PRAXPLAY PRIVACY POLICY
Last Updated: March 18, 2026
This Privacy Policy explains the information that Praxplay collects, how that information is used, with whom it may be shared, and the choices available to users regarding their information.
This Privacy Policy forms part of the Praxplay Terms of Service.
1. Introduction
Who We Are
This Privacy Policy applies to Praxplay, operated by SavvyTech, Inc. (“Praxplay,” “we,” “us,” or “our”), a Delaware corporation. Praxplay provides an online platform for educational, training, and professional development purposes, including simulated case-based learning and AI-assisted practice environments.
Acceptance and Changes
By registering for, accessing, or using Praxplay, you acknowledge that you have read and understood this Privacy Policy and agree to its terms. We may modify this Privacy Policy from time to time. If we make material changes that affect how we use or disclose personal information, we will provide at least 30 days' notice through the platform, by email, or by other reasonable means before the changes take effect.
2. Children's Privacy
Praxplay is not intended for general use by children.
Individual users must be 18 years of age or older to create an account. Students under the age of 18 may access Praxplay only through enrollment by an educational institution, which is solely responsible for verifying age eligibility and obtaining any required parental or guardian consent.
Praxplay does not independently verify user ages and does not knowingly collect personal information from children outside of institution-managed access.
3. Information We Collect
We collect information you provide directly, information generated through your use of the platform, and certain information collected automatically. For purposes of this Privacy Policy, we refer to all such information as “your data.”
Account Information
When you create an account, we collect information such as:
- Email address
- Password (stored in hashed form)
- First and last name
- Phone number (used for SMS verification and multi-factor authentication)
- Account use (e.g., within an institution, within a private practice, or independently)
- Optional demographic information (age, race/ethnicity, gender identity)
- Multi-factor authentication enrollment status
- Account creation and login timestamps
Institutional and Private Practice Information
Praxplay accounts can be used within an educational institution, within a private practice, or independently. Depending on how an account is used, we may collect additional information:
Institutional Use
When used within an educational institution, accounts may be associated with members, classes, enrollments, and coursework. Institutional data may include institution identifiers, class structures, and student participation records.
Private Practice Use
When used within a private practice, accounts are separate and distinct from institutional use. Private practice use:
- Does not involve tasks or coursework
- Does not involve student management
- Only provides access to data created within the practice
Private practice data may include practice identifiers and simulated client records created by practice members.
Session and Educational Data
When you use Praxplay, we collect and store information related to your activity, including:
- Simulated session transcripts (text-based and voice-based)
- Session configurations, metadata, and timestamps
- Reviews, comments, and questions
- AI-generated session reports, including clinical evaluations, identified strengths, areas for improvement, and referenced session excerpts
- Task submissions, grades, and feedback (institutional users only)
Voice Session Data
If you use voice-based sessions, text content from your session is sent to a third-party voice synthesis provider to generate spoken responses. Audio is generated in real time and is not permanently stored by the voice provider. Voice session transcripts are stored on the platform in the same manner as text-based sessions.
AI Client Data
Users may create simulated clients for educational or training purposes. AI client data may include fictional demographics, background narratives, presenting concerns, personality traits, life events, and AI-generated portrait images. These simulated clients do not represent real individuals.
File Uploads
We collect files you upload to the platform (such as coursework materials or reference documents), along with associated metadata such as file name, size, and content type.
Automatically Collected Information
We automatically collect certain technical and usage information, such as IP address, browser type, device information, and usage logs. This information is used to operate, secure, and improve the platform.
5. How We Use Your Data
We use your data for the following purposes and legal bases:
- Providing and operating the platform, including authentication, session delivery, SMS verification, and account management (legal basis: contractual necessity)
- Supporting educational and training workflows, including simulated sessions, AI-generated reports, and feedback (legal basis: contractual necessity)
- Communicating with you, including system notices, account messages, SMS verification codes, and marketing communications (legal basis: consent for marketing; contractual necessity for transactional messages)
- Improving and developing the platform, including analytics, troubleshooting, and performance monitoring (legal basis: legitimate interest)
- Maintaining security and integrity, including preventing fraud and misuse (legal basis: legitimate interest)
- Complying with legal obligations and enforcing our rights (legal basis: legal obligation)
We may use automated systems and algorithms to support these activities.
6. AI Services and Data Handling
Praxplay uses third-party AI services to generate simulated therapy interactions, session reports, client profiles, and images.
What Data Is Sent to AI Providers
To generate realistic simulated interactions and educational reports, AI providers receive:
- Session transcripts (therapist and simulated client messages)
- Simulated client background information, including fictional demographics, presenting concerns, personality traits, and life events
- Therapeutic modality details and skill focus areas
- Text prompts for generating simulated client portrait images
What Data Is Never Sent
- Personally identifying information such as user names, email addresses, phone numbers, and institution or practice identifiers are never sent to AI service providers
- Session data is not shared for AI model training
Voice Sessions
For voice-based sessions, session text content is sent to a third-party voice synthesis provider to generate spoken audio responses. Audio is generated in real time and is not permanently stored by the voice provider.
