Consumer Health Data Privacy Policy

Effective 10 October 2026 · Last updated 10 October 2026

This policy is for people in the United States. It is written for Washington's My Health My Data Act and Nevada's consumer health data law (SB 370), and we apply it to everyone in the US. Our Privacy notice covers everything else.

"AIyurveda", "we" and "us" mean Ori Iscovici, the developer of the AIyurveda app. "Consumer health data" means personal information that identifies, or is reasonably linkable to, you and that is about your past, present or future physical or mental health.

1. The consumer health data we collect, and why

Category	Why we collect it
Assessment answers and your constitution reading (how you sleep, eat, digest, feel and live, partly in your own words)	To describe your constitution and shape the guide and your plans to you
Evening check-ins (energy, digestion, sleep, mood)	To shape the next day's plan
Conversations with the guide, about anything you choose to share	To answer you
What the guide remembers (notes from your conversations and check-ins) and its summary of your profile	So you do not have to repeat yourself
Daily plans and the items you mark done	To show and shape your daily rhythm
Safety notes the app records or works out from what you say: pregnancy, breastfeeding or trying to conceive; medications, health conditions and allergies; eating-disorder risk ("food-guidance care mode"); signs of crisis	To keep suggestions safe for you: no herbs when they could be unsafe, no food advice when it could harm, and crisis lines when you might be in danger
The country your connection comes from, worked out from your IP address	To show the right crisis lines. It is not stored.

We do not collect precise location, biometric or genetic data, or information about reproductive or sexual health services you seek, other than what you choose to tell the guide.

2. Where it comes from

From you: what you type and choose in the app.
From the app's own processing: the constitution reading, the guide's memory notes and summary, and the safety notes, which our software and the AI model derive from what you tell it.
From your connection: the country, derived from your IP address by our host.

We do not buy data about you or receive it from anyone else.

We do not sell consumer health data, and we do not share it with anyone for their own purposes. To run the app, these service providers (Washington's law calls them processors) handle it on our behalf, under contracts that bind them to our instructions:

Category of processor	Company	Consumer health data it handles
AI model provider	Anthropic, PBC	Your messages and the profile summary needed to write each reply, to check messages for safety, and to update the guide's memory
AI request routing	Vercel Inc. (AI Gateway)	The same requests, passed through to Anthropic
Database and sign-in	Supabase Inc.	All consumer health data we store
Server hosting	Vercel Inc.	All of it, in transit through our servers
Email	Cloudflare, Inc. (forwarding) and Google LLC (our mailbox)	Only what you choose to write in an email to us

We have no affiliates. We let no third party collect consumer health data about your activity in our app over time or across other businesses, and we use no advertising or analytics trackers.

We may disclose consumer health data if the law requires it (for example a valid court order), and we will tell you unless the law forbids it.

We collect consumer health data only after you give your consent on the "Before we begin" screen, and we share it with the processors above only after a separate consent. You can withdraw either at any time; the guide stops collecting and sharing at once.

One exception: if you write a message that suggests you might be in danger before you have given consent, the app answers with crisis lines. It does not store that message or send it anywhere.

5. Your rights, and how to use them

You have the right to:

confirm whether we collect, share or sell your consumer health data, and access it, including a list of every third party and affiliate we have shared it with and how to contact them;
withdraw your consent to collecting or sharing it;
have it deleted, including by our processors (see Delete your account).

To use any of these rights, write to privacy@aiyurveda.app from the email address on your account. To check it is you, we reply with a one-time code to that address. We answer within 45 days. If we need more time, we tell you why within those 45 days, and we take no more than 45 days more. Using your rights is free, and we will not treat you differently for it.

The closed-test version of the app is gaining these controls in Settings: delete your account, withdraw consent, see what the guide remembers and forget it, and clear safety notes. If your version does not have one yet, email us and we will do it for you.

If we say no

If we refuse a request, you can appeal: reply to our answer with the word "Appeal" within 60 days. We decide within 45 days and tell you why, in writing. If we refuse your appeal, you can complain to the Washington State Attorney General or the Nevada Attorney General.

6. Changes to this policy

If we change this policy, we update this page and its date. If we want to collect, use or share consumer health data in a new way, we ask for your consent first, in the app.

7. Contact

Ori Iscovici, developer of AIyurveda: privacy@aiyurveda.app