Privacy policy

1. Who we are and what this Policy covers

The Service is not licensed therapy or a health care provider relationship. Nevertheless, what you say may reveal sensitive information about your mental or physical health. Privacy protections may apply regardless of whether a service provides licensed care. Please avoid giving us information that is unnecessary for your conversation.

FOR EMERGENCIES OF ANY KIND, CALL 911 IMMEDIATELY. THE SERVICE AND PRIVACY CONTACTS ARE NOT EMERGENCY, SUICIDE PREVENTION, OR CRIME RESPONSE CHANNELS.

2. Information collected and sources

Account and contact information: identifiers you provide, such as name, email address, telephone number, account credentials, age eligibility confirmation, and communication preferences. We use this information for enrollment, authentication, support, and required notices. Do not send us government identification unless we specifically request it through a secure process for a lawful purpose.

Call information: your telephone number, call time, duration, connection information, and conversation content processed to generate AI responses. Audio, transcripts, summaries, and AI responses may contain names, employment or relationship details, complaints, or sensitive information that you choose to discuss.

Sensitive information: conversations may reveal health conditions or inferences about health, racial or ethnic origin, religious beliefs, sex life or sexual orientation, immigration status, or other protected characteristics. We do not require you to provide these details for enrollment. We process sensitive information only as permitted by law, with separate consent where required, and subject to applicable purpose and necessity limits.

Website and device information: IP address, browser and device characteristics, approximate location inferred from IP address, pages visited, timestamps, referral information, and cookie or similar identifiers where the relevant technology is enabled. Our Cookie Policy describes applicable choices. We obtain these details from your browser and our website providers.

Support and consent records: requests, feedback, account communications, accepted terms versions, and privacy or recording choices. Sources are you, your device, and vendors delivering the Service for us. We do not obtain additional information from data brokers or social media enrichment services under this Policy.

3. Purposes, AI providers, and prohibited secondary uses

We use personal information to provide requested calls and AI responses, administer subscriptions, process authorized payments, authenticate access, respond to support and privacy requests, maintain reliability and security, prevent fraud, comply with law, and enforce our agreements. We use technical performance information to diagnose failures and improve operation.

We disclose the information needed to provide calls to our telecommunications, voice-processing, hosting, and AI providers. AI providers receive the voice or text content necessary to generate a response.

We do not use identifiable private call content to train general-purpose AI models, sell private call content, or use it for targeted advertising. We do not permit vendors to use it for those purposes. If we propose another use requiring consent, we will describe it and obtain separate permission before beginning, unless the use is prohibited regardless of consent. Consent to use the Service is not blanket permission for unrelated processing.

We do not create voiceprints or biometric templates to identify callers, collect precise location through device permissions, or use AI to make decisions about employment, housing, credit, insurance, or other legally significant eligibility matters. Ordinary voice processing for conversation is distinct from biometric identification.

4. Disclosures, sale, and advertising

We disclose information to service providers performing authorized functions, including hosting, telecommunications, AI response generation, payments, account administration, security, and support; professional advisers bound by appropriate confidentiality duties; authorities or other recipients where disclosure is legally required or otherwise lawfully necessary; and a successor in a merger, acquisition, or similar transaction subject to applicable privacy protections. We may also disclose information at your specific direction. Disclosure categories correspond to the information each recipient needs for the stated purpose, not blanket access to every call.

We do not sell personal information, share it for cross-context behavioral advertising, or use it for targeted advertising as those terms are defined by applicable state privacy laws. We do not disclose personal information to third parties for their own direct marketing. This policy permits only essential website technology and optional analytics that do not constitute such sale, sharing, or targeted advertising.

We may disclose information to comply with valid legal process or as otherwise permitted by law to address a serious threat or unlawful activity. This possibility does not mean that calls are actively monitored, that we recognize threats, or that authorities will be contacted. We do not promise confidentiality from lawful legal process.

5. Retention and security

We retain information only as long as reasonably necessary for the disclosed purpose, applicable legal obligations, security, or resolution of a dispute.

We use reasonable administrative, technical, and physical safeguards appropriate to the information, including restricted access and vendor controls. No system is completely secure. We delete, deidentify, or securely isolate data when no longer needed, subject to lawful preservation requirements. Where deidentified information is retained, we maintain it in deidentified form and do not attempt reidentification except as law permits to test deidentification safeguards.

6. Privacy requests and choices

We verify requests when required using information reasonably proportionate to the sensitivity of the request and the information already held. We do not require account creation merely to make a request. Verification information is used for that purpose and security, not marketing. Where allowed, an authorized agent may act for you; we may request proof of authorization and verification of your identity, subject to applicable rules. Opt-outs will not be subjected to identity verification where law prohibits it.

