Consumer Health Data Privacy Policy

This Consumer Health Data Privacy Policy describes how LifeHub ("LifeHub," "we," "us") collects, uses, shares, and protects consumer health data, and the rights you have over that data. It applies to consumers in Washington and to others to the extent required by applicable consumer health data laws.

"Consumer health data" means personal information linked or reasonably linkable to you that identifies your past, present, or future physical or mental health status, including information derived or inferred from non-health information.

1. Categories of consumer health data we collect

• Conditions, symptoms, diagnoses, and health status you share or that we infer (e.g., metabolic and liver-related conditions, fatigue, pain, mood, stress).
• Measurements and biomarkers you report (e.g., blood glucose, blood pressure, weight, ALT/AST and other lab values).
• Medications, supplements, and treatments.
• Diet, eating patterns, physical activity, sleep, and substance use (alcohol, nicotine, caffeine, and others).
• Mental and emotional health information, including information about stress, mood, and related care.
• Use or purchase of health care services, and your interactions with health care providers.
• Health-related inferences we derive from non-health information you provide (for example, inferences drawn from your work, finances, relationships, or environment).
• Bodily or biological measurements you choose to share.

We collect only what you share in conversation or choose to provide. Your actual data includes only the categories above that apply to you.

2. How we collect consumer health data

• Directly from you, through your text and voice conversations with the Service and any measurements or information you choose to provide.
• Through inference, where we derive health-related information from what you tell us.

We do not purchase consumer health data from data brokers, and we do not collect it through third-party trackers for advertising.

3. Why we collect and use consumer health data

• To respond to you and provide the conversational guidance you came to the Service for.
• To build and maintain your private profile so the Service understands your situation and becomes more useful to you over time.
• To suggest small actions, record the before/after measurements you choose to track, and tell you whether something appears to be working for you.
• To send you follow-ups and check-ins you have asked for.
• To maintain the security and integrity of the Service and to comply with law.

We use your consumer health data to improve the Service for other users or to build de-identified case studies only with your separate, affirmative opt-in consent. We do not use it for those purposes unless you opt in.

4. Categories of consumer health data we share, and with whom

We share consumer health data only with the following categories of recipients, who act as our processors and may use it only on our instructions to provide services to us:

• AI model providers and our AI gateway, which process your conversation content to generate responses. They are contractually prohibited from using your data to train their models or for their own purposes.
• Hosting and database infrastructure providers that store data on our behalf.
• Voice transcription providers, if you use voice.
• Email and messaging providers, to deliver messages you have requested.

We may also disclose consumer health data when required by law or to protect the safety of users or others.

We do not sell consumer health data. Selling consumer health data would require your separate written and signed authorization, and we do not engage in it. We do not share consumer health data with advertisers, and we do not use geofencing around health care facilities.

The specific affiliates and processors with whom we have shared your data are available to you on request, as described below.

5. Your rights

You have the right to:

• Confirm whether we collect, share, or sell your consumer health data, and access that data.
• Obtain a list of all third parties and affiliates with whom we have shared or sold your consumer health data, and a way to contact them.
• Withdraw consent to our collection and sharing of your consumer health data.
• Delete your consumer health data. On your request we will delete it from our records and instruct our affiliates, processors, and contractors to delete it from theirs.
• Appeal a denial of any request.
• Not be discriminated against for exercising any of these rights.

6. How to exercise your rights

Submit a request by emailing [email protected] (please state the right you wish to exercise, e.g., "delete my consumer health data").

We will respond within 45 days. We may extend once by an additional 45 days when reasonably necessary, and will tell you if we do. We will not charge you for up to two requests per year. We will verify your request using the information associated with your account or session; we will not require you to create a new account to make a request.

7. Contact

LifeHub
[email protected]