Consumer Health Data Privacy Notice

Last updated: July 14, 2026 · Questions? info@immunally.com

Scope This Notice applies to residents of Washington, Nevada, and Connecticut, and supplements our Privacy Policy. It describes how Immunally LLC handles consumer health data as defined under the Washington My Health My Data Act, Nevada SB370, and the Connecticut Data Privacy Act. Where this Notice and the Privacy Policy conflict as to consumer health data, this Notice controls.

What is consumer health data

Consumer health data is personal information that is linked or reasonably linkable to you and that identifies, or that we use to infer, your past, present, or future physical or mental health status. For Immunally, this is the health information you log and the insights we derive from it.

Categories of consumer health data we collect

Health you log: symptoms, medications, lab and test results, diet, sleep, exercise, mood, notes, experiments, and your health profile (e.g. conditions, allergies).
Device health metrics (only if you connect Apple Health): steps, heart rate, sleep, and other vitals you allow.
Derived/inferred health data: AI-generated summaries, patterns, and correlations produced from the data above.
Any other health information you choose to enter in the app.

Sources

We collect consumer health data directly from you (what you enter in the app) and, only with your permission, from Apple Health on your device. We do not buy consumer health data or obtain it from data brokers.

Why we collect it

Solely to provide the app you asked for: to store your entries, show them back to you, generate your summaries/patterns/insights, deliver notifications you enable, and operate and secure the service. We do not use consumer health data for advertising, marketing, or profiling for any purpose beyond the app's features.

Categories we share, and with whom

We share consumer health data only with service providers/processors who help us run the app, and only as needed to provide it — never for their own purposes:

Supabase, Inc. — database and storage hosting (on AWS, US), under a Data Processing Agreement.
Anthropic, PBC — AI analysis, only for entries you choose to analyze, under a Business Associate Agreement and HIPAA-ready API terms. Anthropic does not use your data to train models.

We do not have corporate affiliates, and we do not share consumer health data with any other third parties. We do not sell consumer health data, and we do not seek authorization to sell it.

Your rights

If you are a resident of Washington, Nevada, or Connecticut, you may:

Access your consumer health data, and request a list of the third parties and affiliates with whom we have shared it, including a way to contact each of them.
Delete your consumer health data. (In the app, Settings → Account → Delete Account erases all of it.)
Withdraw your consent to our collection and sharing of your consumer health data at any time. Deleting your account withdraws consent and removes your data.
Appeal a decision we make about a request, by replying to our response or emailing us.
Not be discriminated against for exercising any of these rights.

To exercise any right, email info@immunally.com. We will respond within 45 days (with one 45-day extension where reasonably necessary, and we will tell you if we need it).

Consent

We collect and share your consumer health data only with your consent, which you provide separately from accepting our Terms & Conditions. We ask for that consent before collecting your health data, and we ask separately before sharing the entries you choose to analyze with our AI provider. You can withdraw consent at any time as described above.

Geofencing

We do not use geofencing to identify or track your presence near any healthcare facility, and we do not use location to send you health-related messages.

Contact

Immunally LLC, 522 W Riverside Ave, Ste N, Spokane, WA 99201. For any consumer-health-data question or request: info@immunally.com.