Consumer Health Data Privacy Policy

1. Who this policy covers

This policy is for residents of Washington, under the My Health My Data Act, and Nevada, under its consumer health data law, and for anyone whose consumer health data is collected in those states. It adds to our Privacy Policy, which still applies.

2. Consumer health data we collect

• Health concerns you describe: symptoms, conditions, how long something has been going on, and your answers to follow-up questions.
• What we work out from them: the type of care and specialty we suggest, and whether what you described may be an emergency.
• Care you look for: your provider searches and saved providers, which show the kind of care you are seeking.
• Related details: the ZIP code and insurance plan type you enter alongside these, used to find providers and estimate costs.

3. Why we collect and use it

• To suggest the type of care that fits what you describe, find providers near you, and estimate what care may cost.
• To keep your conversation history, searches and saved providers in your account, so you can return to them.
• To keep the Service secure, prevent misuse, and meet legal obligations.

We collect consumer health data only with your consent, which we ask for before your first search. We do not use it for advertising, and we do not sell it.

4. Where it comes from

• Directly from you, when you type into the Service.
• From our AI processing of what you type, which produces the care suggestion and emergency check described above.

5. Who we share it with

We share consumer health data only with service providers that process it for us, under contracts that limit its use:

• Amazon Web Services: hosts the Service, and runs the AI model that reads what you type, through Amazon Bedrock. Amazon Bedrock does not store what you type or use it to train models.
• MongoDB, Inc. (MongoDB Atlas): stores your account data. Your conversation history is encrypted before it is stored.

Google (Firebase Authentication) handles sign-in and receives your name and email address, but not your health information.

We share consumer health data with anyone else only with your separate consent, or when the law requires it, as described in Section 4 of our Privacy Policy.

6. Your rights

You have the right to:

• Confirm whether we collect, share or sell your consumer health data, and see that data.
• Get a list of the third parties and service providers we have shared it with.
• Withdraw your consent to our collection and sharing of it.
• Have it deleted, including from our service providers.
• Appeal if we decline your request.

We will not treat you differently for exercising these rights.

7. How to exercise your rights

Delete everything yourself: go to your account page and choose “Delete account and data.” This removes your profile, conversation history, searches and saved providers, then your sign-in. You can also delete single conversations and searches there.

Any other request: email technical.support@deepneurons.ai from the email address on your account, and say which right you want to use. We will verify your identity and respond within 45 days. If we need more time, we will tell you why, and extend by no more than 45 more days.

8. Appeals

If we decline your request, you can appeal by emailing us with “Appeal” in the subject line. We will respond within 45 days and explain our decision. If your appeal is denied, you can contact the Washington State Attorney General’s Office or the Nevada Attorney General’s Office.

9. Contact us

Questions or requests about this policy can be sent to: