Privacy Policy | Share + Solve

Last updated: October 22, 2026

This Privacy Policy explains how JTD Company, Ltd. ("JTD Company," "we," "us," or "our") collects, uses, and shares information through:

Share+Solve (app.shareandsolve.app), the app that Participants and Peer Supporters use to message, check in, set goals, and schedule meet-ups;
Peer Bridge (peerbridge.shareandsolve.app), the platform Organization staff and supervisors use to manage their peer support program; and
our websites, www.shareandsolve.app and www.jtdcompany.net.

Together these are the "Services." Where a section applies to only one of them, it says so.

1. How the Services work

We provide the Services to organizations that run peer support programs, such as behavioral health providers, schools, and community organizations (each an "Organization"). Individual users only will be given access by invitation from their Organization.

Participants are the people an Organization serves. They use Share+Solve to stay in touch with their Peer Supporter.
Peer Supporters are people with lived experience who support Participants. They use Share+Solve and Peer Bridge.
Supervisors and other Organization staff use Peer Bridge to manage the program.

Each Organization owns and controls the information about its program, including information about its Participants and Peer Supporters. We handle that information on the Organization's behalf, to provide, secure, and support the Services. Questions about how an Organization uses its program information should go to that Organization.

2. Information we collect

Account information

When an Organization invites you, we collect your name, preferred name, email address, password, your role, and affiliated Organization. We use your email address to sign you in and to send account emails, such as confirming your email or resetting your password.

Profile and intake information

Peer Supporters may add their pronouns, city, state, a short bio, and a description of their lived experience, strengths, and boundaries to their profile. When an Organization enrolls a Participant, the Organization's staff may record the Participant's pronouns, age, city, state, preferred language, communication preferences, availability, and the areas with which the Participant wants support. We do not collect date of birth, gender, marital status, sexual orientation, or veteran status. This information is optional and is used by the Organization to match Participants with Peer Supporters and to provide the Services.

Information you create in Share+Solve

Messages between a Participant and their Peer Supporter, and between a Peer Supporter and their supervisor.
Check-ins, which include a mood rating and an optional note, and requests for extra support.
Goals and steps that Participants and Peer Supporters set together.
Meet-ups, including their time, title, notes, and whether they are in person or by video.
Resources that Peer Supporters add and that Participants bookmark.
Problem reports you send us about the app.

Client Records (Peer Bridge)

Peer Bridge users (Organization staff, supervisors, and Peer Supporters) may enter, view, and manage information about Participants served by their Organization, including intake information, support areas, other services the Participant receives, goals, readiness and pacing assessments, Peer Supporter matching information, check-in logs and notes, raised safety concerns for supervisor follow-up, and referral records (together, "Client Records"), consistent with the Peer Bridge End User Agreement. Client Records are entered and managed by Peer Bridge users on behalf of their Organization. The Organization is responsible for ensuring it has obtained all authorizations required by law to collect and manage Client Records in Peer Bridge.

Service and funding records (Peer Bridge)

Organizations may record the time, duration, and location of the peer support provided (for example, at school, at home, in the community, or by video), including group sessions, and which funder paid for it. Organizations use these records to prepare reports for their funders (see Section 4).

Certification records (Peer Bridge)

Peer Supporters may record their certification progress and continuing education hours, and upload certificates as proof. A Peer Supporter's certification records and uploaded certificates can be seen only by that Peer Supporter and the active supervisors in their Organization.

Sensitive information

Some information obtained through the Services may reveal health or life circumstances. This includes, but is not limited to, the support areas an Organization records for a Participant (for example, mental health support, substance use recovery, family conflict, foster care, or justice system involvement), the lived experience a Peer Supporter chooses to list, and anything a user chooses to share in messages or check-in notes. This information may be considered "sensitive" under applicable data protection laws. It is provided voluntarily or by the Organization, and it is used to provide the Services.

Video meet-ups (Zoom)

Video meet-ups run inside Share+Solve using Zoom's technology. The person who schedules a video meet-up connects their own Zoom account, and we store the connection so we can create the meeting. People who are invited join without a Zoom account. Zoom handles the video itself under its own privacy policy. Meet-ups can also be held in person.

Billing information

When an Organization licenses the Services or buys a product from us, we collect billing contact information, such as name, organization, email address, and billing address, in order to invoice. We do not collect debit or credit card numbers through the Services.

When you contact us

If you email us, we retain your message and contact details so we can document the communication, our response, and support.