We respond within the applicable statutory deadline, ordinarily 45 days for access, correction, and deletion requests, with extensions only as permitted and explained to you. Some rights have different or shorter deadlines. We will state any lawful reason for denying all or part of a request and provide applicable appeal instructions. We provide required requests without charge except where a lawful exception permits a reasonable fee or refusal.

We will review and respond within the applicable statutory period and explain how to contact the appropriate state attorney general or privacy regulator if an appeal is denied. You may complain to your regulator without first contacting us. We do not unlawfully discriminate or retaliate for exercising privacy rights.

Withdrawing consent stops future processing dependent on it, subject to legal requirements; it does not make prior lawful processing unlawful. If the withdrawn processing is necessary to provide a call, we may be unable to provide that feature. Deletion is subject to lawful exceptions, which we will explain when relevant. Account deletion also stops subscription renewal under our Terms.

7. Browser signals, communications, and children

Where required, we honor legally recognized universal opt-out preference signals, including Global Privacy Control, for applicable sale, sharing, or targeted-advertising processing. Our baseline is not to engage in those activities. An opt-out signal does not itself request deletion or disable essential security functions. Traditional “Do Not Track” browser signals are not treated as consent to tracking; beyond recognized signals required by law, we do not implement a separate response to them.

You may unsubscribe from promotional emails using their unsubscribe link. Necessary billing, account, and security messages may continue. Marketing calls or texts requiring consent are governed by separate consent and opt-out procedures; enrollment alone does not authorize them.

The Service is intended only for adults aged 18 or older and is not directed to children. We do not knowingly collect children’s information through permitted use. If you believe a child has provided information, contact us so we can investigate, restrict access, and delete information as required.

We do not knowingly sell or share personal information of anyone under 16.

8. Locations, third parties, and changes

We operate in the United States. Authorized providers may process information in the countries identified in Section 3, subject to applicable legal safeguards. Independently operated linked sites have their own policies. We will post an updated date when this Policy changes, give material- change notices as required, and obtain consent before materially different processing where required. Continued use does not replace required consent or waive statutory privacy rights.

U.S. State Privacy Rights Supplement

This Supplement is part of the Privacy Policy. Rights depend on your residence, the information involved, the processing activity, and whether the relevant law applies to the Company. Some laws have revenue or processing thresholds and exemptions; nationwide availability does not itself establish that every law applies. Nothing here limits rights provided by a current or subsequently effective law. Use the request and appeal methods in Section 6 of the Privacy Policy.

California

Where the California Consumer Privacy Act applies, residents may request knowledge of and access to personal information, including categories, sources, purposes, disclosures, and specific pieces; correction; deletion; and applicable portability. Residents may opt out of sale or sharing, limit covered uses or disclosures of sensitive personal information, and exercise rights without prohibited discrimination. Authorized agents and recognized opt-out signals are supported as required.

Our collection categories are identifiers; account and commercial information; internet/network activity; approximate geolocation; audio and conversation information; and any sensitive information or inferences actually included in calls. Sources, purposes, recipients, and retention appear in Sections 2–5. These same disclosures describe the preceding 12 months only to the extent the categories were actually collected or disclosed during that period.

Our policy is not to sell or share personal information and not to use sensitive information for purposes requiring a California right-to-limit mechanism without first supplying that mechanism. We do not knowingly sell or share minors’ data. Where legally required, request methods also include by telephone. California residents may contact us regarding direct-marketing disclosures under the Shine the Light law; our policy prohibits such disclosures. The California Privacy Protection Agency provides information and complaint resources at https://cppa.ca.gov/.

Colorado, Connecticut, Delaware, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, and Virginia

Where the applicable state law covers the Company, residents may generally request access, correction, deletion, and portability; opt out of sale, targeted advertising, and specified profiling; and appeal a denial. Sensitive-data consent and recognized universal opt-out signals are supported where required. Specific scope, deadlines, exceptions, and effective requirements vary. Where a law provides information about particular third-party recipients, rather than only categories, we will provide it in response to an eligible request.

Indiana, Iowa, Kentucky, Tennessee, and Utah

Where applicable, residents may exercise their state’s rights to confirm processing, access or obtain a copy, delete covered information, and opt out of covered sales; targeted-advertising, correction, profiling, appeal, and sensitive-data rights apply to the extent provided by the particular law. These laws do not all grant an identical set of rights. We will not deny a right merely because it is not expressly listed here and will explain any scope limitation when responding.