AI-generated content is provided for educational and training purposes only and may be inaccurate or incomplete.
8. HIPAA and Health Information Disclaimer
Praxplay is not a HIPAA-covered service and is not intended for use with real client data.
Users, including private practice users, must not enter real client information into the platform. All simulated clients and sessions are intended for training and educational purposes only.
9. Data Retention
We retain your data for as long as your account remains active. Upon account deletion request, personal data (such as your name, email, phone number, and demographic information) is permanently removed within 30 days.
Legally required records (such as billing history, compliance logs, and dispute-related data) may be retained for up to 12 months after account cancellation or termination, or longer if required by law or necessary for legitimate business purposes such as compliance, dispute resolution, or enforcement of our agreements.
Archived institutional or practice data may be retained as required by contractual or legal obligations. When data is no longer required, we will delete or anonymize it.
10. Your Privacy Choices and Rights
You may:
- Access and update your account information
- Request a copy of your data
- Request correction of inaccurate data
- Request deletion of your data, subject to legal and contractual limitations
- Opt out of marketing communications
- Manage cookie preferences through the cookie consent banner on our website
Requests may be submitted through your account or by contacting us at info@praxplay.com. We will respond to verifiable requests within 45 days, or as required by applicable law.
11. State Privacy Rights
Certain U.S. states provide their residents with additional privacy rights. This section describes those rights and how to exercise them.
California Residents (CCPA/CPRA)
If you are a California resident, you have the following rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act:
Categories of Personal Information We Collect
- Identifiers: name, email address, phone number, IP address, account identifiers
- Commercial information: subscription and billing records
- Internet/electronic network activity: usage logs, browser type, device information
- Professional/employment information: account type, organizational affiliation
- Education information: session transcripts, task submissions, grades, and feedback (for institutional users)
- Inferences: AI-generated session evaluations and reports
Sale and Sharing of Personal Information
Praxplay does not sell your personal information. We do not share your personal information for cross-context behavioral advertising purposes.
Your Rights
- Right to know: You may request the categories and specific pieces of personal information we have collected about you
- Right to delete: You may request that we delete your personal information, subject to certain exceptions
- Right to correct: You may request correction of inaccurate personal information
- Right to opt out of sale/sharing: We do not sell or share personal information, but you may submit a request to confirm this
- Right to limit use of sensitive personal information: You may request that we limit the use of sensitive personal information to purposes necessary for providing the Service
- Right to non-discrimination: We will not discriminate against you for exercising your privacy rights
How to Submit a Request
You may submit a verifiable consumer request by emailing info@praxplay.com. We will verify your identity using the email address associated with your account. You may also designate an authorized agent to submit a request on your behalf; we may require written authorization and identity verification from both you and your agent.
Washington Residents (My Health My Data Act)
Praxplay is designed for educational and training purposes only. The platform does not collect, use, or share “consumer health data” as defined under the Washington My Health My Data Act (MHMDA). All therapy-related data on the platform pertains to fictional, simulated clients created for educational scenarios — not real individuals or real health conditions. Users are prohibited from entering real client health data into the platform.
Other State Privacy Laws
Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), and other states with comprehensive privacy laws may have similar rights to access, delete, correct, and opt out of certain processing of their personal data. To exercise these rights, please contact us at info@praxplay.com. We will respond to verifiable requests as required by applicable law.
12. International Data Transfers
Praxplay is operated from the United States. All data is processed and stored within the United States using U.S.-based cloud infrastructure.
If you access Praxplay from outside the United States, your data will be transferred to and processed in the United States, which may have different data protection standards than your home country. By using the platform, you consent to the transfer of your data to the United States for processing in accordance with this Privacy Policy.
13. Communications From Us
By creating an account, you consent to receive communications from us, including transactional and marketing emails. You may opt out of marketing communications at any time; however, you will continue to receive service-related messages necessary to operate your account.
14. Security
We use administrative, technical, and organizational safeguards designed to protect your data. However, no system can be completely secure, and we cannot guarantee absolute security. You are responsible for safeguarding your credentials.
15. Your Responsibilities
If you receive information about other users through the platform, you agree to handle such information in compliance with applicable privacy and data protection laws and to use it only for authorized purposes.
16. Third-Party Services
Praxplay may link to third-party services not operated by us. We are not responsible for their privacy practices and encourage you to review their policies before use.
17. Contact Us
For questions or concerns regarding this Privacy Policy or your data, please contact: