Privacy Policy

Last updated: June 10, 2026

1. Introduction and Scope

Dua Health, Inc. and its affiliated clinical entity, Dua Health Group PLLC (together, “Dua Health,” “we,” “us,” or “our”), respect your privacy and are committed to protecting it. This Privacy Policy describes the personal information we collect, use, maintain, protect, disclose, and otherwise process when you visit www.duahealth.co and app.duahealth.co, and the websites and pages we operate under our sub-brands (collectively, the “Website”), and our practices for handling that information.

This Privacy Policy applies to information we collect:

  • on our Website;

  • in email, text, and other electronic messages between you and us; and

  • offline, in connection with our marketing and administrative services.

Our sub-brands. Dua Health operates consumer brands that serve specific communities, including Salam Space (thesalamspace.com), Semester Health (semesterhealth.co), and OutSpace (theoutspace.co). These are trade names of Dua Health, Inc. and our affiliated clinical entity, not separate companies. This Privacy Policy applies to all of them, and to any additional brands or properties we operate now or in the future. Clinical care offered under each brand is provided by Dua Health Group PLLC and is governed by its Notice of Privacy Practices (Section 2).

By accessing or using the Website, you agree to this Privacy Policy. If you do not agree, your choice is not to use the Website. We may update this Privacy Policy from time to time (see “Changes to This Privacy Policy”).

2. Information This Policy Does NOT Cover (Protected Health Information)

This Privacy Policy does not apply to “protected health information” (“PHI”) as defined under the Health Insurance Portability and Accountability Act of 1996, as amended (“HIPAA”). Your PHI — including information collected and processed for or on behalf of the licensed clinicians of Dua Health Group PLLC, the covered entity that provides clinical care — is governed by that entity’s HIPAA Notice of Privacy Practices (“NPP”), available at www.duahealth.co/notice-of-privacy-practices.

This also includes information collected to create your account and provide access to our secure patient platform, which is subject to the NPP. Dua Health, Inc. handles certain information on the clinical entity’s behalf as a business associate under a HIPAA business associate agreement.

3. Children

Our Website’s general marketing pages are not directed to children under 13, and we do not knowingly collect personal information from children under 13 through the Website. If we learn we have collected personal information from a child under 13 without the consent required by the Children’s Online Privacy Protection Act (“COPPA”), we will delete it.

Minors receiving clinical care. Dua Health provides clinical services to adolescents and other minors where appropriate. When a minor receives clinical care, intake and consent are handled through our clinical process with the involvement of a parent or legal guardian as required by Texas law, and the resulting information is PHI governed by the NPP (Section 2), not by this Privacy Policy.

If you believe a child under 13 has provided personal information to us through the Website, contact us at hello@duahealth.co.

4. Information We Collect About You

“Personal data” means information that identifies, relates to, describes, or could reasonably be linked, directly or indirectly, with a particular individual or device. It does not include deidentified or aggregated information. We collect personal data:

  • directly from you when you provide it (for example, your name, email address, postal address, phone number, and any information you submit through forms or correspondence);

  • automatically as you navigate the Website (see Section 5); and

  • from third parties, such as our business and marketing partners.

5. Automatic Data Collection and Cookies

As you navigate the Website, we and our service providers may use cookies and similar technologies to collect information about your device and activity, including:

  • usage details such as pages viewed, referring/exit pages, dates and times of visits, and resources accessed; and

  • device and connection information such as IP address, operating system, and browser type.

Cookies. We use session cookies (which expire when you close your browser) and persistent cookies (which remain until deleted). You can set your browser to refuse some or all cookies, but parts of the Website may not function properly. 

Analytics. We use Google Analytics to understand and improve how the Website performs. You can opt out using Google’s browser add-on at tools.google.com/dlpage/gaoptout.

6. Advertising and Your Health Information

We do not sell your health information, and we do not let advertisers use the fact that you sought care from us. Specifically, Dua Health does not use, share, or disclose information indicating that you have sought, received, or inquired about mental health or other health-related services in order to deliver targeted or interest-based advertising to you, and we do not disclose such information to advertising platforms, social media networks, or data brokers for their own purposes.

