If you like this, see what else we're creating.

Privacy policy

Headspace

Headspace Privacy Policy

D

Risk score

57of 100

In short

  • Headspace collects health information, precise location data, and various personal identifiers.
  • It shares this data with service providers, benefit sponsors, and advertising partners for targeted marketing across other apps and websites.
  • The company retains your data indefinitely based on its own legal needs and business purposes.

What you accept

If you use this site

Everyday words for the material promises and rights you give up. Each line includes a quote from the document.

Fineprint cannot see whether you agreed. This page is posted on their site. Open the original if you need to know how they say it applies.

  1. 01

    You are agreeing that Headspace may retain your personal information indefinitely as long as it deems necessary for legal or business reasons.

    This product

    “We will keep your personal information for as long as needed to perform our obligations to you, or for as long as legally permitted.”

What it can cost you

Downsides we could quote

Quoted clauses that can affect your privacy, money, or right to go to court — including terms that follow you to other products.

Highest-cost clauses first

High cost

Location or sensitive-data over-collection

You are agreeing to allow the collection of your approximate location via IP address.

“Approximate location based on information like IP address”

What that means: Your approximate physical location is tracked and stored as part of your user profile.

The document lists geolocation data derived from IP addresses as a collected category of information in the California supplemental notice.

High cost

Health or fitness data used beyond care

You are agreeing to the collection of sensitive health and wellness information which is subject to HIPAA regulations.

“We understand that this information is very sensitive so we handle it with care, including treating this health information as protected health information under HIPAA where applicable.”

What that means: Sensitive medical and psychological data is collected and governed by strict healthcare privacy laws.

The policy explicitly states that mental and physical health inputs, including survey responses and therapy details, are treated as Protected Health Information (PHI) under HIPAA.

Medium cost

Third parties handle data you submit

You are agreeing to let third-party processors handle your payment card information.

“Headspace does not directly process payment card information, and instead relies upon third-party payment processors to do so on our behalf.”

What that means: Your payment details are processed by third parties rather than being kept strictly within Headspace's internal systems.

While Headspace handles core data, financial transaction data is handed off to external vendors for processing.

Medium cost

Indefinite retention

You are agreeing to indefinite data retention based on Headspace's internal and legal criteria.

“We will keep your personal information for as long as needed to perform our obligations to you, or for as long as legally permitted. The criteria used to determine our retention periods include: (i) the length of time we have an ongoing relationship with you; (ii) whether there is a legal obligation to which we are subject; and (iii) whether retention is advisable in light of our legal position...”

What that means: Your data remains in their systems indefinitely unless you successfully request deletion.

There is no fixed deletion schedule; data is kept until the company decides the legal or business need has ended.

Medium cost

Unilateral changes with little or no notice

You are agreeing that Headspace can modify this policy and notify you of significant changes.

“We may update this Privacy Policy from time to time to reflect Platform changes... When we may make a significant change... we will notify you within the Platform or through another channel such as the email you supplied during account registration...”

What that means: The terms governing your privacy may change at any time after you agree.

Headspace can change how it handles data and will inform users via email or in-app notifications.

Lower cost

Liability shifted onto the user

You are agreeing that data security cannot be fully guaranteed.

“No security can be fully guaranteed, though.”

What that means: You bear the risk that data might be compromised despite their measures.

The disclaimer acknowledges that despite safeguards, total security is impossible.

People also accept these terms in

The same company terms often apply on these apps or devices. This is a lookup aid, not a claim we caught this company.

  • Headspace
  • Headspace App
  • Headspace Meditation

If these terms already apply to you

Keep this list. Fineprint cannot undo or cancel something you already agreed to at the company.

We cannot see Agree on their site. With Premium, tap “I accepted these terms” if you already agreed to what Headspace asks.