Consumer Health Data Privacy Policy

1. What "consumer health data" means here

Under MHMDA, "consumer health data" includes data that identifies a consumer's past, present, or future physical or mental health status — including data derived or extrapolated from non-health information by algorithms or machine learning (RCW 19.373.010(8)).

In the Service, the following may constitute consumer health data:

• Mood and sentiment inferences (derived by AI from your entries).
• Health-related content you write in your entries.
• Health-related extractions (for example, medication mentions surfaced as tags).

2. What we collect

Only what you choose to share with the Service via voice, photo, or text. We do not derive consumer health data from any other source.

3. Why we collect it

To provide the AI-derived features of the Service you enable (mood tracking, semantic search, health-related tags, etc.). We do not collect consumer health data for any purpose beyond what's necessary to provide consumer-requested features.

4. Categories of sources

You. The Service does not receive consumer health data from third parties.

5. Sharing and sale

We do not share, sell, or disclose consumer health data to any third party. If we ever propose to share, we will obtain your separate, specific opt-in consent first (RCW 19.373.030(1)(b)(ii)).

We do not sell consumer health data. We will not do so without your separate, specific written authorization (distinct from the consent for collection).

6. Your MHMDA rights

• Confirm whether we are collecting, sharing, or selling your consumer health data: yes (collecting), no (sharing), no (selling).
• Access your consumer health data: via /export.
• Delete your consumer health data: via /forgetme (deletes the entire account) or by disabling specific AI features in settings (deletes the AI-derived outputs).
• Withdraw consent: disable AI features in settings; withdrawal is as easy as giving consent.
• Lodge a complaint: with the Washington Attorney General.

7. How to exercise your rights

In-app via /settings (Encryption & Privacy section), or contact us via /contact.

We honor deletion requests within 30 days (RCW 19.373.040(2)) and notify any processor or affiliate that holds the data. Not applicable today: we do not share consumer health data with anyone.

8. Geofencing

We do not use geofencing within 2,000 feet of any healthcare facility for any purpose related to consumer health data (RCW 19.373.080).

9. Changes to this policy

For material changes, we'll notify you at least 30 days in advance via the bot and post the revised version at /health-data-policy.

10. Contact and complaints

ics23 (the Operator) · /contact

You can file a complaint with the Washington Attorney General at atg.wa.gov/file-complaint.