We configure analytics and advertising technologies so that they are not deployed on, and do not transmit information from, pages and interactions that could reveal your health conditions, the services you are seeking, or the fact that you are a patient or prospective patient. Where we use advertising or analytics cookies on general marketing pages, you may opt out of non-essential cookies and targeted advertising as described in Section 9.

You can also learn about opting out of interest-based advertising from the Network Advertising Initiative at networkadvertising.org and the Digital Advertising Alliance at aboutads.info.

7. How We Use Your Information

We use the personal data we collect to:

  • provide, personalize, and improve the Website and our services;

  • respond to your inquiries and requests, including scheduling and support;

  • create, maintain, and secure your account;

  • process transactions and payments and prevent fraud;

  • send you administrative notices and, where you have opted in, marketing communications;

  • maintain the safety, security, and integrity of our Website and systems;

  • conduct internal research, analytics, testing, and product development; and

  • carry out our obligations, enforce our rights, and comply with law.

8. How We Disclose Your Information

We do not sell your personal data. We may disclose personal data:

  • to service providers and contractors that support our business (for example, IT, hosting, analytics, and payment processing) and are contractually required to protect it and use it only for the services they provide to us;

  • to our affiliated clinical entity to coordinate your care, subject to the NPP;

  • in connection with a merger, financing, acquisition, or sale of assets, subject to this Privacy Policy;

  • to comply with law, legal process, or government or regulatory requests; and

  • to protect the rights, property, or safety of Dua Health, our patients, or others.

We may disclose aggregated or deidentified information, which cannot reasonably identify you, without restriction.

9. Your Privacy Choices and Rights

Opt-in consent for sensitive data. Where required by law, we obtain your consent before processing sensitive data, including any health-related information collected through the Website.

Universal opt-out signals. We honor recognized universal opt-out preference signals, such as the Global Privacy Control (GPC), to opt you out of targeted advertising and any “sale” or “sharing” of personal data where the law requires us to recognize them.

Texas residents (Texas Data Privacy and Security Act). Subject to the Act, you have the right to: confirm whether we process your personal data and access it; correct inaccuracies; delete personal data; obtain a portable copy; and opt out of (i) targeted advertising, (ii) the sale of personal data, and (iii) certain profiling. You may appeal a refusal of your request; if we deny the appeal, you may contact the Texas Attorney General.

Residents of other states. If you reside in another U.S. state that grants comprehensive privacy rights, you may have similar rights, and we honor them as applicable.

How to exercise your rights. Submit a request by emailing hello@duahealth.co or using the “Contact” page on our Website. We will verify your identity before responding and will respond within the time required by law (for Texas, within 45 days, with one permitted 45-day extension). You may use an authorized agent where the law allows.

10. Data Retention

We retain personal data for as long as necessary to fulfill the purposes described in this Privacy Policy, to comply with our legal obligations, resolve disputes, and enforce our agreements, after which we delete or deidentify it. Retention of PHI is governed by the NPP and applicable Texas medical-record retention requirements, not by this Privacy Policy.

11. Data Security

We maintain administrative, technical, and physical safeguards designed to protect personal data from accidental loss and unauthorized access, use, alteration, and disclosure. No method of transmission over the internet is completely secure; any transmission is at your own risk. You are responsible for keeping any account password confidential.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the “Last updated” date above. If we make material changes, we will provide notice as required by law, such as by email or a notice on the Website. Your continued use of the Website after changes take effect constitutes acceptance of the updated Privacy Policy.

13. Contact Us

Dua Health, Inc. is the controller responsible for personal data collected through the Website. If you have questions, concerns, or requests regarding this Privacy Policy, contact us at:

Dua Health, Inc.

5900 Balcones Drive, Suite 100

Austin, TX 78731

Email: hello@duahealth.co

Phone: 512-270-0044

14. Not for Use Outside the United States

The Website is intended for users located in the United States. Our databases are located in the United States. If you access the Website from outside the United States, you do so on your own initiative and are responsible for compliance with local law. By providing your data, you consent to its transfer to and storage in the United States.