خصوصية البيانات الصحية للمستهلك

1. Overview

This Consumer Health Data Privacy Policy is provided in compliance with the Washington My Health My Data Act (MHMD Act) and similar state consumer health data privacy laws. It supplements our general Privacy Policy.

2. What Is Consumer Health Data?

Under the MHMD Act, "consumer health data" means personal information that is linked or reasonably linkable to a consumer and that identifies the consumer's past, present, or future physical or mental health status.

3. Health Data and Dashrah

Dashrah is a conversation assistant. We do not intentionally collect, process, or store consumer health data. Our App is designed to read conversations and generate reply suggestions — not to collect health-related information.

However, we acknowledge that:

• Conversations processed by our AI may incidentally contain health-related information mentioned by users or their contacts (e.g., "I'm going to the gym" or "I have a headache")
• Such information is processed locally on your device or transiently through our cloud AI service solely for the purpose of generating contextual conversation suggestions

4. Collection and Use

To the extent any consumer health data is incidentally processed:

• Purpose: Solely to generate relevant conversation suggestions
• Storage: Processed locally on your device; not stored on our servers
• Retention: Subject to your configured auto-delete settings (7, 30, or 90 days)
• Sharing: Not shared with any third party for any purpose

5. No Sale or Sharing of Health Data

We do not sell consumer health data. We do not share consumer health data for advertising, marketing, or any commercial purpose. We do not use consumer health data for any purpose other than generating conversation suggestions within the App.

6. Your Rights Under the MHMD Act

Washington state residents have the right to:

• Confirm whether we are collecting or sharing consumer health data
• Access any consumer health data we may have collected
• Delete any consumer health data, including all locally stored conversation data
• Withdraw consent for the collection and sharing of consumer health data at any time

To exercise these rights, you can clear all data from within the App's Settings screen, or contact us at info@dashrah.me.

7. Data Protection

Any incidentally processed health data benefits from the same security measures described in our Privacy Policy, including:

• Local encryption via SQLCipher
• HTTPS/TLS for any network transmissions
• Optional biometric app lock
• Configurable auto-delete periods

8. Contact

For questions about this Consumer Health Data Privacy Policy or to exercise your rights:

Email: info@dashrah.me