Privacy Policy

Last modified October 2026

Introduction

Theooma is a one-of-a-kind marketplace for energy healing which caters to the needs of both energy healers and energy users by providing a streamlined solution for accessing and providing energy healing services.

This privacy notice describes how we will collect, use, share and otherwise process your personal data in connection with your use of:

  • Theooma® mobile application software available for download on our site at http://theooma.com (App).
  • Any of our services that are accessible through the App (Services), unless such Services state that a separate or additional privacy notice applies to a particular Service, in which case only that privacy notice applies.

This App is not intended for children and we do not knowingly collect data relating to children.

Information We Collect

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

Identity Data

This includes first name, last name, username or similar identifier, marital status, title, date of birth and gender.

Contact Data

This includes billing address, delivery address, email address and telephone numbers.

Technical Data

This includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this App.

When you choose Use my location, the App requests a foreground location from your device to find nearby in-person healers. You can use an approximate location, deny permission, or search by town, city or postcode instead. We do not track your location in the background or change your profile address when you search.

We send the town, city or postcode you type and the place you select to Google Maps Platform to provide area suggestions and resolve the selected area. We also use Google to resolve a healer's session postcode. Your device coordinates are used by Ooma for the distance search and are not included in those Google search requests. Names, email addresses, application documents and payment details are not part of these requests.

Search coordinates are used for the current search rather than saved to your profile. Google-derived healer coordinates are held temporarily for up to 30 days, refreshed when available, and removed when expired; the healer's own session postcode is stored separately. Google processes information under its Privacy Policy.

Profile Data

This includes your username and password, purchases or orders made by you, your interests, preferences, feedback and survey responses.

Community Data

This includes the questions and answers you post, the name you choose to show (full name, first name, initials or Anonymous), reports you make, members you block, and moderation decisions about your content.

Your posts are visible to signed-in Ooma members after review. Share links open the post in the App and do not make it publicly available on the web. Healers always post under their profile name.

Posts about your wellbeing can reveal information about your health, which is special category data. We process it only with your explicit consent, given when you first post, to show your post to other members. You can withdraw consent by deleting your post. Moderators and authorised Theooma staff can see the account behind an anonymous post to keep the Community safe.

We keep posted content while it remains posted. Removed or deleted content, reports and moderation records are kept for up to 90 days, unless the law requires longer or a legal claim is pending. We use push notifications to tell you when a question you asked receives an answer, when a decision is made about your post and, for approved healers, when a new question matches their specialties; notifications do not include the text of posts, and you can turn them off in your device settings. We do not use the text of Community posts for advertising or analytics. When you delete your account, your Community posts are deleted or anonymised.

Healer Application Data

If you apply to offer sessions as a healer, this includes your application answers, photo ID, Disclosure and Barring Service (DBS) certificate, training certificates, liability insurance, testimonials, interview and trial session records, and our review notes and decisions.

A DBS certificate contains criminal record information. We use it only to decide whether you can safely offer sessions through the App, as permitted by the Data Protection Act 2018. Only authorised Theooma staff can see application documents, and we keep DBS information for no longer than six months after our decision unless the law requires longer or a legal claim is pending.

Support Data

This includes the messages and screenshots you send to Theooma Support, the topic of your request, and our replies and internal notes.

Usage Data

This includes information about how you use our App and Services, such as the screens you open, app version, device type and approximate session counts, collected through Google Firebase Analytics. We use it to understand and improve the App, not to show you advertising.

Error Reports

When the App or our servers encounter an error, we send a technical error report to Sentry so we can find and fix the problem. Reports contain technical details such as the app version, device type and the part of the App where the error happened. We configure Sentry to remove personal information where possible and not to store IP addresses.

Marketing and Communications Data

This includes your preferences in receiving marketing from us and our third parties and your communication preferences.

How We Use Your Information

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

  • Where we need to perform the contract we are about to enter into or have entered into with you
  • Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests
  • Where we need to comply with a legal or regulatory obligation
  • Where you have given explicit consent, for example to publish a Community post that may include information about your health.

AI Assistance

We use AI tools provided by Anthropic to help our team respond to you quickly. The AI can read Support messages and the details needed to answer them, suggest replies, and pre-check healer application documents, for example by reading the name, document type and dates and flagging a mismatch or an unreadable file.

A member of our team reviews AI suggestions before a reply is sent. The AI does not decide whether an application is approved, whether a document is accepted, or anything about payments, refunds or your account. Anthropic processes this information on our behalf under a data processing agreement and does not use it to train its models.

Service Providers

We share personal data with service providers who process it on our behalf and only for the purposes described in this notice:

  • Amazon Web Services: hosting of the App's servers, database and files
  • Stripe: payments and payouts to healers
  • Google: Firebase (analytics and push notifications) and Google Maps Platform (location search)
  • Sentry: error reports
  • Anthropic: AI assistance for Support and application checks
  • Resend: email delivery
  • Agora: video sessions
  • Pusher: real-time messaging updates

Some of these providers may process data outside the United Kingdom. Where this happens, we rely on UK adequacy regulations or use appropriate safeguards such as the UK International Data Transfer Agreement or Addendum.

Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know.

Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Your Legal Rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data:

  • Request access to your personal data
  • Request correction of your personal data
  • Request erasure of your personal data
  • Object to processing of your personal data
  • Request restriction of processing your personal data
  • Request transfer of your personal data
  • Withdraw consent at any time

Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Email: Tech@theooma.com

Address: Theooma Ltd, London, United Kingdom