top of page

Privacy Policy

Effective Date: August 1, 2026
Last Updated: August 1, 2026


This Privacy Policy explains how Kern Counseling Resources LLC, doing business as What To Do! with Terri Kern (“What To Do!,” “we,” “us,” or “our”) collects, uses, stores, shares, and protects personal information when you visit www.whattodo.coach, create an account, use a subscription, interact with TerriBot, complete assessments or quizzes, participate in community or live features, communicate with us, or otherwise use our services.


We are based in Ohio, United States, but we offer our subscriptions worldwide.

 

1. Scope

This Privacy Policy applies to personal information processed in connection with:

  • our website;

  • free and paid memberships;

  • Skill Cards and educational programs;

  • TerriBot;

  • community groups;

  • assessments and quizzes;

  • progress-tracking tools;

  • live online sessions;

  • newsletters and email communications;

  • podcasts and related content;

  • customer service; and

  • related online services.

This Privacy Policy does not govern third-party websites or services that maintain their own privacy policies.

 

2. Information We Collect

The information we collect depends on how you use the Services.

 

A. Account and Identity Information

We may collect:

  • name;

  • email address;

  • username;

  • password or authentication information;

  • phone number;

  • profile image;

  • date of birth or age information;

  • mailing or billing address;

  • account preferences; and

  • membership status.

 

B. Subscription and Transaction Information

When you purchase a subscription, we may collect or receive:

  • subscription plan;

  • transaction date;

  • billing status;

  • renewal date;

  • transaction identifiers;

  • billing address;

  • payment status; and

  • limited payment-related information.

Payment-card information is processed through Wix Payments and its payment partners. We generally do not need to store your complete card number ourselves.

 

C. Community Information

If you participate in community features, we may process:

  • posts;

  • comments;

  • questions;

  • replies;

  • profile information;

  • uploaded images;

  • reactions;

  • group participation;

  • reports or moderation information; and

  • other content you voluntarily submit.

Community posts may be visible to other members depending on the applicable group or feature.

 

D. TerriBot Conversations

When you interact with TerriBot, we may process:

  • the text of your messages;

  • conversation transcripts;

  • information you voluntarily include in messages;

  • timestamps;

  • session-related information; and

  • limited technical metadata.

Please do not submit information through TerriBot that you would not want processed by an AI service provider.

 

E. Assessments, Quizzes, and Personalization Data

We may collect responses to non-clinical assessments, questionnaires, quizzes, or similar tools.

These may relate to topics such as:

  • coping preferences;

  • stress;

  • focus;

  • emotions;

  • communication;

  • relationships;

  • skill interests;

  • personal-development goals; or

  • similar educational subjects.

We use these tools for non-clinical education, personalization, engagement, and marketing.

For example, a quiz result may be used to suggest a Skill Card, resource, or subscription plan.

These assessments are not used by What To Do! to diagnose, treat, or provide clinical mental-health care.

 

F. Progress and Service-Usage Information

We may collect:

  • program progress;

  • completed resources;

  • selected skills;

  • feature usage;

  • account activity;

  • content interactions; and

  • other information about how you use our Services.

 

G. Communications

If you contact us, register for an event, respond to an email, or request support, we may collect:

  • the content of your message;

  • email address;

  • name;

  • support history;

  • event registrations; and

  • related correspondence.

 

H. Technical and Website Information

We and our service providers may automatically collect:

  • IP address;

  • browser type;

  • device type;

  • operating system;

  • approximate location derived from IP address;

  • referring URL;

  • pages viewed;

  • click and navigation information;

  • timestamps;

  • cookie identifiers;

  • session information; and

  • similar technical data.

We use this information primarily for website functionality, security, analytics, performance, and marketing measurement.

 

3. Sensitive and Health-Related Information

Some information users voluntarily provide may concern emotional experiences, stress, coping, relationships, or similar topics.

Although these topics may relate broadly to mental health, What To Do! is an educational and coaching service and does not use this information to create clinical records, provide diagnosis, or deliver psychotherapy.

