Privacy Policy

Carlos David Escobar Ramírez, clinical psychologist, Telos Psychotherapy.
Based in Bogotá, Colombia.
Email: contacto@telospsychotherapy.online

I process your data at two levels. You authorize the data in this section when you create your account. You authorize your health data separately, in the informed consent at your first session, and it is explained in the next section.

Your account data. When you create your account: your email, full name, country of residence, date of birth and preferred language. I use them, together with your payment data, to create and manage your account, schedule and manage your sessions, process your payments and communicate with you. You authorize their processing when you create your account, by checking the authorization box. That authorization does not cover health data.

Your name and email, for account messages. Purchase and booking confirmations, notices of appointment changes or cancellations, and receipts.

Your country, to show you the options for your region. I use the country of residence you give when you create your account and the country you connect from. I get the second by sending a truncated form of your IP address to a geolocation service, which returns only the country. Your IP address is not stored. Both countries are recorded with each purchase.

Your payments. For each purchase I record the payment reference, the package, the amount and currency, the payment method, its status, your email, the date, the promo code if you used one and, for a gift, the recipient’s email. If you pay by bank transfer, I keep the receipt you upload so I can review it. Once the payment is confirmed, I email you the receipt. I never see or store your card details: you enter them on Bold’s own page.

For adults only. The service is only for people aged 18 and over. I do not knowingly collect data from minors. If an account turns out to belong to a minor, I close it and delete its data, except any the law requires me to keep.

Information about your health is sensitive data under Article 5 of Colombia’s Ley 1581 of 2012: clinical notes, your answers to assessments and any information about your mental health. I only process it with your express authorization, which you give in the informed consent you sign in the app at the start of your first session, in a section of its own with its own checkbox. I only collect it after you sign, in the sessions, where I also ask you for an emergency contact. If you created your account before September 24, 2026, I also keep the clinical information you gave in the intake form. I use this data only to provide psychotherapy and to meet the legal duties of the clinical record, including keeping it for the period the law requires. It is stored encrypted, on servers in the United States, and only I have access to it. Because it is sensitive data, you are not required to authorize its processing or to answer questions about it. Without that authorization I cannot provide psychotherapy.

Under Article 8 of Ley 1581 of 2012, you have the right to:

• access, update and correct your data
• request proof of the authorization you gave
• be told how your data has been used
• file complaints with Colombia’s Superintendence of Industry and Commerce
• revoke your authorization and request deletion of your data, where the law allows it
• access your data free of charge

Email me at contacto@telospsychotherapy.online. I handle inquiries and claims myself.

If it is a claim, include your identification, a description of the facts, an address where I can reply, and any documents you want to submit.

The deadlines are set by law:

• an inquiry is answered within ten business days, extendable by five more if I tell you why
• a claim is resolved within fifteen business days, extendable by eight more on the same terms

The app’s data is stored on servers in the United States. These providers process it on my behalf, as data processors:

• Supabase: the app’s database, authentication and server functions
• Vercel: hosting for the app and for this site
• Bold: processes card and PSE payments. It receives your name, email, the payment reference, the amount and the package name. Your card details are handled by Bold and never reach the app
• Resend: sends the app’s emails. It receives your name and email
• Google Calendar: where I record the date and time of each session, with your name
• ipwho.is: the geolocation service. It receives a truncated form of your IP address and returns only the country

Sending your data to these processors in the United States is an international transmission of data. You authorize it when you create your account and, for your health data, in the informed consent.

This policy is effective as of September 30, 2026. Your account data is kept for as long as your account exists and for as long as my legal obligations require. Clinical records are kept for at least fifteen years from your last session (Resolución 1995 of 1999, as amended by Resolución 839 of 2017). If this policy changes substantially, I will let you know before the change takes effect.