Technical information

Cookies and browser storage. Share+Solve and Peer Bridge use one sign-in cookie, which is needed to keep you signed in and to protect your account. It lasts up to 30 days and is sent only over encrypted connections. Share+Solve also uses a short-lived security cookie (about 10 minutes) while you connect a Zoom account, and keeps an unsent meet-up draft in your browser tab while you schedule. During a video meet-up, Zoom's video component may set its own cookies, including analytics cookies, under Zoom's privacy policy.
Logs. To operate and secure the Services, our hosting and service providers keep standard logs, such as IP address, browser type, and time of request.
Error reports. When something goes wrong in the apps, an error report is sent to our error-monitoring provider. Error reports are set up to carry internal ID numbers only, not names, message content, or other personal details.
Our website. Our website does not use cookies or analytics. It loads fonts from Google Fonts. Google receives your IP address when the page loads.

We do not use advertising cookies, analytics services, or tracking pixels, and we do not track you across other websites. We do not collect your device's location.

3. How we use information

We use information to:

provide the Services, including messaging, check-ins, goals, meet-ups, and the tools Organizations use to run their programs;
help Organizations match Participants with Peer Supporters, supervise their programs, follow up on safety concerns, and report to their funders;
sign you in, keep your account secure, and send account emails;
keep the Services working, fix problems, and improve features;
respond to questions and support requests;
bill Organizations for the Services;
protect the Services; and
comply with the law and enforce our agreements.

We do not use information for advertising, and we do not send marketing to Participants.

We use the information about an Organization's program only to provide the Services to that Organization. We create de-identified, combined information across Organizations only for Organizations that choose to take part. That information never includes message content, and we share only combined findings, never information about a single person.

4. Who can see your information

The Services are built to allow people to see only what their role requires. In our database:

Participants see their own messages, check-ins, goals, and meet-ups.
Peer Supporters see their conversations with the Participants assigned to them, those Participants' check-ins and goals, and the Client Record information their Organization makes available to them.
Supervisors see the Client Records for the Participants in their program, the check-ins Peer Supporters log (including notes), Participants' check-ins, safety concerns flagged for follow-up, their Peer Supporters' certification records, and program reports. For each Participant, supervisors can also see how many messages have been sent and the date of the most recent one. Supervisors cannot read messages between Peer Supporters and Participants.
Messages between a Peer Supporter and their supervisor can be read by both of them.
JTD Company platform administrators can access the Services to provide support, keep them secure, and operate them. They cannot read messages between Peer Supporters and Participants through the Services.

We keep a record of who views a Participant's information in the Services.

Peer Bridge only. All information associated with a Peer Bridge account, including any Client Records you enter, is available to your Organization, consistent with the Peer Bridge End User Agreement. Your Organization, not JTD Company, is responsible for how it uses and manages that information.

Reports

Supervisors can create program reports in Peer Bridge and save or print them. Organizations can also create reports for their funders. Funder reports contain counts and hours, not names or notes, and rows covering only a few Participants are combined so that no small group can be picked out. The Organization decides whether and how to share its reports. The Organization solely is responsible for the content and distribution of its reports. The Organization is solely responsible for ensuring it has obtained all authorizations required by law to create and share its reports.

5. How we share information

We do not sell personal information, and we do not share it for targeted advertising. We share information only:

Within your Organization's program, the information is shared as needed to facilitate Services.
With our service providers, who host and run parts of the Services for us: currently, but subject to change, Vercel (hosting), Supabase (database and sign-in), Sentry (error monitoring), and Zoom (video meet-ups). They may use the information only to provide their services to us.
For legal and safety reasons, to comply with the law or a valid legal order, enforce our agreements, and protect our rights.
In a business transfer, if we are involved in a merger, acquisition, reorganization, or sale of assets. In that case, information may be transferred as part of the deal, subject to this Policy.
With your permission or at your direction.

6. Your choices and rights

Deleting your account. Participants can delete their Share+Solve account at any time in Settings. A supervisor can also approve a Participant's request to delete the Participant's account. Peer Supporters' accounts are removed when a supervisor approves a deletion request. Organization staff accounts are deactivated by us at the Organization's request.
Optional information. You can leave optional profile fields blank.
Video. You can disconnect your Zoom account in Settings and instead hold meet-ups in person.

Depending where you live, you may have the right to ask us for a copy of your personal information, to correct it, to delete it, or to receive it in a portable format. Because each Organization controls its program information, we may refer requests about Client Records to your Organization, or work with your Organization to respond. To make a request, contact us using the details at the end of this Policy.

7. Deletion and how long we keep information

We keep information for as long as an Organization uses the Services. When an Organization's agreement ends, we delete its information. The Organization is responsible for exporting any information it needs before its agreement ends.

When a Participant's account is deleted, we delete their sign-in, profile, and assignments; their message conversations, including both sides of each conversation; their check-ins, goals and steps, and meet-ups; their resource bookmarks; their Zoom connection; and the Share+Solve record of who viewed their information.

