Consumer health data privacy

Some US state laws, such as Washington's My Health My Data Act and Nevada's consumer health data law, protect “consumer health data”: information that identifies you and is about your physical or mental health, including things that can be inferred about it. This policy explains how Everseed Ventures, which makes PAU, treats that kind of data. It adds to our privacy policy.

PAU isn't a health service, but we treat anything you share about how you feel as if these laws apply, wherever you live.

• the feelings you pick when you check in (for example “Anxious” or “Proud of myself”),
• the words you write about your day or your mood,
• the meditations written for you from them, including their text, audio and tone,
• your reflections after a meditation: how you feel now, and any note,
• when each of these happened.

From you, when you use PAU, and from the AI models that write your meditations from what you share. We don't buy it or get it from anyone else.

Only to provide what you ask PAU for:

• to write, voice and play a meditation for how you feel,
• to show you your moments and reflections over time,
• to keep PAU secure and working, and to follow the law.

We don't use it for advertising, we don't use it to make decisions about you, and we'll ask for your consent before using it for any other purpose.

Only service providers that help us run PAU: our database and storage provider (Supabase), our hosting provider (Vercel) and, when you write to us, our email provider (Google Workspace), under contracts that limit them to processing it for us; and the AI services that write and voice your meditations (OpenRouter, OpenAI and Google), which handle each request under their own terms, as our privacy policy explains. We may also disclose it if the law requires it. Inside our team, only authorised team members can see it, through an internal admin tool, to run and support PAU.

We never sell consumer health data, never share it with data brokers, and never share the feelings, words, meditations or reflections listed above with advertising partners. If we add advertising measurement, even the fact that you created an account or subscribed is only shared with Meta after you say yes to it, which is your consent to that sharing. Otherwise, we never share it without your consent. We don't use geofencing around health care locations, and no third party collects consumer health data about you over time or across websites through PAU.

You can:

• confirm whether we collect, use or share your consumer health data, and get a copy of it,
• get a list of the service providers we've shared it with, and how to reach them,
• have it deleted, including from our service providers,
• withdraw any consent you've given us.

Email team@everseedventures.com from the address on your account. We'll confirm it's you, then answer within 30 days. If we need more time, where the law allows it, we'll tell you why within those 30 days. We don't charge for this, and we won't treat you differently for asking.

If we refuse your request, we'll tell you why. You can appeal by replying to our answer within 45 days with the word “Appeal”. We'll decide within 45 days and explain our decision. If you're still not satisfied, you can contact your state attorney general (in Washington, at atg.wa.gov).

When we change this policy, we'll update the date at the top. If a change is material, we'll tell you in the app or by email before it applies, and we'll ask for your consent before using your consumer health data in a new way.

Everseed Ventures, Privacy Officer, Calgary, Alberta, Canada. Email: team@everseedventures.com.