Legal & privacy.

Helo Echo is documentation, collaboration, and bilateral-stimulation software. It does not provide therapy, medical advice, diagnosis, treatment recommendations, emergency monitoring, or a substitute for professional judgment. Clinicians remain responsible for licensure, competence, informed consent, assessment, treatment decisions, documentation, recordkeeping, and compliance with the laws and professional rules that apply to their practice. Clients should direct clinical questions to their clinician.

Helo Echo does not continuously monitor journals, forms, messages, assessment answers, or safety plans. Do not use it to request emergency help. In the United States, call or text 988 for the Suicide & Crisis Lifeline. Call 911 or local emergency services when there is immediate danger.

Provide accurate account information, keep credentials and room links secure, and promptly report suspected unauthorized access. Do not probe, disrupt, reverse engineer, overload, or use the service to violate another person’s privacy or rights. Clinicians are responsible for deciding who may access their workspace and for removing access when it is no longer appropriate.

Client access is provided through a clinician invitation. A client who cannot legally accept these terms must use the service only with authorization from a parent, guardian, or other person legally permitted to act for the client.

Helo Echo owns its original software, design, and worksheet wording. Published protocols, assessment instruments, trademarks, and other credited materials remain the property of their respective owners or are used under the terms identified in the app’s credits.

You may upload a form only if you created it or have permission or another lawful basis to store, reproduce, adapt, and use it in Helo Echo. You keep ownership of your uploads. You give Helo Echo permission to host, process, display, and make working copies of them only as needed to provide the service. Do not upload pirated manuals, tests, books, or materials whose license prohibits electronic reproduction.

Helo Echo processes account details, authentication and security records, subscription information, support communications, and the clinical content users choose to enter or upload. Clinical content may include charts, notes, transcripts, journals, assessments, worksheets, and client contact information.

This information is used to provide and secure the service, connect authorized clinicians and clients, process payments, maintain backups and audit records, respond to support or legal requests, and meet applicable contractual and legal duties. Helo Echo does not sell clinical information or use it to build advertising profiles.

Helo Echo uses service providers for infrastructure, payment processing, email, and enabled transcription or document-processing features. They receive only the information needed for their function and are governed by applicable contracts and safeguards.

When Helo Echo acts as a HIPAA business associate, the applicable Business Associate Agreement controls its handling of protected health information. The current Business Associate Agreement and Data Retention Schedule are available for review. Using software with security features or a BAA does not by itself make a clinician or practice HIPAA compliant. Each practice remains responsible for its own risk analysis, policies, workforce and device security, client notices and authorizations, minimum-necessary use, retention schedule, and vendor configuration.

Clinical practices control their legal recordkeeping obligations. Each saved document is permanently destroyed from active storage when its configured period after creation expires. The default is three years; clinicians can choose a longer period in Client roster settings. Helo Echo attempts an email to the available client and therapist addresses about 30 days beforehand, but missing, failed, or unread notice does not postpone destruction. Destruction applies even when the client account is active, archived, deleted, or unlinked, and even if the therapist is no longer available. A valid legal or preservation hold is the sole exception. Helo Echo does not represent that every workspace item is outside a legally required or designated record set. A practice must configure enough time, export required records, or arrange a hold before the deadline when its state, license, payer, contract, program, audit, claim, or litigation obligations require it.

Before closing an account or ending a subscription, export any records that must be retained. Destruction may not immediately remove encrypted backup remnants, audit records, transaction records, or information separately retained for security, fraud prevention, dispute resolution, contractual duties, or law. Contact info@heloecho.com for an access, correction, export, retention-setting, legal-hold, or deletion request; identity and authority may need to be verified.

Paid plans, renewal timing, trial limits, and prices are shown before purchase or in account settings. Recurring subscriptions continue until canceled. Stripe processes payment details and provides the billing portal for payment methods, invoices, plan changes, and cancellation. Third-party services have their own terms and availability. Refunds are provided when required by law or when expressly stated for the purchase.

The service may occasionally be unavailable, delayed, or contain errors. Transcripts, automated drafts, scores, and summaries can be incomplete or wrong and must be reviewed by a qualified person before clinical use. Keep appropriate exports and continuity plans; do not rely on Helo Echo as the only copy of a legally required record.

To the extent allowed by law, Helo Echo is provided without warranties of uninterrupted operation, clinical outcome, fitness for a particular treatment decision, or error-free automated output. Helo Echo is not responsible for clinical decisions, unlawful uploads, insecure user devices, shared credentials or links, or use outside these terms. Nothing here limits rights or liability that cannot legally be limited.

Material changes will be posted with a new effective date and, when appropriate, presented for renewed acceptance. Questions, privacy requests, copyright concerns, and security reports may be sent to info@heloecho.com. Do not include client names, clinical details, passwords, access codes, or sensitive screenshots in ordinary email.