privacy@heri.ai.