Legal

Consumer Health Data Privacy Policy

Effective Date: June 1, 2026

This Consumer Health Data Privacy Policy is designed to comply with strict state health privacy frameworks, including the Washington My Health My Data Act (MHMDA) and Nevada's Consumer Health Data Privacy Law (SB 370). This document supplements our General Privacy Policy and specifically governs the highly sensitive health information you log within AmalSync.

2. Categories of Consumer Health Data We Collect

To provide our symptom tracking services, we collect data that identifies your past, present, or future physical or mental health status. This may include:

  • Individual health conditions, diseases, or diagnoses you choose to log.
  • Symptoms, bodily functions, pain levels, or vital signs.
  • Data regarding menstrual cycles or reproductive health, if logged within the application.
  • Medication usage or frequency.

3. Sources of Consumer Health Data

We collect this data directly from you when you manually input symptoms, conditions, or notes into the AmalSync application.

4. Why We Collect and Use This Data

We process your consumer health data strictly to provide the core product you requested: a digital symptom tracker. We use this data to allow you to log daily health metrics, visualize long-term health trends, and, only with your explicit opt-in consent, generate AI-driven summaries of your logs.

5. Sharing Consumer Health Data and Third Parties

AmalSync does not sell your consumer health data. We only share your data with specific categories of third parties under strict contractual obligations:

Service Providers (Cloud Infrastructure & AI)

To host your data securely, we use Supabase. To generate doctor-ready health summaries, we utilize Google Cloud and the Gemini AI API. Your data is only transmitted to our AI provider if you explicitly toggle the consent switch during onboarding or in your settings. Our agreements legally prohibit these providers from storing your symptom logs or using them to train their AI models.

Legal Obligations

We may disclose data if legally compelled to do so by a valid court order or legal process.

Affiliates

AmalSync currently has no corporate affiliates with whom we share consumer health data.

6. Geofencing Restriction

AmalSync does not implement geofencing technology to identify, track, or collect data from consumers seeking in-person healthcare services, nor do we use such technology to send targeted health-related notifications.

7. Your Rights Regarding Consumer Health Data

Under applicable health privacy laws, you possess the following rights regarding your consumer health data:

  • Right to Access: You may request confirmation of whether we are collecting, sharing, or processing your health data, and request a copy of it.
  • Right to Delete: You have the right to request the immediate and permanent deletion of your consumer health data.
  • Right to Withdraw Consent: You may withdraw your consent for the collection or sharing of your health data at any time directly within the app settings.
  • Right to Appeal: If we deny your request to exercise these rights, you have the right to appeal our decision by replying to our denial email.

8. How to Exercise Your Rights

To exercise any of the rights listed above, please contact our privacy team: arsalan.mumtaz1932@gmail.com

We will authenticate your request and respond within the timeframe mandated by applicable law (typically 45 days).