Consumer Health Data Privacy Policy

1. Categories of Consumer Health Data Collected

We collect the following categories of consumer health data:

1.1 Health Data You Provide Directly

• Medical records and lab results you upload to the Service
• Health conditions, symptoms, and medications you enter manually
• Demographic information relevant to health (age, gender, height, weight)
• Health-related questions and conversations with our AI assistant
• Health goals and preferences you set within the app

1.2 Health Data from Connected Sources

• Data from Apple HealthKit (with your explicit permission), including:
  • Activity data (steps, distance, calories burned)
  • Vital signs (heart rate, blood pressure, blood oxygen)
  • Sleep data
  • Body measurements
  • Nutrition and hydration data

1.3 Derived Health Data

• Health insights and trends generated by our AI analysis
• Extracted data from uploaded medical documents
• Health scores and assessments based on your data

2. Sources of Consumer Health Data

We collect consumer health data from the following sources:

• Directly from you: When you create an account, upload documents, enter health information, or interact with the Service
• From Apple HealthKit: When you grant permission to access your HealthKit data
• From uploaded documents: When you upload medical records, lab results, or other health-related documents that we process and extract data from
• Generated by the Service: When our AI systems analyze your data and generate insights

3. Purposes for Collection and Use

We collect and use your consumer health data for the following purposes:

• Providing the Service: To analyze your health documents, display your health data, and generate personalized health insights
• AI-Powered Health Insights: To use artificial intelligence to process your health data and provide you with analysis, trends, and recommendations
• Personalization: To customize your experience based on your health profile and preferences
• Communication: To respond to your questions and provide customer support related to health features
• Service Improvement: To improve the accuracy and functionality of our health analysis features (using only anonymized, aggregated data)
• Legal Compliance: To comply with applicable laws and regulations

4. Sharing of Consumer Health Data

We may share your consumer health data only in the following limited circumstances:

4.1 Service Providers

We share data with trusted service providers who assist us in operating the Service, including:

• Cloud Infrastructure (Firebase/Google Cloud): For secure data storage and processing
• AI Processing Services: For analysis of health documents and data (under strict data processing agreements)

All service providers are contractually required to protect your data and use it only for the purposes we specify.

Medication name suggestions come from the U.S. National Library of Medicine's public drug database. Only your search text is used for the lookup, never your account details.

4.2 Legal Requirements

We may disclose your consumer health data if required by law, court order, or government request, or to protect our legal rights or the safety of others.

4.3 With Your Consent

We may share your consumer health data with third parties when you have given us explicit consent to do so.

5. Your Rights Under MHMDA

As a Washington State consumer, you have the following rights regarding your consumer health data:

5.1 Right to Know

You have the right to confirm whether we are collecting, sharing, or selling your consumer health data, and to access the specific consumer health data we have collected about you.

5.2 Right to Withdraw Consent

You may withdraw your consent for the collection and sharing of your consumer health data at any time. We will cease collecting and sharing your data within 15 days of receiving your withdrawal request. Note that withdrawing consent may limit or prevent your use of certain features of the Service.

5.3 Right to Deletion

You have the right to request that we delete your consumer health data. Upon receiving a verified deletion request, we will delete your consumer health data within 30 days, except as required by law.

5.4 Right to Non-Discrimination

We will not discriminate against you for exercising any of your rights under the MHMDA.

6. How to Exercise Your Rights

To exercise any of your rights under this Policy, you may:

We will verify your identity before processing your request. You may be required to provide information to confirm your identity. We will respond to your request within the timeframes required by the MHMDA:

• Access requests: Within 30 days
• Deletion requests: Within 30 days
• Withdrawal of consent: Within 15 days

7. Data Security

We implement robust security measures to protect your consumer health data, including:

• Encryption of data in transit and at rest
• Secure authentication and access controls
• Regular security assessments and monitoring
• Employee training on data protection
• Contractual protections with service providers

8. Changes to This Policy

We may update this Consumer Health Data Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on our website and within the app
• Updating the "Last Updated" date at the top of this page
• Sending you an email notification for significant changes

Your continued use of the Service after changes become effective constitutes your acceptance of the revised policy.

9. Contact Us

If you have questions about this Consumer Health Data Privacy Policy or wish to exercise your rights, please contact us: