How Malu Journey collects, uses, and protects your information, and what choices you have about it. This applies to our website and to this members' platform.
Last updated: September 16, 2026
Malu Journey, LLC ("Company", "Malu Journey", "we" or "us") respects your privacy, and we are committed to protecting it through our compliance with this policy.
This policy describes the types of information we may collect from you, or that you may provide, when you visit our website at www.malujourney.com (the "Website") or use our members' platform at app.malujourney.com (the "Platform"), and our practices for collecting, using, processing, maintaining, protecting and disclosing that information.
The Platform provides access to group workshops ("Workshops"), a directory of preferred partners ("Preferred Partner Directory"), a self-guided assessment, a guided matching tool, a self-paced program, downloadable toolkits, and other resources (collectively, "Community Resources", and together with the Workshops, the "Services").
Some of our Services are free and require no paid membership. Where you use one of those, we may create an account for you from the information you give us. See Accounts Created From an Email Address below.
For clarity, neither Malu Journey nor any information collected through the Services is subject to HIPAA (the Health Insurance Portability and Accountability Act of 1996, Public Law 104-191) or the Health Information Technology for Economic and Clinical Health ("HITECH") Act (Public Law 111-5).
Please read this policy carefully. If you do not agree with our policies and practices, your choice is not to use the Website or the Platform. By accessing or using either, you agree to this privacy policy. This policy may change from time to time (see Changes to This Policy). Your continued use after we make changes is deemed acceptance of those changes.
YOU AGREE THAT YOUR VISIT OR USE, AND ANY DISPUTE OVER OUR ONLINE PRIVACY PRACTICES, IS GOVERNED BY THIS PRIVACY POLICY AND OUR TERMS AND CONDITIONS, OF WHICH THIS POLICY FORMS A PART, unless federal, state or local law or our ethical obligations require a higher level of protection for your personal data, in which case they take precedence over this policy.
The Website and the Platform are not intended for children under 16 years of age. No one under 16 may provide any personal information to or on them. We do not knowingly collect personal information from children under 16. If you are under 16, do not use or provide any information on the Website or the Platform, do not register, do not make any purchase, do not use any interactive or public comment feature, and do not provide any information about yourself to us, including your name, address, telephone number, email address, or any screen name or user name you may use.
If we learn that we have collected or received personal information from a child under 16 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 16, please contact us at admin@malujourney.com.
Residents of certain states under 13, 16 or 18 years of age may have additional rights regarding the collection and sale of their personal information. Please see Your State Privacy Rights below.
Some of this information may be considered "personally identifiable information", "personal data" or "personal information", meaning it reasonably identifies you or your device, or could reasonably be linked or associated with you.
The Platform saves what you do in it, so that it is there when you come back:
You may provide information to be published or displayed ("posted") in shared areas of the Platform, or transmitted to other users or third parties (collectively, "User Contributions"). Your User Contributions are posted and transmitted at your own risk. No security measures are perfect or impenetrable, and we cannot control the actions of other users with whom you choose to share. We therefore cannot and do not guarantee that your User Contributions will not be viewed by unauthorized persons.
This policy does not apply to information collected offline or by any other means, including any Medical Information or other information you choose to share during a Workshop, whether with us or with your Workshop Facilitator. We or your Workshop Facilitator may take notes in order to create a general summary of the discussion (without attributing comments to specific individuals unless otherwise consented to). Your participation in Workshops, and the sharing of any personal information during a Workshop, are subject to your separate consent and are governed by our Workshop Consent Form and Confidentiality Agreement rather than by this policy.
Malu Journey, LLC is not a healthcare provider, does not provide healthcare services, and is not a "covered entity" under HIPAA. Any Medical Information you share with us is therefore not protected health information ("PHI"), and HIPAA and the applicable provisions of the HITECH Act do not apply to our collection, retention, processing or use of it. The provisions of this policy apply instead.
Where a Workshop Facilitator is itself a "covered entity" subject to HIPAA and HITECH, that Facilitator is responsible for complying with them and may provide you with HIPAA-specific disclosures. We require Workshop Facilitators to refrain from sharing your PHI with us, with other Facilitators, or with other participants except in accordance with HIPAA and HITECH, and in a manner that will not cause us, other Facilitators or other participants to be considered "business associates" under HIPAA.