You should not submit formal medical records, protected healthcare documents, detailed treatment records, government identification numbers, financial credentials, or other highly sensitive information unless specifically requested and necessary.

 

4. TerriBot and Chatbase

We use Chatbase, an artificial-intelligence platform, to operate TerriBot.

When you interact with TerriBot, your messages and information voluntarily entered into the chat interface are processed through Chatbase so that an AI-generated response can be produced.

Information processed through the chatbot may include:

  • raw chat transcripts;

  • name, email, telephone number, or other information you voluntarily type;

  • timestamps; and

  • technical information required to maintain the chat session.

We use TerriBot conversations for purposes such as:

  • providing the requested response;

  • operating the chatbot;

  • quality assurance;

  • troubleshooting;

  • service optimization;

  • responding to user requests; and

  • maintaining service security.

TerriBot is an educational coaching tool and is not a clinical or emergency service.

 

Chatbase Data Practices

According to the service configuration and representations applicable to our use of Chatbase, conversation data processed on our behalf is restricted to our workspace and is not intended to be used by Chatbase or its underlying language-model providers to train public AI models.

Chatbase states that it employs encryption for data in transit and at rest and offers contractual and security measures including a Data Processing Agreement and SOC 2-related controls.

You can review Chatbase’s current legal and privacy materials at:

Chatbase Privacy/Legal Information:
https://www.chatbase.co/legal

Chatbase Data Processing Agreement:
https://www.chatbase.co/legal/dpa

Chatbase Security Information:
https://www.chatbase.co/security

Because third-party practices can change, those providers’ current published policies control their independent obligations.

 

5. OpenAI-Related Technology

Certain AI functionality made available through Chatbase or other integrations may rely on artificial-intelligence technology supplied by OpenAI or another model provider.

Where a third-party provider processes information on our behalf, we use such providers for service-delivery purposes and subject to applicable contractual and privacy protections.

We do not authorize AI providers to use our customer information for purposes beyond those permitted under our applicable service arrangements.

 

6. How We Use Personal Information

We may use personal information to:

  • create and administer accounts;

  • provide free and paid subscriptions;

  • process payments;

  • manage renewals and cancellations;

  • provide Skill Cards and educational programs;

  • operate TerriBot;

  • personalize educational recommendations;

  • recommend skills or subscription plans based on quiz responses;

  • operate community features;

  • administer live sessions;

  • track program participation;

  • answer support requests;

  • send transactional emails;

  • send newsletters and marketing communications where permitted;

  • analyze website performance;

  • understand how users interact with the Services;

  • maintain security;

  • detect fraud or misuse;

  • enforce our Terms;

  • comply with legal obligations;

  • maintain tax and accounting records;

  • improve and develop our Services; and

  • protect our rights and the rights of others.

 

7. Legal Bases for Processing

Where laws such as the European Union General Data Protection Regulation (“GDPR”) or United Kingdom GDPR require us to identify a legal basis, we generally rely on one or more of the following:

 

Contract

We process information when necessary to:

  • create your account;

  • deliver your subscription;

  • process payments;

  • provide requested features;

  • administer your membership; or

  • respond to contractual requests.

 

Legitimate Interests

We may process information where reasonably necessary for legitimate business purposes, such as:

  • securing our website;

  • preventing fraud;

  • improving our Services;

  • understanding service usage;

  • providing customer support;

  • operating non-intrusive analytics; and

  • protecting our legal rights.

We balance these interests against your privacy rights where required.

 

Consent

We rely on consent where applicable, including for:

  • certain marketing communications;

  • certain optional cookies or tracking technologies;

  • processing where local law requires affirmative permission; or

  • other optional activities.

You may withdraw consent where legally permitted.

 

Legal Obligation

We may process information to satisfy legal, tax, accounting, regulatory, or lawful governmental requirements.

 

8. Cookies and Similar Technologies

We and our service providers may use cookies, pixels, local storage, session technologies, and similar tools.

