Consumer Health Data Privacy Notice

01Information and sources

A conversation or request may reveal physical or mental health, symptoms, disability, medication, treatment, healthcare needs, or a need for help. Voice, text, shared images or screens, saved memory, check-ins, and call summaries may contain or imply that information. We receive it from you, a person you authorize, your interactions, and AI processing of those interactions. We do not collect healthcare records from providers or insurers, precise location to infer healthcare visits, or biometric identifiers for identity verification.

02Purposes and permission

We process health-related information to the extent necessary for the interaction or support you request. We do not diagnose, prescribe, or make clinical decisions. Optional retention and human review of beta calls for product improvement require a specific, affirmative recording choice that explains that sensitive health content may be included. You can decline or withdraw that choice without enrolling in a different account.

Permission for collection and processing is distinct from permission to share with people in your circle. Routine summaries are designed to exclude detailed medical information. If you specifically ask to send health-related information to someone, we identify the recipient and information and obtain the authorization required for that sharing. A general acceptance of Terms does not substitute for health-data consent.

03Recipients

Cloudflare processes hosting and storage; Google’s Gemini processes the content needed to respond; and contracted support or engineering providers may process authorized records under restricted instructions. These processors may receive the health-related categories needed for those functions. Authorized people in your circle receive only the updates or requests you permit, not full call records. Apple push services may carry limited notification content. We do not provide health content to Stripe, Apple billing, or Google Play billing to complete payments.

We do not sell consumer health data, share it with advertisers, or allow affiliates to use it independently for marketing. We do not use geofences around healthcare facilities to identify or target people seeking care. Any legally required disclosure is limited to the applicable legal obligation; a change involving additional categories or purposes requires notice and required consent.

04Retention, deletion, and withdrawal

Health-related content in beta call records follows the 90-day maximum for those records, unless deleted sooner. Saved memory remains until removed or the profile is deleted; shared service history has a 12-month maximum. Narrow legal retention exceptions in the Privacy Policy apply only when legally permitted and necessary.

You may confirm whether we collect or share your consumer health data, access a copy, obtain a list of recipients and their contact methods, withdraw collection or sharing consent, or request deletion by emailing support@yourrealm.com or using profile/account deletion. We take reasonable steps to verify the request without requiring a new account. We delete relevant active records and instruct processors and other recipients to delete where required. Backup deletion follows the 90-day limit in our Privacy Policy. We do not retain identifiable evaluation copies after a valid deletion merely because they were used for improvement.

We respond within 30 days, or a shorter required deadline. If a permitted extension is necessary, we notify you and explain it before that period expires. To appeal a denied request, email support@yourrealm.com with “Health privacy appeal.” We respond with reasons within 45 days. You may also contact your state attorney general, including the Washington Attorney General or Nevada Attorney General. We do not discriminate for exercising these rights.

05Contact

YourRealm’s privacy contact is support@yourrealm.com. The Privacy Policy gives additional details about security, service providers, other privacy rights, and changes.