Consumer Health Data Privacy Policy

Consumer health data (Washington, Nevada, Connecticut and other states)

This section is our consumer health data privacy policy.

• What we collect and why: when you use an AI feature, the health information that request needs (section 4) passes through our server to Anthropic, to produce the answer you asked for. When an explanation uses public health information, or you look up a medication's generic name, the code of the test, condition or medication, or the medication's name, passes through our server too (section 5), and is kept only in a cache of public information, not linked to you. It can include health conditions, symptoms you describe, medications, test results and medical documents, measurements such as weight, blood pressure and glucose, nutrition, exercise, sleep, mood and wellbeing check scores, and reproductive or sexual health information only if it's in what you wrote, the documents you added or the health records you connected, never from the women's health program (section 4). We don't keep it. If you turn on sync or share a family profile, we also keep a sealed copy of those records, which can hold all of that (section 2), only to keep your devices, or the people you invited, in step and back them up for you; it's sealed on your device with keys we don't have, so we can't read it. If you make a doctor link, we keep your summary sealed until the link ends, only to show it to whoever has the link; we can't read it. If a shared profile uses "I'm OK today", each check-in passes through our server sealed, and we keep only that one was sent, by which account and when, for 30 days. We don't collect consumer health data in any other way, and if a suggestion sent from our website includes some, we delete it when we read it (section 10).
• Where it comes from: you (about yourself, or about someone whose family profile you keep), Apple Health (with your permission), your health care providers, whose records reach Vitaclaris through Health Records in Apple Health (also with your permission), the documents you add, and the files you import.
• Who we share it with: only Anthropic, our service provider, to answer the request (section 4). The public health services in section 5 receive only a code or a medication's name from our server, never anything that identifies you. Cloudflare, our service provider, stores the sealed copies and can't open them. A doctor link is shared by you, with whoever you give it to, and a shared family profile with the people you invite. We never sell it.
• Your consent: the AI features run only after you allow them, and you can take that back at any time in Settings → Account and plan. Sync runs only after you turn it on, on a screen that says what's sent; you can turn it off and delete the copy at any time in Settings → Your devices. Doctor links, shared family profiles, missed-dose alerts and "I'm OK today" work only after you make or turn them on, each on a screen that says what it does, and you can end them at any time.
• What the app keeps on your device (section 2) stays there, and reaches us only sealed, as described above.
• We don't use your location or geofencing.
• Your rights: you can ask us to confirm whether we collect, share or sell your consumer health data, to see it, and to delete any we have, at privacy@vitaclaris.com. The sealed copies hold your own records, which you see in the app; we can't open them, but you can delete them yourself (Settings → Your devices, the medical summary or People on this iPhone), or ask us to. Appeals work as in section 8.