If a Participant's account is deleted while the Organization is still using the Services, we keep a program record about the Participant for the Organization, with identifying details removed. We remove the Participant's name, preferred name, pronouns, city, age, and other identifying details from it, and remove free-text notes. Other program details remain, such as state, support areas, readiness scores, and the dates and outcomes of check-ins and referrals. In a small program, these remaining details could still point to a person.

When a Peer Supporter's account is removed, we clear their profile and uploaded certificates, block their sign-in, and replace the messages they sent to Participants with "[message removed]." While the Organization is still using the Services, the Peer Supporter's check-ins and other notations by them may stay with the Organization's program records.

Deletion does not affect copies made outside the Services, such as reports an Organization has already saved or printed, or meetings already held on Zoom. Deleted information may remain in our providers' backups and logs until it is removed in their normal course.

8. Security

We strive to protect information using methods that include, but are not limited to, access rules by role, encrypted connections, automatic sign-out after a period of inactivity, a record of who views Participant information, and error reports set up to carry no personal details. Messages are stored in our database and are not end-to-end encrypted. No system is completely secure. Please keep your password private, and contact us if you think your account has been misused.

9. Children and young people

Share+Solve. Participants under 18 may use Share+Solve only where access has been provided through an Organization that has represented to us that it has obtained all legally required parental, guardian, or other consent, consistent with our End User Agreement. We do not independently verify any user's age or the existence or sufficiency of any such consent, and we rely on the Organization's representations. In compliance with the Children's Online Privacy Protection Act, 15 U.S.C. §§ 6501–6506 and 16 C.F.R. Part 312, we do not knowingly collect personal information directly from children under 13 outside of this Organization consent framework. If you believe we have collected information from a child in a way that is inconsistent with this Policy, please contact us, and we will promptly investigate and, where appropriate, remove it. Peer Supporters must be at least 18.

Peer Bridge is intended only for individuals who are at least 18, consistent with the Peer Bridge End User Agreement. Peer Bridge does not knowingly allow access by, or collect personal information directly from, anyone under 18.

10. Health information and HIPAA

JTD Company, Peer Bridge, and Share+Solve are not covered entities under the Health Insurance Portability and Accountability Act of 1996 (HIPAA). If we receive protected health information, as defined by HIPAA, from or on behalf of a covered entity, we will comply with our obligations under HIPAA.

11. Links to other websites

The Services may link to resources and websites run by others, such as crisis lines or community services. Their own privacy policies apply when you use them, and we are not responsible for their content or practices.

12. Where information is stored

The Services are intended for use in the United States. Our database is hosted in the United States. Our service providers may process information in other locations under their own safeguards.

13. Changes to this Policy

We may update this Policy from time to time. For material changes, we will notify Organizations by email at least 30 days before the change takes effect, and ask users to review and accept the updated Policy in the Services. Other changes take effect when posted with a new "Last updated" date.

14. Contact us

For questions about this Policy, to make a request about your information, or to raise a concern, email us at info@jtdcompany.net.

Specific Laws Addendum

We will comply with the privacy laws that apply where you live. Please contact us with any questions.

United States

The following terms may apply depending on the state where you live. Where they conflict with the Privacy Policy, these terms control for personal information collected or held in the United States.

California, Colorado, Connecticut, Virginia, and Utah require us to describe the categories of personal information we have collected or disclosed in the last twelve months, where it came from, and who we shared it with. In the last twelve months, we or our service providers may have collected:

Identifiers, such as name, email address, and IP address;
Customer records, such as billing contact information for Organizations;
Characteristics of protected classifications, such as age;
Internet or other network activity, such as sign-in activity, logs, and error reports from your use of the Services;
General location, such as city and state;
Professional or employment-related information, such as a Peer Supporter's certification progress and continuing education records; and
Sensitive personal information, such as account sign-in credentials, and health information described in the "Sensitive information" section.

We collect this information from you, from your Organization, and from your use of the Services. We use it for the purposes described in "How we use information," and we share it only as described in "How we share information."

We do not sell personal information or share it for targeted advertising, so we do not offer a "Do Not Sell or Share My Personal Information" link. This also addresses the opt-out right for Nevada residents.

Illinois. We do not collect biometric identifiers or biometric information.

Metrics. California law may require us to report, for the previous calendar year, the number of rights requests we received, complied with, and denied, and the median number of days we took to respond. If this obligation applies to us, we will update this section.

California "Shine the Light." We do not share personal information with third parties for their direct marketing purposes.

Do Not Track. We do not track users across websites, and we do not currently respond to browser Do Not Track signals.