Consumer Health Data Privacy Policy
Version 1.0 · Effective 20 August 2026
This is a separate, standalone policy about "consumer health data" as that term is defined by the Washington My Health My Data Act, the Nevada consumer health data law, and comparable statutes. It exists alongside our main Privacy Policy (section 13), which continues to govern all of your other personal information; nothing here narrows the protections described there.
1. What we mean by consumer health data
Conversations with an AI Companion about the death of the Subject can reveal information about your mental or behavioural health — for example, references to grief, distress, sleep, therapy, or medication. Where a conversation reveals this kind of information, we treat it as consumer health data.
2. How we currently handle consent for this data
We do not currently operate a separate, standalone opt-in consent step specific to consumer health data. It is collected and processed under the same account-level consent you give when you accept our Terms of Service and Privacy Policy, and is protected the same way as your other conversation and biometric data — see Privacy Policy sections 1, 2, 10, and 13. We are disclosing this directly, rather than describing a distinct consent flow that does not yet exist.
4. We do not sell consumer health data
We do not sell consumer health data, ever, under any circumstance, including in a business transfer. This is a stricter commitment than the general business-transfer language in Privacy Policy section 4, which does not apply to this category.
5. No geofencing around health-related locations
We do not collect precise geolocation data at all (Privacy Policy section 1), so we do not use it to identify your presence at, or proximity to, a mental health facility, crisis centre, or similar location, and we do not build advertising or marketing audiences based on consumer health data.
6. Your rights
Depending on where you live, you have the right to confirm whether we process your consumer health data, to access it, and to have it deleted. Washington and Nevada residents may also authorise another person to exercise these rights on their behalf.
7. How to exercise your rights
Use Privacy & Security under Settings in the app, or contact us at privacy@luqas.ai. A deletion request for consumer health data can be made the same way as any other data-deletion request; it does not require deleting your whole account unless the underlying conversation itself is what you want removed.
8. Retention
We keep consumer health data only for as long as your account is open, consistent with the retention approach described in Privacy Policy section 14.
9. Changes to this Policy
We will give at least 30 days' advance notice before a material change, consistent with Privacy Policy section 20. If we build a separate, dedicated consent flow for this category in the future, this Policy will be updated to describe it before it goes live.
Related policies