The Deep Sea Alignment assessment and the Care Navigator both invite you to tell us about your state of mind, your working conditions and your personal life, and both are available without registering for a Workshop. Because that information is collected through the Website and the Platform, it is governed by this policy.
We treat it as the most sensitive information we hold. Specifically:
Some things we offer for free -- downloading a toolkit, registering for a public event, or taking the Deep Sea Alignment assessment -- create a Malu Journey account for you from the name and email address you give us, so that what you asked for has somewhere to live. We tell you this at the point of collection, and we email you a link to finish setting the account up if you want to.
You do not have to finish setting it up, you are not charged anything, and you can ask us to delete it at any time by emailing admin@malujourney.com. Until you set a password, the account holds only what you gave us and what you produced, such as your assessment reading.
Where you give us an email address in exchange for something free, we will also send you occasional resources and updates from Malu Journey. Every one of those emails has an unsubscribe link, and unsubscribing does not affect your account or anything saved in it.
As you navigate and interact with the Website and the Platform, we may use automatic data collection technologies to collect certain information about your equipment, browsing actions and patterns:
The information we collect automatically does not itself include personal information, but we may maintain it or associate it with personal information collected in other ways. It helps us improve the Website and deliver a better and more personalized service: estimating audience size and usage patterns, storing your preferences, speeding up your searches, and recognizing you when you return.
Our Website may include social media features and widgets. These may collect your IP address and which page you are visiting, and may set a cookie to function. Your interactions with them are governed by the privacy policy of the company providing them.
If you arrive by clicking through from another website, certain information you provided to that website, such as the terms you searched on, may be transmitted to us and we may use it. You should review the privacy policy of any website from which you reached us.
We operate our own Platform rather than a third-party community platform. We use a small number of service providers to run it, including providers of cloud hosting and database services, payment processing, transactional email delivery, and the language model behind the Care Navigator described under Automated Processing and Artificial Intelligence below.
Each of these providers processes only the information it needs for its function, under contract, and none of them is permitted to use your information for its own purposes or to train its own products. Payment card details are transmitted to our payment processor directly and are never stored on our systems.
Our own access to member information is limited to those people who need it to do their job. Administrative access requires both an administrator role and a second authentication factor.
These providers operate under their own privacy policies and we do not control their data security practices. As with any transmission over the internet, we cannot guarantee the security of information in transit. We will tell you the identity of any of our service providers on request, at admin@malujourney.com.
We use information we collect about you, or that you provide to us, including any personal information:
We may also use your information to contact you about our own goods and services that may be of interest to you. If you would rather we did not, adjust your preferences in your account profile or email admin@malujourney.com. See Your Choices below.
One feature of the Platform uses artificial intelligence, and we want to be precise about which.
The Care Navigator. When you describe what you are looking for, we send that text to a third-party language model provider to produce a short reflection back to you and to suggest which areas of practice it relates to. That provider processes it on our behalf as a service provider, is not permitted to use it for its own purposes, and operates under its own terms. We do not send your name, your email address, or anything else that identifies you. Before any of your text is sent, it passes through a check of our own, written as fixed rules rather than as a model, that looks for indications of crisis. If that check fires, we show you crisis resources and the text is neither sent nor stored.
What is not automated. The Deep Sea Alignment assessment is scored by fixed arithmetic. Identical answers always produce an identical reading, no artificial intelligence is involved, and your answers are not sent outside our own systems in order to score them.
What these features do not do. Nothing on the Platform makes an automated decision about you that produces legal or similarly significant effects. A suggestion from the Care Navigator is a starting point for your own consideration, not a referral, a triage decision, or a judgment about your condition. You choose whether to contact anyone, and we do not contact a partner on your behalf without asking you.
We do not use your information to train artificial intelligence models, and we do not permit our service providers to use it to train theirs.
Separately, we may use an AI-assisted notetaker in Workshops held over video, solely to prepare a written summary of the discussion for participants and Facilitators, and only where that is disclosed for the Workshop. Your consent to that limited use is governed by the Workshop Consent Form and Confidentiality Agreement.
We may disclose aggregated information about our users, and information that does not identify any individual, without restriction.
We may disclose personal information that we collect, or that you provide:
WE DO NOT SELL YOUR PERSONAL DATA TO THIRD PARTIES.