These may be used for:

  • essential website functionality;

  • authentication;

  • security;

  • remembering settings;

  • analytics;

  • understanding website traffic;

  • measuring engagement; and

  • marketing-related analytics.

Where applicable law requires consent for non-essential cookies, we will seek consent through available cookie-management tools.

You may also adjust browser settings to block or delete cookies, although doing so may affect website functionality.

 

9. Analytics

We use Google Analytics and may use other analytics functionality available through Wix.

Analytics services may collect information such as:

  • pages viewed;

  • device and browser information;

  • approximate location;

  • referral source;

  • usage patterns; and

  • interaction information.

We use this data to understand how visitors use our website and to improve our content and Services.

We also use Google Search Console to understand website search visibility and technical performance.

Google’s privacy information is available at:

https://policies.google.com/privacy

 

10. Marketing

We may use information about website usage, quiz results, content interests, or subscription activity to understand what educational resources or membership options may be relevant to you.

For example, a non-clinical quiz may be used to suggest a particular Skill Card or subscription.

We do not use such recommendations to provide clinical treatment or make medical decisions.

We do not sell personal information for money.

We do not knowingly disclose personal information for third-party cross-context behavioral advertising in a manner we characterize as a “sale.”

If our practices change, we will update this Privacy Policy and provide any legally required opt-out rights.

 

11. Email Communications

We may send service-related communications such as:

  • account messages;

  • billing information;

  • renewal notices;

  • cancellation confirmations;

  • password or security messages;

  • service announcements; and

  • policy updates.

These transactional communications may be necessary to operate your account.

We may also send marketing emails or newsletters where permitted by law.

You may unsubscribe from marketing emails using the unsubscribe link contained in the message.

Unsubscribing from marketing emails does not prevent necessary account or transaction-related messages.

 

12. Third-Party Service Providers

We use service providers to operate different parts of the business.

These may include:

 

Wix

Our website, membership functionality, subscriptions, payment functionality, and other website features are provided in whole or in part through Wix.

Wix privacy information:

https://www.wix.com/about/privacy

 

Wix Payments

We use Wix Payments to process subscription payments.

Payment processors may process payment and identity information directly under their own legal and compliance obligations.

 

Google Analytics and Google Search Console

We use Google services for analytics and site-performance purposes.

Google Privacy Policy:

https://policies.google.com/privacy

 

Zoom

We may use Zoom for live Q&A sessions, group practice, or related virtual events.

Zoom Privacy Statement:

https://www.zoom.com/en/trust/privacy/privacy-statement/

 

YouTube

We may embed or link to content hosted through YouTube.

Google/YouTube Privacy Policy:

https://policies.google.com/privacy

 

Spotify

We may distribute or embed podcast or audio content through Spotify.

Spotify Privacy Policy:

https://www.spotify.com/legal/privacy-policy/

 

Substack

We may use Substack for newsletters, publishing, or email-related content.

Substack Privacy Policy:

https://substack.com/privacy

 

Chatbase

We use Chatbase to operate TerriBot.

Chatbase legal information:

https://www.chatbase.co/legal

 

OpenAI and AI Model Providers

AI services used through Chatbase or other functionality may interact with model providers such as OpenAI.

OpenAI Privacy Policy:

https://openai.com/policies/privacy-policy/

These providers may process information in countries other than the country where you live.

 

13. When We Share Personal Information

We may share personal information:

  • with service providers that perform functions on our behalf;

  • with payment processors;

  • with hosting and website providers;

  • with analytics providers;

  • with communication and email providers;

  • with AI service providers;

  • with professional advisers such as accountants, lawyers, or security specialists;

  • where required by law;

  • to respond to valid legal process;

  • to investigate fraud, security incidents, or misuse;

  • to protect the rights or safety of users or others;

  • in connection with a merger, acquisition, reorganization, financing, or sale of the business; or

  • with your consent.

We do not sell, rent, or lease TerriBot conversation logs to third parties.

 

14. No Sale of Personal Information

We do not sell personal information for monetary compensation.

