How Getting My Help is built.

GMH is a hosted software platform (SaaS). Adopting organizations do not install servers or run the product on their own infrastructure. Members use a native mobile app and an optional web portal. Coaches and GMH operators use dedicated web consoles. Employer buyers use a corporate portal for seats and engagement insights.

What members can do

• Self-help program — structured modules across wellbeing domains, daily grades, journal, notes, and goals.
• Ari — an AI wellness companion for text and optional voice, with a live talking-avatar mode. Ari does not give medical, legal, or financial advice and points people in crisis to public helplines (for example 988 in the United States).
• Life coaching — paid video sessions with certified coaches. Sessions may be recorded, with AI-generated notes shared only with the member, their coach, and authorized GMH administrators (with the member’s consent).
• Fitness & wellbeing — optional activity the member chooses to log.
• Library — videos, music, ebooks, and short wellness games.
• Bilingual English and Spanish experience, notifications, referrals, and billing.

Individual members can subscribe themselves. Employers can sponsor access with seat-based corporate subscriptions.

GMH is delivered as a cloud-hosted service. Customers do not deploy agents, on-premise servers, or VPN tunnels to use the product. There is no GraphQL layer and no requirement for the customer to open inbound ports. Members need ordinary outbound HTTPS — and, for live video or the Ari avatar, outbound WebRTC to the video provider.

Hosting model

• Production traffic is served over TLS (HTTPS).
• Application servers sit behind a reverse proxy.
• Member and operational data live in a managed MySQL-compatible relational database.
• Database backups are taken on a schedule, compressed, and stored in separate object storage from the live application.
• Scheduled work (recordings, notes, billing reconciliation, backups) runs as server-side jobs — customers do not operate these.

GMH is a single shared platform with organization-level tenancy for corporate accounts. It is not a customer-owned, on-premise install.

Mobile app (iOS and Android)

The member app is a native cross-platform application built with React Native and Expo. It is distributed through the Apple App Store and Google Play.

Device permissions

Requested only when the feature needs them:

• Microphone — talk to Ari by voice.
• Camera — required by the realtime video stack used for the live Ari avatar. The app does not publish the member’s camera for that experience.
• Notifications — reminders and coaching updates.
• Bluetooth — play Ari / session audio through Bluetooth devices.
• Location is not used.

The app is online-first. A short-lived cache and a fallback copy of public configuration keep the UI usable if the network drops briefly. It is not a full offline product.

Member web portal

Members can use the same self-help program in a browser. After sign-in, the portal stores the session in an httpOnly, secure cookie and proxies API calls server-side. That keeps the access token off JavaScript in the page.

Coach and admin consoles

Coaches and GMH operators use web consoles on the same platform. Coach sessions can require time-based two-factor authentication (TOTP). Admin and coach cookies are scoped separately from member sessions.

Access is role-separated. A member token cannot act as a coach or an employer admin, and the reverse is also true.

• Passwords are stored as one-way hashes (bcrypt). The platform never stores plaintext passwords.
• Tokens are signed with a strong server secret and a pinned algorithm. A missing or weak signing secret prevents the service from starting.
• Public forms are protected with bot challenges (Cloudflare Turnstile) and request rate limiting.
• Coach self-signup hands off to the coach console with a short-lived, single-purpose token so a long-lived coach session is never placed on the marketing site.
• Corporate employees join with an invite or organization join code, then use a normal member account bound to that organization’s seats.

GMH does not currently offer customer-managed SAML / SSO as a standard feature. Organizations that need SSO should treat that as a future integration discussion, not a present capability.

GMH processes the categories below in order to run the service. Exact fields change as features evolve. This is a category list, not a schema.

What employers see — and what they do not

Corporate insights are built for engagement and program participation, not surveillance. Employer admins may see seat usage, whether someone is active, counts of journal check-ins, average wellbeing grades, module progress, streaks, and team-level trends.

