Terms of Service and Privacy Notice

Part B — Privacy Notice

This Privacy Notice describes the personal information MHM collects, how MHM uses and discloses it, and the choices available to the User. It applies to our websites, the Products, and our social media channels.

Because the Products operate in different ways, MHM's data practices vary by Product. In summary, the Google Drive-Based Tools retain the User's content within the User's own Google account and store little to no personal information on MHM's side, whereas the Courses and completion certificates necessarily involve third-party platforms that store certain personal information so that the Course and certificate can function. Each practice is described in the Sections that follow. In particular:

• Google Drive-Based Tools. The documents the User organizes, the answers the User provides, and the figures the User enters remain within the User's own Google account. MHM does not store the User's files, individual answers, or content as records about the User. The only information MHM collects from these Products is De-identified Information regarding how the Products are used, as described in Section B.1.
• Courses and certificates. A course-hosting platform and a credentialing provider store certain personal information — including the User's account, progress, completion, and the certificate issued — so that the Course functions and the certificate can be verified, as described in Section B.6.

B.1 Information We Collect

Information provided directly. When the User purchases a Product, contacts MHM, subscribes to MHM's email list, or otherwise interacts with MHM, MHM may collect the User's name, email address, and similar contact details, together with the contents of communications the User sends.

Purchase information. MHM uses Stripe to process payments and for related fraud-prevention and business services. Stripe collects and processes the User's payment information directly and may collect personal data, including through cookies and similar technologies; MHM does not receive or store the User's full payment card number. MHM receives limited confirmation information regarding the purchase, such as that a payment succeeded and the Product purchased. Stripe's privacy policy is available at https://stripe.com/privacy.

Course accounts, progress, and certificates. When the User enrolls in a Course, our course-hosting platform creates an account for the User and records information such as the User's name, email, login activity, course progress, and completion. Where a Course awards a certificate, MHM generates a digital credential through our credentialing provider. Such information is stored by those platforms so that the Course and certificate can function, as further described in Section B.6.

Information within the Google Drive-Based Tools. Certain Google Drive-Based Tools ask the User questions (for example, an interview regarding the User's situation) to determine which folders or materials to create, and others operate by having the User enter information directly. In each case, answers the User provides, documents the User organizes, and figures and details the User enters remain within the User's own Google account. MHM uses such inputs to operate the Product for the User. Where a Product offers a save-and-resume feature, the User's answers may be stored within the User's own Google account so the User can return to them later. In each case, the User's answers, documents, and entries remain within the User's own Google account, and MHM does not receive or store their contents as identifiable records on MHM's servers.

De-identified usage information — Parenting Time Preview. For Parenting Time Preview, the De-identified Information consists only of the following, stored as combined totals across all users: the User's primary state or territory; the number of children in banded form (1, 2, or 3-plus) and, for each child, an age band and a birth month (never a date of birth); which of the following widely observed holidays the User selected for scheduling, counted at most once per user however many related entries are selected — Chinese/Lunar New Year, Christmas, Eid al-Fitr, Kwanzaa, Hanukkah, Halloween, Easter, Diwali, Ramadan, Pride, and Indigenous Peoples Day — some of which may reflect a religious or cultural tradition; whether the same-day holiday conflict resolver was used; a count of users; and a de-identified running total of children across all users. Holiday selections are optional scheduling choices; the User's latest snapshot replaces any earlier one, and none of this information is linked to the User.

De-identified usage information (Google Drive-Based Tools). For the Google Drive-Based Tools, MHM collects De-identified Information regarding how the Products are used. For some Products, this information is stored only as combined totals across all users. For other Products, it is stored as individual de-identified records, each describing a single use session in generalized form — for example, ranges or bands and categories rather than exact figures — which MHM may analyze together to understand patterns across users. In all cases, this is De-identified Information as defined in Section A.1: it is derived from the categorical choices and inputs the User provides while using the Product; it is not obtained through Google APIs and is not taken from the contents of the User's Google Drive; and it does not include the User's name, contact details, account numbers, dollar amounts, item names, documents, free-text entries, or other identifying details, and is not linked to the User, to the User's identity, or across the User's sessions or Products. By using the Products, the User consents to this collection and to the uses described in Section B.2. The Courses, by contrast, record individual progress and completion, as necessary to issue a certificate, as described in Section B.6.

Information collected automatically. When the User visits our websites or interacts with our social media content or advertising, MHM and its providers may collect technical information such as device type, browser, general location, and interaction data, through cookies and similar technologies, as described in Section B.5. When the User purchases, MHM also records limited technical information, including IP address and timestamp, associated with the User's acceptance of this Agreement, for fraud prevention and to maintain the integrity of consent records.