We do not intend to rent personal information or customer lists to third parties.

If our data practices change in a manner that creates a legal “sale” or “sharing” obligation under applicable privacy law, we will provide the required notices and opt-out mechanisms.

 

15. International Data Transfers

We are based in the United States.

If you access the Services from outside the United States, your information may be transferred to, stored in, or processed in the United States or other countries where our service providers operate.

Those countries may have data-protection laws different from those of your country.

Where required, we and our providers may rely on safeguards such as:

  • contractual data-protection terms;

  • standard contractual clauses;

  • data-processing agreements;

  • adequacy mechanisms; or

  • another lawful transfer mechanism.

 

16. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

  • provide the Services;

  • maintain an active account;

  • respond to requests;

  • maintain security;

  • resolve disputes;

  • enforce agreements;

  • meet legal obligations; and

  • preserve legitimate business records.

Retention periods vary depending on the type of information.

 

Account Information

After an account is closed or canceled, we may retain certain information for a reasonable period where necessary for legal, security, fraud-prevention, operational, or recordkeeping purposes.

Information that is no longer reasonably necessary may be deleted, anonymized, or aggregated.

 

Transaction and Accounting Records

We may retain payment, transaction, tax, and accounting records for approximately seven years, or longer where required by law.

 

Community Content

Deleting a Wix membership account may not automatically delete community or group content previously created by that member.

Community posts may therefore remain unless:

  • they are separately deleted by an administrator;

  • the platform removes them;

  • they are anonymized; or

  • they are addressed as part of an applicable privacy-erasure request.

 

TerriBot Conversations

TerriBot conversations may remain in our Chatbase administrative environment for quality assurance, service optimization, troubleshooting, and fulfillment of user requests.

A user may request deletion of identifiable TerriBot conversation data by contacting us, subject to legal or technical limitations.

 

17. Account Deletion and Wix Data

Deleting a site membership does not necessarily erase every item of information associated with a person.

For example, content created through Wix community or group features may require separate deletion or privacy-erasure processing.

Where applicable, we may use Wix’s visitor-data deletion tools to respond to a valid privacy request.

Some information stored in custom website databases, applications, integrations, or third-party systems may need to be located and deleted separately.

We will make reasonable efforts to address valid deletion requests across systems we control, subject to lawful retention requirements.

 

18. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information.

Depending on the system, these measures may include:

  • HTTPS and encryption in transit;

  • encryption at rest where supported by our providers;

  • account authentication;

  • access controls;

  • limited administrative access;

  • password protection;

  • multi-factor or two-factor authentication;

  • service-provider security controls;

  • monitoring for unauthorized access;

  • CAPTCHA or similar anti-abuse protections; and

  • use of established service providers with security programs.

At present, direct internal access to customer information is limited primarily to authorized owners or personnel, including Terri Kern and Kim Adams, as reasonably necessary to operate the business.

No online service or storage system can be guaranteed to be completely secure.

 

19. Your Privacy Choices

Depending on where you live, you may have rights to:

  • request access to your personal information;

  • request correction;

  • request deletion;

  • obtain a copy of certain information;

  • object to certain processing;

  • restrict processing;

  • withdraw consent;

  • unsubscribe from marketing;

  • opt out of certain targeted advertising or data sharing;

  • request data portability; or

  • appeal certain privacy decisions.

To exercise a privacy right, contact:

hello@whattodo.coach

We may need to verify your identity before fulfilling a request.

We will respond within the time required by applicable law.

 

20. U.S. State Privacy Rights

Residents of certain U.S. states may have additional rights under state privacy laws.

Depending on applicability, those rights may include:

  • confirmation of whether we process personal information;

  • access;

  • correction;

  • deletion;

  • portability;

  • opt-out rights relating to sale, targeted advertising, or certain profiling;

  • limitation of certain sensitive-data processing; and

  • appeal of a denied request.

We will honor rights that apply to our business based on the applicable jurisdiction, thresholds, exemptions, and legal requirements.

