Política de privacidad de datos de salud del consumidor

This policy applies to "consumer health data" as defined by the Washington My Health My Data Act (MHMDA) and similar U.S. state laws. It is provided separately from our general Privacy Policy as those laws require. It describes the consumer health data we collect, how we use it, who we share it with, and the rights you have over it.

1. What consumer health data we collect

Data you choose to add or connect, which can reveal your health status, including:

• Lab and blood-test results, imaging studies and AI-generated readings, medications, allergies, conditions, vitals, and family medical history.
• Documents you upload (reports, prescriptions, letters) and information extracted from them.
• Connected wearable metrics (e.g. heart rate, sleep, recovery) when you authorize a device.
• Records you create for family members you manage within your account.

2. How we collect it

Directly from you (uploads, manual entry), from documents you provide (via automated extraction), and from third-party services you explicitly connect. We do not buy consumer health data and we do not collect it from sources you have not authorized.

3. How we use it

• To provide the Service: store, organize, display, and let you export or share your records.
• To generate educational AI summaries when you request them (not a diagnosis).
• To secure the Service and keep audit logs of access.

We do not use consumer health data for advertising or to build marketing profiles.

4. Who we share it with

We do not sell consumer health data, and we do not share it for cross-context behavioral advertising. We share it only:

• With infrastructure providers that host or process data for us, under contracts limiting use to operating the Service.
• When you choose to share a record via a secure, expiring link.
• When required by law or to protect safety.

We use third-party AI providers on your data only after you turn on AI features, which you can switch off at any time in Settings. Each provider is listed on our subprocessors page.

5. Your rights

• Access & export: get a copy of your consumer health data (Settings → Privacy & data).
• Delete: delete your consumer health data and account. We will also direct our processors to delete it. Certain security logs are retained where law requires.
• Withdraw consent: revoke connected devices or AI consent at any time.

To exercise these rights, use Settings → Privacy & data, or email [email protected]. We respond within the timeframe the applicable law requires. You may appeal a denied request by replying to our response, and you may contact your state Attorney General.

6. Consent & no discrimination

We collect and share consumer health data only with your consent or as needed to provide a feature you requested. We will not deny you the Service, charge a different price, or provide a different quality of service because you exercised your rights.

7. Geofencing

We do not use geofences around healthcare facilities, and we do not track your location near them.

8. Data security & retention

We protect consumer health data with encryption in transit, access controls, scoped tokens, and audit logging, and retain it only while your account is active or as law requires.

9. Contact

Privacy contact: [email protected].