The Anti-Legalese Promise.
Privacy policies are usually a joke. They are intentionally unreadable walls of legalese, designed not to inform you, but to protect the company that wrote them.
This is not that.
This is a human-to-human contract. It is our promise to you, written in plain English, about what information we collect, how we use it, and how we fiercely protect the sanctity of your story. At Enlitens, we believe that privacy is a clinical necessity, not a legal afterthought.
The TL;DR Summary.
Anonymous Data
No Creeping
We run Google Analytics on this site. It records page views, how far you scroll, how long you stay, and which buttons you tap. That's it. No name, no email, no phone number. No creeping.
The Clinical Vault
HIPAA-Compliant. Our Own Chart.
Your notes and records stay in our own chart, built for this practice alone. Google hosts it under a signed HIPAA agreement, and every record is encrypted with its own key. One key per record. Separate from everything else.
The Google Wall
BAA Protected
Our emails run on Google Workspace with a signed BAA (Business Associate Agreement). We do NOT store clinical data here.
Zero Data Selling
Ever. Period.
We will never, ever sell your data. Ever. We would rather burn the company to the ground.
The Full Breakdown.
1. The Data We Collect
We collect two kinds of information: the anonymous data you generate just by being here, and the personal data you choose to give us.
- Website Data: Google Analytics tells us which pages get read, how far people scroll, how long they stay, and which buttons get tapped. When you tap the Fit Check button, it also tells Google Ads the button was tapped. We use this to be better helpers, not better marketers. None of it carries your name, your email, or your phone number. There's nothing on this site to type them into. One random id sits in a cookie for up to 399 days, so a return visit counts as a return and not a new person. That's all the id does.
- Personal Data You Give Us: The Fit Check booking runs on Calendly, and it only loads after you tap the button. Your name and email go to Calendly first, under Calendly's own privacy policy, and then to us. We use them to contact you about your consult. Nothing else.
- Cookies: two from Google Analytics, holding the random id above. Cloudflare, the company that delivers every page of this site, sets one more if it needs to check that you're a person and not a bot. The banner at the top of the screen on phones and the bottom on larger screens tells you about the analytics cookies. It doesn't wait for your click. The analytics run from the first page you open. Tap no on the banner and the analytics cookies stop from then on.
- Your phone number, if you opt in: after you book, on your own client portal, or on your paperwork page, you can tick a box to get texts about your appointments. That box is the only way texts are turned on. We keep the number and your opt-in record only to send those texts. We do not share, sell, or hand phone numbers or opt-in data to any third party or affiliate, for any reason. Reply STOP to any text and the texts stop.
2. The Vault and the Wall.
We keep your information in two places, with a hard wall between them:
The Clinical Vault (our own chart)
Where your PHI lives. Our own chart, hosted by Google under a signed HIPAA agreement. Secure. Encrypted, one key per record. Inside the practice, only your clinician opens it.
The Operational Space (Google)
Where we email. Covered by strict HIPAA contracts (BAA). No clinical data lives here.
3. Lived Experience & Writing
You will see stories in our writing that feel real, because they are. We use the themes and patterns of our community.
We NEVER use specific, identifying client stories. We take the "what" of a struggle, strip it of all personal data, and use it to help others feel less alone.
4. Texts About Appointments
Texting is opt-in. Nobody gets a text from us without ticking a box first. That box sits in three places: on the page you land on right after you book, on the paperwork page, and on the texting page of your client portal. Same words on all three. It says exactly what you'll get: reminders about your session, and the video link or office address before it. A few texts around each appointment, no more.
Your phone number and your opt-in are used for those texts and nothing else. They are never shared with, sold to, or rented to third parties or affiliates. Texts never carry anything private about your care. Reply STOP at any time and they stop. Reply HELP and you get a way to reach us.
Last updated: October 1, 2026.
Transparency is not a buzzword here. It is a promise.
Continue Exploring:
Notice of Privacy Practices → Terms & Conditions → Open Source Philosophy → Getting Started →
