Consumer Health Data Privacy Policy

Effective October 12, 2026

On this page
  1. Consumer health data we collect
  2. Where it comes from
  3. Why we collect and use it
  4. What we share, and with whom
  5. Your rights
  6. How to make a request
  7. Tracking
  8. Changes to this policy
  9. Contact us

This policy describes how Evyrix collects, uses and shares consumer health data, and how you can exercise your rights. It applies to consumer health data of Washington and Nevada residents, of anyone whose data is collected in Washington, and of residents of other states with similar laws.

1Consumer health data we collect

  • Health records from the healthcare providers you connect, including conditions, medications, allergies, lab and test results, vital signs, immunizations, procedures, visits, clinical notes, and the names of your clinicians and care locations.
  • Health information you give us, such as your conversations with the assistant, notes, and symptoms, measurements or other values that you record or that the assistant records from your conversations.
  • Information derived from it, such as summaries, follow-ups, and which healthcare providers you’ve connected.

2Where it comes from

  • You.
  • The healthcare providers you connect, through our connectivity partner.

3Why we collect and use it

To provide the service you request: retrieving and organizing your records, building your health history, answering your questions, and telling you when something new arrives. We collect and use consumer health data only with your consent or as necessary to provide the service you’ve asked for.

4What we share, and with whom

Categories of data we share
Health records you connect and health information you give us, as needed to provide the service.
Categories of third parties
  • Our connectivity partner, which retrieves records from your providers.
  • Cloud hosting providers, which run our servers.
  • AI model providers, which generate the assistant’s responses.
  • Notification services, such as Apple’s push notification service and our email provider, when a notification you’ve asked for includes health information.
Affiliates
We have no affiliates.

We share consumer health data with anyone else only with your separate consent, as required by law, or with a successor in a merger or acquisition that agrees to honor this policy. We never sell consumer health data.

5Your rights

You have the right to:

  • confirm whether we collect, share or sell your consumer health data;
  • review it and ask us to correct it;
  • access it, including a list of all third parties and affiliates we’ve shared it with, and how to contact them;
  • withdraw your consent to our collection and sharing of it; and
  • have it deleted.

Records from a healthcare provider reflect what that provider holds, so corrections to them are made by the provider. We’ll help you find who to contact.

6How to make a request

Use the settings in the app, or email [email protected]. You can also use an authorized agent.

We’ll verify your identity before acting on your request and respond within 45 days. If we need more time, we may extend this once by 45 days and will tell you why. When we delete your data, we also tell our service providers to delete it.

If we decline your request, you can appeal by replying to our decision. We’ll respond to your appeal within 45 days and explain our decision. If we deny your appeal, you can contact your state attorney general, for example in Washington at atg.wa.gov.

7Tracking

We don’t allow third parties to collect consumer health data about your activity over time or across other websites or apps through the Service.

8Changes to this policy

If we make a material change to this policy, we’ll tell you in the app or by email before it takes effect, and we’ll ask for your consent where the law requires it. The effective date at the top shows when this policy last changed.

9Contact us

[email protected]