We may also disclose your personal information:
The Platform is built so that you can read only your own records, and so that our own staff's access is limited by what a feature is for rather than by our discretion. These limits are enforced by our database, not only by our application.
Administrative access requires both an administrator role and a second authentication factor, and administrative sessions end automatically after a period of inactivity. We review these arrangements as we add features, and we will update this section when they change.
Residents of certain states, such as California, may have additional rights and choices. See Your State Privacy Rights below.
You can review and change your personal information at any time by signing in and visiting your profile.
You may also email us at admin@malujourney.com to request access to, or correction of, any personal information you have provided. We may decline to make a change where we believe it would violate a legal requirement, or would cause the information to become inaccurate.
Content you posted in a shared space may remain visible in another member's copy of it, in an email notification already sent, or in a cached or archived page, and may have been copied by others. We cannot retrieve those.
You can delete your account at any time, for any reason, and you do not have to tell us why. Use the delete option in your profile: we ask you to confirm, and then it happens immediately rather than being queued for review. You can also email admin@malujourney.com from the address on your account and we will do it for you, within 30 days at the outside and normally the same week.
Deleting your account deletes the account itself and the information attached to it, including:
If you have an active paid membership, we cancel it at the same time so that you are not charged again. Deletion does not itself entitle you to a refund of fees already paid; our refund terms are in the Terms and Conditions.
Your directory listing is removed by us as a separate step rather than automatically, so that it does not disappear from the Directory without notice to members who were relying on it. Tell us when you want the listing taken down and we will remove it.
If you want to stop hearing from us but keep your account, unsubscribe from our emails. If you want a specific thing removed rather than everything -- a single journal entry, one assessment reading, a post -- delete it in the Platform where you can, or ask us, and we will remove just that.
State consumer privacy laws may provide their residents with additional rights regarding our use of their personal information.
California law entitles residents to ask for a notice describing what categories of personal information we share with third parties for those third parties' own direct marketing purposes. Unless you ask us to or opt in, we do not share any personal information with third parties for their own direct marketing purposes.
If you are a California resident you have certain rights under the California Consumer Privacy Act of 2018 (CCPA) and the California Privacy Rights Act of 2020 (CPRA):
To make a request under the CCPA, email info@malujourney.com. To verify that you are the person about whom we have collected information, you will need to provide certain information when you submit your request, which we will then attempt to match against information we already hold.
Other states, including Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Montana, Oregon, Tennessee, Texas, Utah and Virginia, provide (now or in the future) their residents with rights to:
The exact scope of these rights varies by state. To exercise any of them, email info@malujourney.com.
Nevada provides its residents with a limited right to opt out of certain personal information sales. Residents who wish to exercise it may email info@malujourney.com, though we do not currently sell data triggering that statute's opt-out requirements.
Some browsers have "do not track" features that let you tell a website not to track you. These features are not uniform. Where available, you may choose to enable a tool that automatically communicates your universal opt-out preferences, such as the Global Privacy Control. You may need a specific browser or an extension that supports these signals. We do not currently take action in response to Do Not Track signals, because no uniform technological standard has been established. We continue to review new technologies and may adopt a standard once one exists.
The Website and the Platform may contain links to third-party websites. We are not responsible for the privacy practices or the content of those sites. We encourage you to review the privacy policy of any third-party website you visit.
The Company is located in the United States. Our Services are hosted in the United States and are intended for visitors located within the United States.
Access to your records is enforced by our database, not only by our application: each member's records are readable only by that member, except where this policy says otherwise. Administrative access requires an administrator role and a second authentication factor, and administrative sessions end automatically after a period of inactivity. Payment card details are transmitted to our payment processor directly and are never stored on our systems. We record which version of each of our agreements you accepted, and when.
Unfortunately, the transmission of information over the internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of information transmitted to us. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures.
The safety and security of your information also depends on you. Where you have chosen a password, you are responsible for keeping it confidential. Please do not share it with anyone.
It is our policy to post any changes we make to this privacy policy on this page. If we make material changes to how we treat your personal information, we will notify you. The date this policy was last revised appears at the top of the page. You are responsible for ensuring we have an up to date, active and deliverable email address for you, and for visiting this page periodically to check for changes.
To ask a question or comment about this policy or our privacy practices, email admin@malujourney.com. For requests under a state privacy law, email info@malujourney.com.