Privacy

Your wellness journey is personal.

We know that there are some things you want to keep private, which is why we never share any of your information with third parties. We’ve designed this platform to make sure that you can access support and complete mental health check-ins, without sharing more than necessary.

For students in Grade 6 and above, any identifiable information you provide will be kept confidential and secure. It will only be shared with your care team if you request it to help support your mental health journey. Your data belongs to you, and if you decide to stop using the platform, you can take your data with you. Note that parents or guardians of students under the age of 18 may request access to their child’s data at any time.

Upper Bay Counseling and Support Services, Inc. monitor results to ensure user safety. If they identify a resource or service that may benefit your mental health, they may reach out to you with that information. Participation in any suggested services is completely optional.

Prioritizing Privacy

Below are some ways we are prioritizing your privacy.

icon-check-mark

Automatic Detection

The platform maintains a Host-based intrusion Detection (HIDS) system that automatically detects potential intrusions and anomalous activities. We immediately investigate, respond to and resolve any issues that are discovered.

icon-check-mark

Database Backups

Database backups are automatically completed on a regular schedule. Databases are encrypted, backed up nightly, and stored in multiple locations.

icon-check-mark

Internal Policies

Comprehensive internal policies have been implemented to ensure privacy is maintained from an administrative perspective. All employees undergo extensive privacy and security training.

icon-check-mark

Password Protection

All password and security questions are cryptographically salted and hashed before storage. This means that they are heavily encrypted and are never stored in plain (viewable) text.

icon-check-mark

Access Monitoring

Network access is inspected in real time and permanently logged. Intrusion attempts are automatically identified and blocked , mitigating SSH attacks and other malicious behavior.

icon-check-mark

Secure Encryption

Data is encrypted in transit and at rest using AES encryption with 256-bit keys, as recommended by the US National Institute of Standards and Technology and Federal Information Processing Standard.