B.2 How We Use Information

MHM uses the information it collects to: (a) provide, operate, and improve the Products, websites, and Content; (b) process purchases and deliver the Products; (c) respond to inquiries and provide support; (d) send communications the User has requested and, where permitted, marketing regarding the Products, which the User may decline at any time; (e) understand, in aggregate, how the Products are used; (f) maintain the security of the Products and systems and prevent misuse; (g) comply with legal obligations and enforce this Agreement; and (h) create, use, and disclose De-identified Information, including aggregated statistics, insights, benchmarks, and reports derived from how the Products are used, provided that such information does not identify, and is not linked to, the User.

B.3 Use of Google User Data (Limited Use Disclosure)

For Products that connect to the User's Google account, MHM's use of information received from Google APIs adheres to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements. Specifically:

• (a) MHM uses Google account access solely to provide the features made available within the Product, such as creating folders and files in the User's Google Drive;
• (b) MHM does not sell or transfer Google user data to third parties and does not use it for advertising, retargeting, credit, or lending purposes.
• (c) MHM does not use Google user data to train generalized artificial intelligence or machine-learning models; and
• (d) MHM does not use Google user data for any purpose other than as disclosed in this Privacy Notice.
• (e) MHM does not allow humans to read User data obtained through Google APIs except: (i) with the User's explicit consent to access specific data; (ii) where the data has been aggregated and anonymized and is used for internal operations in accordance with applicable law; (iii) where access is necessary for security purposes, such as investigating abuse; or (iv) where required to comply with applicable law.
• (f) MHM is committed to enabling the User to export data obtained through Google APIs to other services or applications. For the Google Drive-Based Tools, this obligation is inherently satisfied: because the User's files, folders, and records are created and stored within the User's own Google Drive, the User may access, download, and transfer that data at any time through Google's own export and portability features, without any action required by MHM.
• (g) MHM does not sell or transfer Google user data to third parties, and will not expose non-public User content obtained through Google APIs to other users or third parties without the User's explicit opt-in consent.
• (h) MHM will not publicly disclose the User's financial or payment information or authentication information.

B.4 Information the Google Drive-Based Tools Do Not Collect or Store

With respect to the Google Drive-Based Tools, MHM does not:

• (a) store the documents or records the User creates or files in the User's own Google Drive;
• (b) receive or store the information the User enters, except for the De-identified Information described in Section B.1 (which contains none of the raw entries, amounts, item names, documents, or free text the User provides);
• (c) store the User's interview answers as identifiable records on MHM's servers; or
• (d) maintain per-user logs of the User's activity within such Products.

Across all Products, MHM does not sell the User's personal information. The Courses necessarily store account and completion data, as described in Section B.6.

B.5 Cookies, Tracking, Advertising, and Social Media

On our websites and through our advertising, MHM and its providers use cookies, pixels, and similar technologies to analyze traffic, measure the performance of content and advertising, and reach persons who may be interested in the Products. These technologies may include:

• (a) Website analytics (for example, Google Analytics), to understand how our websites are used;
• (b) Advertising and measurement pixels. MHM uses pixels, web beacons, and similar storage technologies from third parties, including Meta (Facebook and Instagram) and TikTok. These third parties may use such technologies to collect or receive information from our websites and elsewhere on the Internet, and may use that information to provide measurement services and to target and deliver ads, including ads regarding the Products; and
• (c) Social media platforms on which MHM maintains a presence. The User's interactions on such platforms are also governed by each platform's own terms and privacy policy, which MHM does not control.

The User may control cookies through the User's browser settings. The User may opt out of the collection and use of information for ad targeting through the Digital Advertising Alliance at http://www.aboutads.info/choices, through the European Interactive Digital Advertising Alliance at http://www.youronlinechoices.eu/, and through the ad settings offered by each advertising platform, including Meta's ad preferences. See Section B.12 regarding opt-out preference signals.

B.6 Online Courses and Completion Certificates

Certain Products are delivered as online Courses rather than as Google Drive-Based Tools, and MHM's data practices differ accordingly:

• (a) Course account and progress. To take a Course, our course-hosting platform creates an account for the User and records information such as the User's name, email, login activity, course progress, and completion. Such information is stored by that platform so that the Course can function and is handled under that platform's own privacy and security terms, in addition to this Privacy Notice.
• (b) Completion certificates and verification. Upon the User's completion of a Course that awards a certificate, MHM generates a digital certificate through our credentialing provider. The certificate contains information such as the User's name, the Course completed, and the completion date, and is hosted on a verification page that may be accessed by any person who possesses the certificate or who scans its QR code or link. This functionality is intentional and enables a court or other party to confirm the authenticity of the certificate. The credential information is stored by the credentialing provider under its own privacy and security terms.
• (c) Disclosure by the User. If the User presents or files the certificate (for example, with a court), the User thereby discloses the information it contains, and the ability to verify it, to the recipient. Such disclosure is at the User's election and is integral to the intended use of the certificate.

