Consumer Health Data Privacy Policy
This is a separate policy on purpose. Washington's My Health My Data Act, Nevada SB 370 and Connecticut's health-data provisions require a distinct consumer health data policy rather than a section inside a general one. It covers the same practices as our Privacy Policy, described in the terms those laws use. Where the two documents describe the same thing differently, this one governs for consumer health data.
The short version
Your health data is stored on your device, not on our servers. The only time any of it leaves your device is when you send a question to the AI assistant in Personalized mode, or upload a lab report to the scanner. We ask before the first time that happens, and you can turn it off permanently. We do not sell consumer health data, we have never sold it, and we do not collect it for advertising.
What consumer health data we collect
"Consumer health data" means information linkable to you that identifies your past, present or future physical or mental health status. In TherapyLog that is everything you choose to log:
- Medications, hormones, peptides and other compounds, with doses, timing and injection sites
- Protocols and PCT plans
- Bloodwork and lab marker values, including reference ranges and prior panels
- Symptoms, severity and free-text notes
- Weight, body composition and body measurements
- Progress photos
- Cycle-tracking entries — period, flow, ovulation, cervical mucus, basal body temperature and related symptoms — which are reproductive health data
- Data you bulk-import from Apple Health: blood pressure, heart rate, HRV, steps and sleep
- Your profile, including a birth date or age band and sex, where you enter them
Where it is stored: on your own device, in your browser's IndexedDB and local storage. We do not receive it, hold a copy of it, or back it up. We could not produce it in response to a legal demand, because we do not have it.
Where it comes from
You type it in, photograph it (the lab scanner), or import it from a file you export from Apple Health. We do not buy health data, obtain it from data brokers, or infer it from your browsing.
Why we collect it
To provide the features you asked for: showing your trends, charting lab markers over time, reminding you about doses, and — only if you choose Personalized mode — letting the AI assistant reference your own data when it answers you. That is the entire purpose. We do not use it to profile you, to target advertising, or for any purpose you would not expect from a tracking app.
Who we share it with
One processor, one feature, at your direction.
- Anthropic — when you send a message to the AI assistant in
Personalized mode, your question plus your current protocol, recent lab values, recent
injections, body composition and recent symptoms are transmitted through our API to Anthropic
to generate the reply. In General mode only your typed question is sent. When you use
the lab scanner, the image or PDF you selected is transmitted for value extraction. Anthropic
processes these to return a response and does not use them to train models when accessed
through our interface. Nothing is stored on our servers.
Cycle-tracking and reproductive health data is never included. It is held in a separate store the assistant does not read.
No other processor receives consumer health data. Stripe receives your email and payment details; Resend receives your email address; Vercel serves the site and collects cookie-free aggregate page counts; Upstash sees your IP address transiently for rate limiting. None of them receives anything you log.
Consent, and how to withdraw it
We collect consumer health data only because you enter it, and only for the purposes above. Before your health data is shared with Anthropic for the first time, the app asks you directly, names Anthropic as the recipient, and offers General mode instead. That is a separate consent from your general use of the app, and you can withdraw it at any time:
- Stop sharing: AI → Settings → What is sent with your question → General. From that moment nothing you log is transmitted.
- Delete everything: Settings → Backup → Reset erases all local data, including cycle entries, immediately and irreversibly.
- Withdraw in writing: email hello@therapylog.app and we will confirm.
Withdrawing consent does not undo processing that already happened, and it will not delete a reply already generated — but it stops all future sharing.
We do not sell consumer health data
We do not sell consumer health data, and we do not share it in exchange for anything of value. We therefore do not collect the signed authorization that a sale would require. If that ever changed we would have to obtain a valid, separate written authorization from you first, and we would tell you plainly rather than bury it in a policy update.
No geofencing
We do not use geofences around health care facilities, pharmacies, or anywhere else, and we do not collect your location at all.
Your rights
You may ask us to confirm whether we collect, share or sell your consumer health data; to tell you who we have shared it with; to delete it; and to withdraw consent. Email hello@therapylog.app. We will respond within 45 days and may extend once by 45 days where the request is complex, telling you why.
For most requests the honest answer is short: your health data is on your device, so we have nothing to hand over or delete, and you can delete it yourself in seconds. What we hold is your email address, your subscription record and your licence key, and we will delete those on request.
If we deny a request you may appeal by replying to our response. If we deny the appeal you may complain to the Washington State Attorney General at atg.wa.gov/file-complaint, or to your own state's Attorney General.
How long we keep it
Your health data is kept for as long as you keep it on your device, and no longer — deleting the app or resetting its storage deletes it. Data transmitted to the AI assistant is processed to generate the reply and is not retained by us. Your email address and subscription record are kept while your account is active and for as long afterwards as we need to honour refunds and keep tax records.
Security
Because your health data lives on your device, its security depends substantially on your device: use a passcode and keep it updated. On our side, everything is served over TLS, the AI endpoint requires a valid licence and refuses unauthenticated requests, and we hold no health data to lose. If unsecured identifiable health information we hold were ever acquired or disclosed without authorization, we would notify you, the FTC and — where required — the media, as the FTC Health Breach Notification Rule requires.
Children
TherapyLog is for adults. You must be 18 or older, and the app asks you to confirm it before you can use it. We do not knowingly collect health data from anyone under 18.
Changes
If we change how consumer health data is collected, used or shared, we will post the change here with a new date and obtain fresh consent where the law requires it before applying it to data already collected.
Contact
TherapyLog LLC · Floresville, Texas · hello@therapylog.app