Privacy Policy

Orchard Neuro, PBC ("Orchard," "we," "us") is building the Orchard Profile, an iPhone app for adults in treatment for depression. This policy explains what we collect on this website and, when it launches, in the app, how we use it, and the choices you have. It is written to be read.

One thing before everything else: joining our waitlist does not create a clinical relationship. Orchard is a consumer app and is not covered by HIPAA. This policy explains how we handle and protect your information instead.

What we collect, stage by stage

When you join the waitlist: your email address and which page you signed up from. We use it only to tell you when the app launches.

When you fill in the research study form: your name, email, optional phone number, state, and your answers about depression and antidepressant medication. Those answers are consumer health data (see Consumer health data below). The form goes to Orchard's study platform at app.orchardneuro.co for the Stanford study team, and we use Cloudflare to check that you're not a bot.

When you visit the site: standard technical data (browser type, pages viewed, approximate region). Our host, Vercel, gives us page counts without cookies. If you arrived from an ad, the link may carry a click ID that tells us which ad brought you here. If you accept the cookie banner, Google Ads sets cookies so we can measure which ads lead to signups. We keep your choice in a cookie called orchard_consent for 180 days.

When you email or reply to us: the contents of your message, so we can respond.

What we use it for

• Running the waitlist: telling you when the app launches. That is the only email we send to the waitlist unless we ask you first. Every marketing email includes a way to unsubscribe and our postal address.
• Running the research study pre-screen on behalf of the Stanford study team.
• Understanding what's working: aggregate analytics on pages, campaigns, and signups.
• Meeting our legal obligations and enforcing our terms.

What we will not do

• We do not sell your personal information, and we do not use it for targeted advertising. If you accept ad cookies, Google learns which of our pages you visited so we can measure our ads. We never send it health information or anything you type.
• We never send health-related information to advertising platforms. Ad conversion events we report (such as "a signup occurred") carry no health status, no survey answers, and no clinical information.
• We do not use your information to train models or for research without your separate, explicit opt-in consent, which is never a condition of receiving any service.
• We do not knowingly collect information from anyone under 18. This site and service are for adults.

Who we share it with

Only service providers who help us operate, bound by contract to use your data only to provide their service to us: website hosting (Vercel), waitlist storage (Google Workspace), ad measurement after you accept cookies (Google Ads), bot checks on the study form (Cloudflare), email delivery, and Orchard's study platform. We disclose information if the law genuinely requires it, and if Orchard is ever part of a merger or acquisition, this policy's protections travel with your data and we will notify you of any change.

AI processing in the app. When the app launches, we use outside AI services to transcribe and organize your check-ins. AI software, following methods our psychiatrists wrote, turns your check-ins into your Profile. We will name these providers here before launch and ask your permission in the app before sending them anything.

Measuring our ads. If you accept ad cookies and then join the waitlist, we tell Google Ads that a signup happened, with a random ID so it isn't counted twice. That report carries no name, no email address, no phone number, and nothing about your health. If you decline, or your browser sends a Global Privacy Control signal, we don't report it.

Consumer health data

Some information, such as your answers on the research study form and, once the app launches, your recordings and Profile, is consumer health data under laws including Washington's My Health My Data Act and Nevada's SB 370. We are preparing a separate Consumer Health Data Privacy Policy that explains what we collect, why, who receives it, and how to use your rights. Until it is posted, this section applies: we collect consumer health data only with your consent, use it only for the purpose you gave it for, share it only with the service providers above (never for advertising), and delete it on request. Consent may be withdrawn at any time by emailing privacy@orchardneuro.co.

Your rights and choices

Wherever you live, we honor these on request: access what we hold about you, correct it, delete it, unsubscribe from marketing, and withdraw consent for consumer health data. California residents have these rights under the CCPA/CPRA, and we do not discriminate against anyone for exercising them. If your browser sends a Global Privacy Control or Do Not Track signal, we treat it as a choice to decline ad cookies. To exercise any right: privacy@orchardneuro.co. We respond within 45 days, and we verify requests to protect your data from impersonation.

Retention and security

We keep waitlist data until we send the launch email and for a reasonable period afterward, then delete it. Study form data is kept as the study's approved protocol requires. Consumer health data is deleted on request or when no longer needed. We encrypt data in transit and at rest and limit access to the people who need it to run Orchard.

Changes and contact

If this policy changes materially, we'll post the new effective date at the top of this page and email waitlist members before the change takes effect. We won't use your information for a new purpose without asking you first. Contact: privacy@orchardneuro.co, or Orchard Neuro, PBC, 118 Connecticut St C, San Francisco, CA, 94107.

If you are in crisis, call or text 988 (US). Orchard is not an emergency service.