They do not receive:

• Journal or daily-note text
• Ari chat content
• Coaching session recordings or notes
• Fitness log detail
• Payment card numbers

That boundary is enforced in the corporate APIs, not only in the user interface.

Data we do not collect

• Device location
• Contacts, photos, or files from the member’s camera roll (unless the member uploads a profile image or a coach uploads a required document)
• Clinical records, prescriptions, lab results, or insurance claims — GMH is not an EHR

The web portal uses session cookies to keep a member signed in. Those cookies are httpOnly and marked secure in production. The mobile app does not rely on cookies for API authentication.

This section describes practices in use, not a formal certification claim.

In transit

• All public member, coach, employer, and operator traffic uses HTTPS / TLS.
• Live coaching video and the Ari avatar use the video provider’s encrypted realtime channels.
• The member website never exposes the API token to page JavaScript.

At rest and on device

• Passwords are hashed (bcrypt, salted).
• Selected secrets (for example coach two-factor seeds) are encrypted before they are stored.
• Session tokens on phones use the OS secure store.
• Sensitive uploads are stored outside the public web root and served only through authenticated, time-limited links.
• Streaming media is delivered through a media platform with signed playback.
• Database backups are stored in separate object storage from the live application, with retention and pruning.

GMH does not claim field-level encryption of every journal or chat row, and this page does not assert SOC 2, ISO 27001, HIPAA, or FedRAMP status. Those are separate legal / compliance questions.

Access control and safeguards

• Least-privilege roles: member, coach, employer admin, GMH operator.
• Coach 2FA is available and expected for coaches.
• Production access is limited to people who operate the service.
• Subscription and coaching consent versions are stored so historical agreements stay attributable.
• Bot protection on public forms and rate limiting on sign-in.
• Ari safety rules on every conversation. Crisis language triggers helpline guidance and an internal flag.
• Signed OTA updates so the mobile app will not apply an unsigned bundle.

Payments run through Stripe. GMH does not store full payment-card numbers. Coach payouts use Stripe Connect.

These are the main subprocessors the platform uses to deliver the service. Names are listed so adopting IT teams can complete a vendor review. This is not a contract or DPA.

AI features send the minimum conversation or audio needed to generate a reply, a voice, or session notes. GMH does not sell member information.

This page does not publish an SLA, RPO, or RTO. Availability commitments, if any, belong in the commercial agreement. Members can request their data or ask support to delete an account or a specific recording / note, subject to the then-current privacy policy and legal holds.

• Copy throughout the app and website states that GMH is not a medical or mental-health provider.
• Self-help subscription and coaching booking both require the member to accept the current disclaimer text before payment. The accepted version, boxes, and timestamp are stored.
• Members must accept that coaching sessions may be recorded and that AI may draft notes for their coach.
• Ari will not diagnose, treat, or prescribe. Crisis language is answered supportively and always includes public crisis resources. Severe cases can be flagged so a coach or administrator can follow up — this is a safety workflow, not emergency dispatch.
• Fitness routines are general guidance. Members are told to stop if they feel unwell and to consult a clinician when needed.
• Coaches must complete certification, accept coach terms, and (where required) complete identity / background-check steps before they take clients.

1. The organization buys a seat pool (or is invoiced offline).
2. HR or a program admin invites employees, or shares a join code.
3. Employees install the app or use the web portal with their own GMH account.
4. Seat assignment grants program access. When the organization subscription ends, sponsored access ends with it.
5. Admins use the corporate portal for roster, seats, and aggregated insights.

Network allowlisting

If the employer locks down egress, allow HTTPS to GMH web properties; HTTPS to the payment, email, media, and AI processors listed above; and the WebRTC / media ports required by the video providers. No inbound connection from GMH into the employer network is required.

SSO, SCIM, MDM, and data-residency options are not documented as standard product features in this version. Ask GMH if those are a condition of adoption.