Consumer Health Data Privacy Policy
For Washington and Nevada residents, and everyone else who wants the health data details on one page.
About this page
Washington's My Health My Data Act and Nevada's consumer health data law ask us to publish this separate policy. It covers the health information Chronos collects and how it is used and shared. It sits beside our general Privacy Policy. If the two ever differ, the one that protects you more applies. The regulated entity is Chronoshealth.ai, Inc., a New Jersey corporation.
1. The consumer health data we collect, and why
- Symptoms and check-ins: to show your trends, remind you, and let the Coach respond to what you report.
- Weight, and Apple Health values (steps, sleep, workouts, resting and average heart rate): to show progress and give the Coach context.
- Medication name, dose and dose timing: to remind you and give the Coach context.
- Meals, nutrient totals, water and activity: to show progress against your goals.
- Lab values you confirm: to keep your own records and give the Coach context.
- Photos: read by AI to fill in your log. A secured copy of each AI request, with its photos, is kept 30 days.
- Your conversations and what the Coach infers from them (trends, topics, short notes if you agreed): to answer you and remember your context.
- What you tell us on our website waitlist, such as the condition you are managing: to contact you about access.
- Research copy (only if you opt in): for research, with your separate consent.
"Collect" includes keeping and inferring. Things the Coach infers from what you tell it are consumer health data too, and this policy covers them.
Consent to collect. We collect this data to give you the service you asked for and for the purposes above. After you sign in, a first screen asks for your permission to use AI with your information, as its own tick box, separate from your agreement to the Terms. Nothing you enter is sent to the AI before you give it.
2. Where it comes from
You (entries, messages, uploads, waitlist form), your iPhone (Apple Health values, if you allow), and the Coach (inferences from your conversations). We do not buy health data from anyone.
3. Who we share it with
- Amazon Web Services and Anthropic (through Amazon Bedrock): hosting, encryption, and generating the Coach's replies. They act for us under contract.
- Apple, our web host (Netlify) and Google Workspace: notifications, serving the app and food lookups, and reading your feedback and support email. They get limited data, listed in the Privacy Policy.
- Research recipients, only if you opt in: researchers, health plans and drug companies. Sharing for research needs your separate consent, which you give or withdraw with the research switch in Settings.
- Affiliates: none.
We do not sell consumer health data. Chronos may be paid for research projects and for access to results built from groups of 50 or more people, and never sells individual records. We do not share it for advertising. We do not use geofencing. Third parties do not collect your data from our app over time or across other sites.
4. Your rights
- Confirm whether we collect, share or sell your consumer health data, and get a list of the third parties we have shared it with.
- Get a copy of it. Settings, then Export, covers most of what is on your phone. For server data, write to us.
- Correct inaccurate data. Fix entries in the app, or write to us.
- Withdraw consent to collection or sharing. Research: turn the switch off in Settings. Everything else: delete your account.
- Have it deleted. Delete your account in Settings, and see Section 8 of the Privacy Policy for what that removes right away and what clears later, including backups. Write to us for anything it does not cover.
- Appeal if we refuse.
How: use Settings in the app, or write to support@chronoshealth.ai. We answer within 45 days. We can extend once by 45 days and will tell you why. To appeal a refusal, reply within 45 days. We answer in writing within 45 days and explain how to complain to the Washington or Nevada Attorney General. Nevada residents: we honor deletion requests within 30 days of confirming who you are.
5. Research
Only if you opt in. We share a copy of selected entries with your identity replaced by a random code and your dates shifted by whole weeks. We call this "identity removed", not "de-identified". Results shown outside Chronos cover groups of 50 or more. You can withdraw at any time. New data stops and your research records are deleted right away. The Privacy Policy, Section 7, has the full detail.
6. Security
Your entries are encrypted on your phone and on our servers. Access is limited to the people and services that need it.
7. Changes and contact
The date at the top shows the current version. Material changes need your fresh agreement before they apply to you. Questions or complaints: support@chronoshealth.ai.