Consumer Health Data Privacy Policy
About this policy
This Consumer Health Data Privacy Policy describes how IntoHarmony handles consumer health data. It supplements our Privacy Policy and applies to the extent laws such as the Washington My Health My Data Act and Nevada’s consumer health data law apply to us. If the two documents differ about consumer health data, this one governs. “Consumer health data” means personal information that is linked or reasonably linkable to you and that identifies your past, present, or future physical or mental health status. Much of what IntoHarmony works with is of that kind: how your body and nervous system feel, urges and how they went, practices you tried, and summaries the app derives from them. IntoHarmony is a self-awareness and self-regulation tool. It is not a licensed clinical practice and does not itself provide diagnosis or treatment.
Consumer health data that stays on your device
Most of what you enter is processed by the app on your device. The underlying records below are not sent to us, and we cannot see, share, or retrieve them. If you switch on the web view, the app stores only the reduced summaries described in the next section, which are derived from some of these records: • Raw values read from Apple Health with your permission: sleep, heart rate, heart rate variability, respiratory rate, activity, and menstrual flow • Your cycle log, including bleeding and symptom entries • Your check-ins: energy, internal pace, connection, clarity, body activation, and agency, with any body areas and sensation words you picked • Urges you log, meals you log, and the tools you used • Notes, reflections, and anything else you type • Baselines and personalization the app computes from the above • Everything entered in a kid profile Purpose and use: to show you your own state, patterns, and suggested practices, on your device.
Consumer health data we collect on our servers
We receive the following, each only for the purpose stated: • Account and profile details: your email address, account identifier, the date you finished onboarding, your profile name, and your settings, including which features you switched on (for example cycle tracking). Purpose: to sign you in and restore your settings on a new device. Settings can indicate health-related interests. • Support messages and feedback you write to us, and, if you leave it switched on, basic device details (app version, operating system, device model). Purpose: to answer you and fix what you report. These contain health information only if you include it. • A record of each consent choice you make: the purpose, whether you granted or withdrew it, the version number of the wording in force, and when; for the web view, also a fingerprint (a hash) of the wording shown. The wording itself is not stored with the record. Purpose: to be able to show what you agreed to, and to enforce it. If, and only if, you switch on the web view, we also receive and store: • Summaries the app generates on your device: patterns the app has surfaced and how established each is; estimates of how your state changed after practices you tried; an estimate of whether your recent use of the app looks active, drifting, or lapsed; and your state trajectories and interoception progress over recent weeks • If you switch it on, aggregate urge patterns: how often urges came, what kind they were, at what times of day, and how they went, as counts over the past four weeks • If you switch it on, a daily diary card for the past week: each day’s check-in levels, mood, and context tags; each urge you logged, limited to what kind, how strong, whether you acted on it, and how it went; and which practices you tried • If you switch it on, body-signal aggregates over the past four weeks: where your internal pace has been landing and how often it returns to settled, which body areas and sensation words you chose most often, and how many distinct sensation words you used. Cells with fewer than five mentions are not stored, and nothing from meal logs is included Purpose and use: to show you your own summaries on the IntoHarmony web dashboard. Each summary covers a trailing window of seven days to eight weeks. We do not use consumer health data for advertising. We do not use it to train models in this release. Model-training data sharing, care-provider sharing, and anonymous statistics are switched off, and if any is ever switched on we will describe it here and ask for your consent first.
Where consumer health data comes from
• You: what you enter and the choices you make in the app, and what you write to us • Your device, with your permission: Apple Health, read on your device only • The app itself: summaries, estimates, and patterns it derives on your device from your entries
How consumer health data is processed
On-device data is written to encrypted local storage. Data we receive travels over an encrypted connection and is stored in a hosted database in the United States. Access rules limit each record to the account it belongs to: the summaries stored for your web view are returned only to you, signed in to your own account, and are stored only while your consent to the web view is on record.
What we share, and with whom
We do not share consumer health data with third parties, and we do not sell it: we do not exchange it for money or anything else of value. We have no affiliates. We do not share consumer health data with advertisers, data brokers, analytics companies, or care providers. Sharing with a care provider is switched off in this release. Two service providers handle data so that the app can work: Supabase (database hosting and sign-in email, United States), and the email service that delivers messages you send to our support and privacy addresses. The app contains no advertising or third-party analytics software, and crash reporting is switched off. Our public website loads fonts from Google Fonts, which receives a visitor’s IP address when the page loads; we send no app data with that request. We know of no third party that collects consumer health data about you over time and across different websites or online services through the app or our website.
Your consent
We collect the account and profile details above because they are necessary to create and secure your account and restore your settings, which is the service you asked for. We ask for your consent before collecting summaries on our servers: the web view is off until you turn it on in Profile → Privacy & data → Data & research, and each of the three more detailed kinds is off until you switch it on there. The request tells you what would be stored, why, that only you can see it, how far back the first summary reaches, and how to withdraw. Consent is voluntary. Nothing else in the app depends on turning the web view on.
Your rights and how to use them
You have the right to: • Confirm whether we are collecting, sharing, or selling consumer health data about you, and access it • Receive a list of every third party we have shared your consumer health data with. For IntoHarmony that list is empty: we do not share it • Withdraw consent to collection, and have us stop • Have your consumer health data deleted In the app: turn the web view off, or switch any of the three optional kinds off, in Profile → Privacy & data → Data & research. Turning the web view off is a single request that records your withdrawal and deletes the stored summaries; the app tells you if our server has not confirmed it, and keeps trying. Delete your account and every server record linked to it from Profile → Privacy & data; the app confirms the deletion with our servers before it reports it. You can correct your profile name and settings in the app at any time, and you can see the stored summaries themselves on the web dashboard. By email: write to privacy@intoharmony.com from the email address on your account and say what you are asking for. We may ask for more information to confirm the request is yours. This is also how to ask for a copy of the records we hold, or to ask us to correct something you cannot change in the app. We will confirm that a request is yours and respond within the periods required by the law that applies to you. Backups may retain deleted records until they are overwritten under our hosting provider’s backup lifecycle; contact us for the current period. Requests are free; if requests are manifestly unfounded, excessive, or repetitive we may charge a reasonable fee or decline, and will say why. If we decline to act on a request, you may appeal by replying to our decision or writing to privacy@intoharmony.com with “Appeal” in the subject line. We will answer in writing, with our reasons, within the period the law requires. If we deny the appeal, you may contact your state attorney general: in Washington at atg.wa.gov, in Nevada at ag.nv.gov.
Changes to this policy
The effective date above identifies the current version. We will not collect, use, or share additional categories of consumer health data, or use it for additional purposes, or share it with any recipient, without first describing the change here and obtaining your consent.
Contact
privacy@intoharmony.com, or the Contact Support form in the app.