Florida

Where Florida’s Digital Bill of Rights applies, residents may exercise its applicable access, correction, deletion, portability, sale/targeted-advertising/profiling opt-outs, sensitive-data and voice/facial-recognition collection choices, and appeal rights. Its coverage is limited and must be evaluated separately. Other Florida privacy, recording, security, and consumer protections may apply even when that statute does not.

Maryland

Where Maryland’s Online Data Privacy Act applies, we limit personal information to what is reasonably necessary and proportionate for the requested service. Sensitive-data processing is limited to what is strictly necessary to provide or maintain the specific requested product or service; sensitive data is not sold. Consent does not override a statutory prohibition. Applicable access, correction, deletion, portability, opt-out, appeal, and other state rights remain available.

Minnesota

Where Minnesota law applies, residents may exercise access, correction, deletion, portability, applicable opt-outs, and appeal rights. Additional rights may include a list of specific third-party recipients and rights to understand, question, correct information used in, and obtain reevaluation of covered profiling decisions. Our service does not use AI to make legally significant eligibility decisions as described in the Privacy Policy; if that changes, required notices and rights must be implemented before such processing begins.

Rhode Island

Rhode Island residents may exercise applicable access, correction, deletion, portability, sale/targeted-advertising/profiling opt-outs, and appeal rights. Required website disclosures are supplied even where a broader rights threshold does not apply. Categories collected and their purposes appear in the Privacy Policy. Third parties to whom personal information has been sold or may be sold: none under the no-sale policy in this draft.

Nevada

Nevada residents may direct a verified request to info@letitout.life to opt out of sales covered by Nevada’s online privacy law. We do not sell covered information under that law. Consumer health data receives separate treatment under the Consumer Health Data Privacy Notice below where Nevada law applies. General online privacy rights and consumer health data rights have different definitions and coverage.

Washington and other consumer health data protections

Washington’s My Health My Data Act may protect health-related information and inferences in calls even though Let It Out does not offer licensed therapy. It can also protect certain data collected in Washington from people who do not reside there. See the separately linked Consumer Health Data Privacy Notice for categories, purposes, sharing, consent, withdrawal, access, and deletion. Comparable or additional protections may apply in Nevada, Connecticut, Maryland, and other jurisdictions. We honor the law applicable to the person and processing, not only the state where the Company is based.

Illinois and other biometric or recording laws

The Service processes voice to conduct a conversation but, under the operating restrictions stated in this draft, does not create identifying voiceprints or other biometric identifiers. If biometric identification is introduced, we will provide legally required notices, obtain applicable consent or written releases before collection, and establish retention and destruction practices before using it. This Policy is not a biometric release.

Call interception, recording, and transcription requirements vary by jurisdiction. We will provide required prior notices and obtain required consent before covered processing begins. By calling or accepting the Terms, you do not waive protections requiring a separate recording consent. No state- rights summary in this document substitutes for that process.

Other states and future rights

Residents of other states may have privacy, security, breach-notification, recording, health-data, or other rights even if no comprehensive privacy statute applies. We will respond under the applicable law and honor any additional nonwaivable rights as they become effective. Contact info@letitout.life with questions; no statement in this Supplement contracts away statutory rights.

Consumer Health Data Privacy Notice

This notice supplements Let It Out’s Privacy Policy for consumer health data covered by Washington’s My Health My Data Act, Nevada’s consumer health data law, and other applicable laws. Operator: letitout.life. Contact: info@letitout.life. Publish this notice under a separate, conspicuous “Consumer Health Data Privacy” website link where required.

Data categories, sources, and purposes

A caller may voluntarily disclose symptoms, diagnoses, treatment, medication, emotional distress, sexual or reproductive health, substance use, or other physical or mental health information. Associated audio, transcripts, summaries, AI responses, and health-related inferences may be consumer health data when linked or reasonably linkable to a person. Sources are the caller, call processing, and generated conversation outputs; associated phone or account identifiers may link those details to the caller. We do not need detailed medical records to provide ordinary venting conversations.

We process such information only as necessary to deliver the conversation you request, or with consent where the applicable law allows or requires it. We do not use consumer health data to advertise, sell health-related audience segments, or train general-purpose AI models under this Policy.

Recipients and sharing

Consumer health data may be processed by contracted telecommunications, speech-processing, AI, hosting, and support providers only to the extent needed for authorized service functions. Recipient categories are those providers and, where law permits or requires, legal advisers, authorities, or a successor bound by applicable protections. We restrict processor handling by appropriate contracts and do not treat a vendor’s independent use as a service-provider function.

