Snapshot of the source text at fetch time, not a live mirror of the policy page.
Plain-English summary
Headspace operates with a "no security can be fully guaranteed" clause (risk_flags-1), meaning that despite their safeguards, absolute security for your personal information is not assured. Your personal information may be transferred to a new company if Headspace undergoes a merger, acquisition, or other corporate change (risk_flags-2). The company shares data with third-party advertising platforms to serve and measure advertisements (data_use-1) and may share certain personal information with your Benefit Sponsor, such as an employer or health plan (data_use-2). Your personal information is used for marketing and promotional offers from both Headspace and third-party partners (data_use-3). Additionally, the company collects health information, profile and demographic information, and support chat information (data_use-7). Payment information is processed by third parties, and browser, device, and usage data are collected automatically (data_use-8, data_use-9). Personal information is also used to power machine learning algorithms.
90% confidence
Ask Verbaterm
Follow up on findings with grounded answers from this review. Not legal advice.
Risk Flags
2 findings
Clauses that indicate potential for significant user harm, often material or hard to reverse. These require careful review.
Not clearly stated: None
high95% confidence
No Security Guarantee
The company states that no security can be fully guaranteed for personal information, despite maintaining appropriate safeguards.
Why it matters: While the company maintains safeguards, there is no absolute guarantee of security for your personal information.
No security can be fully guaranteed, though.
Data security and retention, paragraph 1 · Citation strength: strong
medium90% confidence
Personal Information Transfer During Business Changes
Your personal information may be transferred to an acquiring or surviving entity if Headspace, including its subsidiaries, brands, or affiliates, is involved in a merger, acquisition, asset sale, or other corporate combination.
Why it matters: Your personal information could be transferred to a new company if Headspace undergoes a merger, acquisition, or other corporate change, potentially changing how your data is handled.
If Headspace, including any of our subsidiaries, brands, or affiliates, is involved in a merger, acquisition, asset sale, or other corporate combination, your personal information may be transferred to the acquiring or surviving entity.
Sharing of personal information, paragraph 8 · Citation strength: strong
Data Use
5 findings
Details about how your data is collected, used, and shared.
Not clearly stated: None
medium90% confidence
Third-Party Data Sharing for Advertising
The company works with third-party platforms for analytics and advertising services, which includes serving advertisements on their behalf to those who may be interested and measuring ad performance.
Why it matters: Your personal information may be shared with third-party advertising platforms to show you ads for Headspace and measure their effectiveness.
We work with third party platforms who provide us with analytics and advertising services. This includes helping us understand how users interact with our Platform serving advertisements on our behalf to those who may be interested, and measuring the performance of those advertisements.
Sharing of personal information, paragraph 6 · Citation strength: strong
medium85% confidence
Sharing Personal Information with Benefit Sponsor
In some cases, the company may share your name, email address, registration date, and last platform use date with your Benefit Sponsor, such as an employer or health plan. This sharing generally excludes in-app activity or therapy details, unless necessary for treatment, payment, or healthcare operations.
Why it matters: If your access is sponsored, some of your personal information (name, email, registration, last use date) may be shared with your sponsor. Specific activity details are usually excluded, unless required for treatment or payment.
In limited cases, we may provide certain personal information to your Benefit Sponsor, including your name, email address, your registration date, and the date on which you last used our Platform. Generally, we restrict this sharing to not include specific details of your in-app activity or any details about your use of Services, like therapy. This restriction may not apply where sharing some of your activity is necessary for your treatment, payment, or healthcare operations such as if your Benefit Sponsor is your other healthcare provider, health insurance provider, or health plan.
Sharing of personal information, paragraph 4 · Citation strength: strong
medium90% confidence
Use of Personal Information for Marketing and Promotions
The company may use your personal information to provide you with information about new products and services, promotions, and other opportunities from them or third-party partners. They also use it to personalize, measure, and improve such offers.
Why it matters: Your personal information may be used to send you marketing and promotional materials about new products, services, and offers, including those from third-party partners.
