Updated: 17 September 2026
Apps for the Living is responsible for EMDR. Processing depends on your platform and chosen features. We do not sell data, show in-app advertising or track you across other companies' apps and websites.
On Apple devices, TelemetryDeck processes app interactions, stimulation settings and duration, purchase events, app/OS versions, device information, language and a hashed installation identifier to help improve EMDR. Support messages and Connect display names are not sent to TelemetryDeck. Firebase stores connection timings, error categories, app versions and temporary session identifiers for troubleshooting.
Google Firebase processes randomly assigned account IDs, room/participant IDs, encrypted display names, timestamps, stimulation settings and current start/stop state to synchronize participants' devices. Only display names are encrypted by the app; other room data is not covered by that encryption. Connect does not make audio or video recordings of your therapy session. Local background images are not uploaded to our servers.
Firebase stores submitted messages, selected images, language, app version and device model with a randomly assigned support account so we can reply. Google Cloud checks submitted text and images for abusive or unsafe content. Optional reply notifications use Firebase and Apple's push service and a notification token. You can disable notifications in device settings. Please do not include unnecessary patient or sensitive information.
For website or email enquiries, we process your supplied name, email address and message. Greenhost provides hosting and email; EMDR correspondence can also be stored in Firebase. These contact details are not required for local stimulation.
We use Cloudflare Turnstile to protect website contact forms from bots and spam. Cloudflare processes your IP address and technical browser and connection signals for this check. We do not send your name, email address or message to the verification service.
Cloudflare Turnstile Privacy Addendum
Firebase/Google Cloud also process IP addresses, technical requests and app-verification tokens for authentication and security. Reviewed technical summaries may be processed with OpenAI tools to investigate software problems. Your app store handles purchases; we do not receive payment-card details. Our Apple offer-signing service processes product, offer and transaction identifiers when needed for that request.
Scheduled cleanup removes connection diagnostics older than 72 hours and Connect rooms inactive for 48 hours. In-app support conversations and images are scheduled for deletion after 180 days without activity; you can also delete them in the app. Notification tokens expire after at most 90 days without refresh. Cleanup is not instantaneous. Limited security, delivery and deletion records can remain longer. Conversation deletion does not automatically delete the account or email copies. Aggregate analytics can be retained to understand trends.
For questions or requests to access, correct or delete data, including a support account or email correspondence, contact privacy@appsfortheliving.com. We may need information to find your record and verify ownership. We explain any retention required for security or legal reasons. You choose whether to use Connect, send messages or images, or enable notifications.
We update this policy when our practices change. The date above identifies the current version.