Consumer Health Data Privacy Policy
Effective: 1 August 2026
This policy applies to "consumer health data" as defined by the Washington My Health My Data Act (MHMDA) and covers only that data. It is provided in addition to our main Privacy Policy.
What we mean by consumer health data — information you provide that could identify your past, present, or future physical or mental health: primarily your diary entries (free-text reflections and a daily energy value), any health-related details you choose to include, and inferences our AI derives from them.
1. Categories of consumer health data we collect
- Diary entries (free text) that may reveal physical or mental/emotional health.
- A daily energy value (0–10).
- Voice input you record for the diary (transcribed to text; the audio is not retained).
- Inferences/derived notes our AI generates from your diary (reflections, patterns).
2. Sources
- Directly from you (what you write or speak in the diary).
- Generated by our system (AI-derived inferences from your entries).
3. Purpose / how we use it
- To store your diary and, where you consent, generate private AI reflections and pattern insight for your personal-development journey.
- We do not use it for advertising, we do not sell it, and we do not share it with advertising or analytics third parties.
4. Categories of consumer health data we share
- The diary content (and related context) you have opted in to share with our AI providers, solely to generate output for you. We share no other consumer health data.
5. Who we share it with
- AI processors: Anthropic and OpenAI — under contract, instructed not to train on your data — only when you have opted in to AI sharing.
- Hosting/storage: Supabase (EU) stores the data; AWS stores related media.
- We do not sell consumer health data and do not share it with data brokers.
6. Your rights (Washington consumers)
You have the right to confirm whether we collect or share your consumer health data and to access it; to withdraw consent to its collection and/or its sharing; and to delete it.
- Collection and AI-sharing are opt-in and separately controllable in your profile.
- To access or delete: use your profile (data export, delete account) or email info@victoryextraction.com.
- We will not discriminate against you for exercising these rights. You may appeal a denied request by replying to our written response.