We do not discriminate against users for exercising legally protected privacy rights.

 

21. California Privacy Notice

If the California Consumer Privacy Act, as amended by the California Privacy Rights Act, applies to us, California residents may have rights relating to:

  • access;

  • correction;

  • deletion;

  • information about categories of data collected;

  • information about disclosures;

  • opting out of sale or sharing; and

  • limiting certain uses of sensitive personal information.

We do not currently sell personal information for monetary consideration.

We also do not knowingly engage in cross-context behavioral advertising practices that we intend to characterize as a sale or sharing of personal information.

California rights may be exercised through:

hello@whattodo.coach

 

22. European Economic Area and United Kingdom Rights

If GDPR or UK GDPR applies to your information, you may have the right to:

  • access your personal data;

  • correct inaccurate data;

  • request deletion;

  • restrict processing;

  • object to processing based on legitimate interests;

  • receive certain data in portable form;

  • withdraw consent;

  • object to direct marketing; and

  • lodge a complaint with your local data-protection authority.

These rights are subject to applicable exceptions.

Where we rely on consent, withdrawal of consent does not affect the lawfulness of processing conducted before withdrawal.

 

23. Canadian Users

Canadian users may have rights under applicable federal or provincial privacy law, including rights to request access to and correction of personal information and to withdraw certain forms of consent, subject to legal limitations.

Requests may be sent to:

hello@whattodo.coach

 

24. Children’s Privacy

The Services are intended for adults age 18 and older.

We do not knowingly offer subscriptions or accounts to children under 18.

If we learn that we have collected personal information from a child in violation of applicable law, we will take reasonable steps to delete it.

 

25. Automated Recommendations

We may use quiz responses, account activity, or similar information to provide automated or semi-automated recommendations about educational resources, Skill Cards, or subscription options.

These recommendations are intended for convenience, education, and marketing.

They are not clinical diagnoses, medical decisions, eligibility determinations, credit decisions, employment decisions, or other decisions producing comparable legal or similarly significant effects.

 

26. Business Transfers

If What To Do! or Kern Counseling Resources LLC is involved in a merger, acquisition, financing, reorganization, sale of assets, change of control, or similar transaction, personal information may be transferred as part of that transaction.

Any successor may use personal information subject to applicable privacy law and this Privacy Policy or a replacement policy provided with legally required notice.

 

27. Legal Disclosures

We may preserve, use, or disclose information where reasonably necessary to:

  • comply with applicable law;

  • respond to subpoenas, court orders, warrants, or other valid legal process;

  • respond to lawful governmental requests;

  • protect our legal rights;

  • investigate fraud;

  • protect users;

  • address safety issues;

  • enforce our agreements; or

  • defend against legal claims.

 

28. Do Not Track

Some browsers offer “Do Not Track” signals.

Because there is not a single universally accepted standard for responding to all such signals, our website may not respond to traditional Do Not Track settings.

Where applicable law requires recognition of browser-based privacy signals such as a legally recognized universal opt-out mechanism, we will address those requirements as they apply to our systems and business.

 

29. Links to Other Websites

Our website may contain links to third-party websites, services, podcasts, videos, social networks, or other resources.

We are not responsible for the privacy practices of third parties.

Review the privacy policy of any external service before providing personal information.

 

30. Changes to This Privacy Policy

We may update this Privacy Policy as our Services, technology, vendors, or legal obligations change.

When we make material changes, we may provide notice through:

  • the website;

  • account notifications;

  • email; or

  • another reasonable method.

The date at the top of the Privacy Policy will identify the current version.

 

31. Contact Us

For questions, privacy requests, corrections, deletion requests, or other concerns, contact:

What To Do! with Terri Kern
Operated by Kern Counseling Resources LLC
Ohio, United States
Email: hello@whattodo.coach
Website: www.whattodo.coach

If you are entitled to complain to a government privacy regulator, you may also contact the supervisory or data-protection authority responsible for your jurisdiction.

bottom of page