Consumer Health Data Privacy Policy

This Consumer Health Data Privacy Policy (“CHD Policy”) supplements our Privacy Policy and applies to personal information defined as “consumer health data” under applicable laws, including Washington's My Health My Data Act (“MHMDA”), and the Nevada Health Data Privacy Act (“NHDPA”). Capitalized terms not defined in this policy have the meanings set forth in the Privacy Policy and the Terms of Use.

This CHD Policy applies to you if you are a resident of Washington State or Nevada, and if you input consumer health data into the Services.

Consumer Health Data We Collect

As explained in our Privacy Policy, the data we collect depends on how you use the Services, and in particular, what information you input into the Services or through its use.

Consumer health data is defined pursuant to applicable laws, with some enumerated exceptions, as data that is linked or reasonably linkable to a consumer (i.e., a Washington or Nevada resident) and that identifies such consumer’s past, present or future physical or mental health status, including:

• Individual health conditions, treatment, diseases or diagnoses
• Social, psychological, behavioral, and medical interventions
• Health related surgeries or procedures
• Use or purchase of prescribed medication
• Bodily functions, vital signs, symptoms, or certain measurements of health conditions
• Diagnoses or diagnostic testing, treatment, or medication
• Gender-affirming care information
• Reproductive or sexual health information
• Biometric data
• Generic Data
• Precise location information that could reasonably indicate a consumer’s attempt to acquire or receive health services or supplies
• Data that identifies you are seeking health care services
• Any inferences of the above categories of health data derived or extrapolated from non-health information

Sources of Consumer Health Data

As explained in our Privacy Policy, the sources of the data we collect depends on how you use the Services and what information you input to them. We collect consumer health data from you when you input it into the Services, such as when you engage in conversations with other users, or when providing us Feedback (although we strongly recommend you not share such information with us in Feedback, as such Feedback is not guaranteed to be confidential and we may use it for our business purposes).

We do not authorize third parties to collect your consumer health data across different internet websites or online services.

Sharing of Consumer Health Data

To provide the Services, we transmit the content you input, which may include consumer health data, to our AI service providers to generate responses. We employ a range of safeguards to protect your data. These include tools that detect personal identifiers and let you replace them with abstractions before sending, measures that reduce identifying details in the content we store, encryption of the data we store, and de-identification mechanisms applied to data we use for analytics and to improve the Services. However, content you choose to submit is processed by our AI service providers to fulfill your request. The categories of consumer health data we share with our service providers depends on what information you input into the Services, and may include any of the categories described above.

Our service providers used to make the Services available are as follows:

• OpenAI, who can be reached at help.openai.com
• Anthropic, who can be reached at support@anthropic.com
• Z AI, who can be reached at user_feedback@z.ai

Selling of Consumer Health Data

Applicable laws define a “sale” of consumer health data as the exchange of consumer health data for monetary or other valuable consideration. That means that allowing a third party to process your consumer health data in exchange for a free or lower priced service is a “sale” under such laws. We do not “sell” consumer health data, as defined pursuant to these laws.

Use of Consumer Health Data

We may use your consumer health data in the following ways:

• To make the Services available to you
• For communicating with you
• To monitor and improve the quality of our Services, including to monitor user activities thereon and for data security purposes
• Helping us understand how you use our Services, how we can improve our Services to make them more effective and convenient, and offer you new features
• Complying with laws

Consumer Health Data Privacy Rights

If this CHD Policy applies to you, then you may have certain rights with respect to consumer health data, including the rights to:

• Confirm whether we are collecting, “sharing” (as defined pursuant to applicable law), or “selling” (as defined pursuant to applicable law) your consumer health data
• Access your consumer health data that we collected and process, including obtaining a list of all third parties and affiliates with whom we have “shared” your consumer health data and an email address for such persons that you can use to contact them
• Withdraw your consent for us to collect or “share” your consumer health data
• Request the deletion of your consumer health data that we hold

If you would like to exercise any of your rights as described in this privacy policy, you can do so at no charge up to twice annually, by emailing us at socrates@pocketsoc.me, sending us your user name, and the dates of your latest three interactions with the Services, to assist us in authenticating you, and adding the following to the subject line of your email: “Consumer Data Access Request”.

Important Notice Regarding AI-Trained Models

We process your consumer health data in anonymized form to train or fine-tune AI models. There is no technical means by which to delete the resulting training data from the model neural nets, and as such, if you request that your data be deleted, we will delete it from any databases we hold in our own systems, but any information processed through the AI model as training data will remain.

Changes to this CHD Policy

If we make material changes to this CHD Policy, we will resurface this policy to you upon your next visit to the website for review and consent to the updated policy.