To provide you with information about new Products and Services, promotions, and other opportunities that we believe may be of interest to you, whether offered by us or third-party partners, and to personalize, measure, and improve such offers;
Use of personal information, paragraph 10 · Citation strength: strong
low85% confidence
Collection of Support Chat Information
When you engage with the support team, including via live chat or chatbot technology, any text entered prior to submission may be collected, retained, and used by Headspace for business purposes, including by customer service and other personnel.
Why it matters: Text you type into support chat windows may be collected and retained by the company for business purposes, even before you submit it.
We also utilize live chat and/or chatbot technology, which allow you to communicate directly with our automated customer service system and/or customer service representatives via a chat window about our Products and Services. Text entered into this form prior to submission may be collected, retained, and used by Headspace for our business purposes, including by our customer service and other personnel and service providers.
a. Information you provide to us, paragraph 8 · Citation strength: strong
low90% confidence
Automatic Collection of Usage Data
The company may automatically collect usage data, including time spent on products and websites, pages visited, links clicked, approximate location, language preferences, feature performance, usage patterns, and referral pages.
Why it matters: The company automatically collects data on how you use their products, including pages you visit, links you click, and your approximate location.
Usage data, such as time spent on the Products and Websites including pages visited, links clicked, approximate location, language preferences, performance of features, patterns of use, and the pages that led or referred you to our Products and Websites.
Information we automatically collect, paragraph 2 · Citation strength: strong
Cancellation and Renewal
Not clearly stated
Information regarding subscription management, cancellation procedures, and renewal policies.
?
Not clearly stated
No cited billing terms — wording is unclear
None
Gotchas
Not clearly stated
Potentially overlooked clauses that could be unfavorable to the user.
?
Not clearly stated
No cited gotchas — wording is unclear
None
Protections
5 findings
Commitments and features that protect user interests.
Not clearly stated: None
Protection90% confidence
Privacy Policy Updates Notification for Significant Changes
When the company makes a significant change to how they use your personal information or your rights, they will notify you within the Platform or through other channels like the email supplied during account registration, in addition to posting the revised version on their website.
Why it helps: This commitment ensures users are informed about important changes to their privacy rights or data use practices, allowing them to review and take action if needed.
When we may make a significant change, such as on how we use your personal information or your rights, we will notify you within the Platform or through another channel such as the email you supplied during account registration, in addition to posting the revised version on our Website.
Changes, paragraph 1 · Citation strength: strong
Protection95% confidence
Right to Know and Access Personal Information
You have the right to know what personal information the company collects about you and how it is used. You may also request a copy of this information.
Why it helps: This right allows you to understand what data is collected about you and how it's used, promoting transparency and enabling you to exercise further data rights.
Access. You have the right to know what personal information we collect about you and how we use it. This Privacy Policy serves to inform you about that collection and use. If we have personal information about you, you may also request a copy of that information.
Your privacy rights, paragraph 1 · Citation strength: strong
Protection95% confidence
Right to Correct Inaccurate Personal Information
You have the right to request the correction of your inaccurate personal information.
Why it helps: This right ensures that you can keep your personal data accurate and up-to-date, improving the quality and reliability of information held about you.
Correction. You have the right to request the correction of your inaccurate personal information.
Your privacy rights, paragraph 2 · Citation strength: strong
Protection95% confidence
Right to Data Portability
You may request an export of your personal information in a structured and machine-readable format, such as .csv or .pdf, and the company can send that export to a third party you identify if feasible.
Why it helps: This right allows you to easily obtain and transfer your data to another service or keep a copy for your records, enhancing your control over your personal information.
Portability. You may request an export of your personal information in a structured and machine readable format such as a .csv or .pdf. Where feasible, we can send that export to a third party you identify.
Your privacy rights, paragraph 3 · Citation strength: strong
Protection95% confidence
Right to Request Deletion of Personal Information
You have the right to request, under certain circumstances, the deletion of your personal information that the company collects.
Why it helps: This right grants you control over your personal data by allowing you to request its removal, thereby reducing the amount of personal information retained by the company.
Deletion. You have the right to request, under certain circumstances, the deletion of your personal information that we collect.
Your privacy rights, paragraph 4 · Citation strength: strong
Report an issue
Flag a citation problem, stale policy text, or incorrect company match.
Verbaterm boundaries
This public review is informational only and is not legal advice. Verbaterm shows only findings tied to the cited source snapshot above.