Privacy policy
Effective September 7, 2026. This policy describes the current public preview of everyday HEP.
What we collect
Therapist sign-in uses Google or ChatGPT and stores an account identifier, name, email address, a necessary secure session cookie, and a history of workspace changes. The service stores programs, favorites, custom exercises, and therapist-uploaded media. Hosting and security providers may process IP address, device, request, and security-event metadata to deliver and protect the service. Do not enter patient names, contact details, diagnoses, medical-record numbers, or other identifying information.
Patient use
Patient links use anonymous program codes. Anyone who has a link can open it. Completion checkmarks stay in that patient’s browser and are not sent to the therapist.
How information is used
Information is used only to authenticate therapists, save their workspace, and display shared programs. everyday does not sell personal information, run advertising, or use analytics, tracking pixels, fingerprinting, or cross-site tracking.
Service providers
Google or ChatGPT processes therapist sign-in. The application is hosted through OpenAI Sites on Cloudflare infrastructure; Cloudflare may set a necessary bot-management cookie. Opening an exercise education link takes you to an independent third-party site with its own privacy practices. There are no embedded third-party videos, social widgets, advertising frames, or behavioral analytics.
Storage and retention
A secure cookie maintains sign-in. Local and session storage hold theme, privacy choice, drafts, and completion checkmarks. Account owners can export their workspace, delete individual programs or custom exercises, delete their account, or choose automatic deletion for inactive programs. Account activity is kept for up to one year or until account deletion. Do not use this preview for protected health information.
Clinic readiness
This preview is not represented as HIPAA compliant. Owner-only access, account activity history, deletion, export, retention controls, and a public Trust Center are available. Commercial clinic use still requires independent privacy, security, accessibility, and legal review plus appropriate contracts and business associate agreements when applicable.
Your choices and requests
Signed-in users can export their workspace, choose program retention, delete programs and custom exercises, or delete the entire account from Settings. Because everyday does not sell or share personal information for cross-context behavioral advertising, it does not offer a sale or targeted-advertising opt-out. A verified correction and legal-contact process must be established before commercial launch.
Children and changes
Therapist accounts are for adults age 18 or older. The service is not directed to children under 13 and does not knowingly collect patient account information from children. A clinician, parent, or guardian should supervise a child’s use of a shared program. Material policy changes will be posted here with a new effective date.