B.7 Email and Marketing Communications

If the User subscribes to MHM's email list or purchases a Product, MHM may send the User communications regarding the Products, updates, and offers. Each marketing email includes an unsubscribe mechanism, and the User may opt out at any time. MHM may continue to send transactional communications that the User requires, such as purchase confirmations and material updates regarding a Product the User has purchased.

B.8 How We Share Information

MHM does not sell the User's personal information. MHM shares personal information only as follows:

• (a) Service providers engaged under contract to operate MHM's business, including our payment processor (Stripe), our course-hosting platform, our digital credentialing provider, our analytics provider, Google (which provides infrastructure for the Google Drive-Based Tools), and our email, website, and advertising providers. Such providers may use the information solely to provide services to MHM, except that advertising providers, including Meta, may also use information collected through their pixels, web beacons, and similar technologies to provide measurement services and to target and deliver ads, as described in Section B.5.
• (b) Legal and safety purposes, where MHM believes in good faith that disclosure is required by law or legal process, or is necessary to protect the rights, safety, or property of the User, MHM, or others.
• (c) Business transfers, in connection with a merger, acquisition, reorganization, or sale of assets, in which case information may be transferred subject to this Privacy Notice.
• (d) Security and fraud protection, where disclosure to a third party is necessary to protect against malware, spam, phishing, or other fraud or abuse affecting MHM, the Products, or their users.

De-identified Information. The restrictions in this Section apply to personal information. As described in Sections B.1 and B.2, MHM also creates De-identified Information — including aggregated statistics, insights, benchmarks, and reports derived from how the Products are used. De-identified Information is not personal information. MHM may use and disclose De-identified Information for any lawful business purpose, including disclosure to third parties and in connection with a business transfer, subject to the commitments set out in the definition of De-identified Information in Section A.1. Nothing in this Section authorizes any use or disclosure of Google user data beyond what Section B.3 permits.

B.9 Data Retention

MHM retains personal information only for as long as necessary for the purposes described in this Privacy Notice, including to maintain purchase and support history, to comply with legal and tax obligations, and to operate MHM's business, after which MHM deletes or de-identifies it. Aggregated and De-identified Information may be retained indefinitely.

B.10 Information Security; User Responsibilities

MHM maintains reasonable administrative, technical, and physical safeguards designed to protect the information within its control, and relies on third-party providers (such as Google, Stripe, and our analytics provider) that maintain their own security programs. No method of transmission or storage is entirely secure, and MHM does not warrant absolute security.

Because the Google Drive-Based Tools retain the User's sensitive records within the User's own Google account, the User bears responsibility for securing those records, including by using strong, unique passwords and two-step verification on the User's accounts, securing the User's devices, and limiting access granted to others.

B.11 Privacy Rights and Choices

MHM extends the following core rights to all of its United States customers:

• (a) the right to know and access the personal information MHM holds about the User;
• (b) the right to correct inaccurate personal information;
• (c) the right to delete personal information;
• (d) the right to obtain a copy of the User's information (portability); and
• (e) the right to opt out of marketing and of any sale or sharing of personal information for targeted advertising (MHM does not sell personal information).

To exercise any of these rights, the User may contact MHM at hello@mentalhealthmoves.com. MHM will verify the request (ordinarily by confirming the User's email and purchase details) and respond within the time required by applicable law. MHM will not discriminate against the User for exercising these rights, and the User may request that MHM reconsider any denial. California residents may also have the right to know the categories of information collected and to designate an authorized agent to act on the User's behalf.

B.12 Opt-Out Preference Signals

Certain browsers and extensions transmit an opt-out preference signal, such as Global Privacy Control. Where required by applicable law, MHM treats a recognized opt-out preference signal as a valid request to opt out of the sale or sharing of personal information for the transmitting browser.

B.13 Children's Privacy

The Products and Content are intended for adults and are not directed to children under eighteen (18) years of age. MHM does not knowingly collect personal information from children. If the User believes that a child has provided personal information to MHM, the User may contact MHM at hello@mentalhealthmoves.com, and MHM will delete such information. Certain Products assist an adult User in organizing records concerning the User's children; such information is entered and controlled by the adult User within the User's own accounts and is not collected by MHM. MHM's social media channels are subject to each platform's own minimum-age requirements, which are typically thirteen (13) years of age or older.

B.14 Where We Operate

MHM operates in, and serves customers located in, the United States. The Products are not intended for use outside the United States. If the User accesses our websites or social media channels from outside the United States, the User does so at the User's own initiative and is responsible for compliance with applicable local law.

B.15 Changes to this Privacy Notice

MHM may update this Privacy Notice from time to time. Upon doing so, MHM will revise the "Last Updated" date above and post the revised Privacy Notice. In the case of material changes, MHM will provide notice by reasonable means.

Contact

Inquiries regarding this Agreement or the User's privacy may be directed to:

Mental Health Moves LLC 30 N Gould St. #55142 Sheridan, WY 82801 hello@mentalhealthmoves.com