We do not sell consumer health data. If a future sale is legally permissible and proposed, a distinct, legally compliant authorization will be required before it occurs; ordinary service consent is not sufficient. We do not use geofencing around health care facilities to identify, track, or target people seeking health services.

Consent, access, withdrawal, and deletion

Where required, consent to collection and consent to sharing will be separate, specific, and obtained before the relevant activity. Exceptions for processing necessary to provide your requested service are applied only where the law allows them. No general acceptance of Terms authorizes all health-data processing. Withdrawal may prevent us from continuing a feature that requires that processing.

Submit a request through info@letitout.life. Subject to applicable law, you may confirm collection, sharing, or sale; access data; obtain required recipient information; withdraw consent; and request deletion. We verify identity proportionately and respond within the applicable deadline, generally 45 days for covered requests, using any extension only when permitted and explained. Required deletion includes notifications to relevant processors and other recipients and treatment of backups as required by the applicable statute.

If we deny a request, you may appeal to info@letitout.life using “Health Data Privacy Appeal.” We will explain the result within the statutory period and provide complaint instructions for the relevant attorney general if denied. Washington information is available at https://www.atg.wa.gov/ and Nevada information at https://ag.nv.gov/. Other available remedies remain intact. Health data retention follows the completed schedule in the Privacy Policy, subject to stricter applicable requirements.

Cookie Policy

1. Scope and technologies

This Cookie Policy explains how info@letitout.life, doing business as Let It Out, uses cookies and similar technology on https://letitout.life. A cookie is a small browser-stored file. Similar technologies include local storage, pixels, tags, and software that reads or writes device identifiers. Server-side tracking may also transmit information without storing a browser cookie. This Policy supplements our Privacy Policy; it does not govern the audio processing required to conduct a phone call.

2. Permitted categories and purposes

Strictly necessary technologies support functions such as session security, authentication, requested checkout, fraud prevention, and remembering privacy choices. They are limited to those functions. Preference technologies remember optional settings. Analytics technologies, if enabled, measure website performance and aggregate usage; they must not receive private call content or sensitive health information.

Under the privacy baseline adopted in this draft, we do not use advertising pixels, cross-site behavioral advertising, or other technology that sells or shares personal information or uses it for targeted advertising. We do not place trackers in call audio, transcripts, private conversation displays, or privacy-request submissions. If different tracking is proposed, we will revise our disclosures and implement required choices and permissions before it begins.

3. Cookie and tracker inventory

Session cookies generally expire when the browsing session ends; persistent cookies remain for the stated duration or until deleted. Third-party technologies may send information directly to their providers. The inventory must identify any such provider and applicable policy link. A technology’s actual function, not its label, determines whether it is optional or requires a privacy choice.

4. Your controls

Use the popup to accept or reject optional categories or change a prior choice. Where prior consent is required, optional technology remains disabled until you opt in. Rejecting optional technology will not prevent access to the basic service. Necessary functions may not operate if you disable the technology they require through browser settings.

We honor applicable legally recognized opt-out signals, including Global Privacy Control, for covered processing. We do not require an account to exercise a browser-level opt-out. Browser controls can delete or block cookies, but may not stop every pixel or server-side transmission; use our privacy controls as well. Choices can be browser- or device-specific unless law requires broader application.

Clearing cookies may remove a stored preference, but recognized signals must continue to be honored. Withdrawing an optional consent is available through the same settings control.

5. Changes and contact

We update this Policy and its inventory when technologies or purposes change, provide notice where required, and obtain new consent when required. Contact info@letitout.life for questions. Accepting the Terms or placing a telephone call does not itself consent to optional website tracking.

Contact

Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please call +1 (954) 599-9382 or email us at admin@letitout.life or contact us at 3320 Atlanta St, Hollywood FL 33021, United States.

SMS/Text Messaging Terms and Privacy

When you call Let It Out, you consent to receive SMS text messages from us at the phone number you are calling from, including a secure payment link and service-related messages. Message frequency varies based on your activity. Message and data rates may apply. You can reply STOP at any time to unsubscribe, or HELP for assistance.

Mobile Information — No Sharing or Selling: We do not sell, rent, or share your mobile phone number, SMS opt-in consent, or any SMS-related information with any third parties or affiliates for their marketing or promotional purposes. Mobile information collected for SMS delivery is used solely to provide our service to you. This SMS/text messaging consent and the associated mobile information are not shared with third parties for marketing purposes under any circumstances.