Privacy Policy

Last updated: August 2026

What we collect

If you fill out our intake form, we collect your name, email, phone, age range, the program you're interested in, and whatever context you choose to share. That's it.

How we use it

We use your information only to respond to your inquiry and match you with the right program. We do not sell it, share it with advertisers, or use it for marketing beyond responding to you.

Clinical sessions

Once you become a client, your information is treated as protected — encrypted, kept confidential, and released only with your written consent. Spiritual-care sessions follow the same confidentiality agreements. Your provider cannot share session content with anyone outside your care team without your written consent, except where required by law.

Insurance

Zaha does not bill your insurance directly. Nothing is shared with your insurance company unless you choose to submit a superbill for reimbursement. Superbills include an ICD-10 diagnosis code (required by insurers for reimbursement) and a record of the sessions attended. If you would prefer no diagnosis code or session record ever touches an insurance file, you can pay privately and elect not to submit a superbill; that choice is fully yours and does not affect your care.

Data storage

Intake form submissions land in our secure email. Session notes and records are stored in a secure, encrypted health-record system. We retain records per state licensing requirements (typically 7 years).

Your rights

You can request a copy of any information we hold about you, ask us to correct it, or request deletion (subject to licensing-mandated retention) by emailing hello@zaha.health.

Contact

Questions about this policy? Email hello@zaha.health.