This analysis describes what Headspace's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The updated policy expands language accessibility by adding support for five additional languages and explicitly guarantees free language assistance and accessible formats for all users. For users enrolled in the CMS ACCESS Program, the policy now discloses that Headspace may share health information with the Centers for Medicare & Medicaid Services (CMS), and that CMS may access or request health information consistent with applicable privacy and security law; separate program disclosures will be provided before enrollment. You can access language assistance services and accessible formats by emailing help@headspace.com.
View change record →How other platforms handle this
We may create aggregated, de-identified and/or anonymized data from your personal information...We may use this aggregated, de-identified and/or anonymized data and share it with third parties for our lawful business purposes...
We process your data for necessary purposes as described in the main Policy, and for secondary purposes. We use both human and automated means to process your data.
Comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas or requests from government authorities
"We will maintain De-Identified Data in its deidentified form and not attempt to reidentify it except when testing our de-identification practices. De-Identified Data is not personal information and is not subject to this Privacy Policy.Excerpt from Headspace's Privacy Policy
We read the privacy policies and terms of service of 38 AI platforms. Here is what they say about training, retention, arbitration, and liability.
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
The clause states: “We will maintain De-Identified Data in its deidentified form and not attempt to reidentify it except when testing our de-identification practices. De-Identified Data is not personal information and is not subject to this Privacy Policy.”
ConductAtlas has identified this type of provision across 273 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Headspace.