Consumer Health Data Privacy Policy

Effective October 26, 2026

This is PreggyAI's Consumer Health Data Privacy Policy. It is published as a separate document, and is deliberately not combined with our general Privacy Policy, as required by Washington's My Health My Data Act (RCW 19.373). It also serves the equivalent requirements of Nevada SB 370 and the consumer health provisions of the Connecticut Data Privacy Act.

It describes how PreggyAI ("we", "us", "our") handles consumer health data — information that identifies your past, present, or future physical or mental health status. For a pregnancy app that is most of what we hold, so this document covers the heart of the product. Where this policy and the general Privacy Policy address the same topic, this one governs for consumer health data.

Your choice before profile creation. The app presents a separate, unchecked health-data consent beside the general Terms agreement before it creates a pregnancy profile. It identifies the categories and purposes below, processing by AWS in the United States, notification delivery through Expo, Apple, or Google when enabled, optional sharing with a partner you link, and how to withdraw. We record the notice version and a server-generated acceptance time with your profile until account deletion. This choice does not connect Apple Health, Health Connect, or a partner: those optional features retain their own just-in-time permission or sharing step.

1. Categories of consumer health data we collect

Most of it comes directly from you or from a health platform you choose to connect. Some can be supplied through a partner you deliberately link or generated by the app from those inputs, as described below:

• Pregnancy status and reproductive health — that you are pregnant, your due date, your current pregnancy week, whether your baby has arrived, and the birth date if you tell us
• Symptoms — what you log, its severity, and when
• Bodily functions and vital signs — weight entries, fetal movement (kick) counts and sessions, and contraction timings
• Moods — the mood you record, which is mental-health information
• Health-related appointments — the type, date, provider, and any notes you add
• Health-related notes and photos — notebook entries and bump photos you choose to save
• Health topics you discuss in chat — the content of your conversations with the AI, which routinely concerns symptoms, medications, and how you are feeling
• AI-response reports you choose to send — the reported AI response and reason, any note you add, and the nearest preceding user message only if you separately check the off-by-default box to include it. Either message can contain health information
• Imported activity data — if, and only if, you connect Apple Health or Android Health Connect: daily step counts and workout summaries (a rolling 14 days)
• Derived pregnancy and wellbeing context — for example, the pregnancy week calculated from your due date (or, once your baby has arrived, your baby's age calculated from the birth date) and AI-generated conversation summaries or memories that can refer to health, mood, your baby, or other people you mention. These are personalization aids, not clinical findings, and an AI-generated inference can be wrong

We do not collect precise geolocation. We do not infer health data from advertising profiles, broker data, or unrelated apps; any derived context comes from the information you provide, an authorized health-platform import, or an authorized linked partner, and may be inaccurate.

2. Sources of consumer health data

The sources are:

• Directly from you, when you type or record something in the app
• From your device's health platform (Apple Health or Android Health Connect), only after you explicitly connect it, and only for the activity categories listed above
• From a partner you authorize and link, when they add to shared features or send a message through the linked experience
• Generated from those inputs, such as a calculated pregnancy week or an AI-created summary, memory, or contextual inference used to personalize the service

We do not buy or license consumer health data from data brokers or advertising networks, and we do not receive it from unrelated apps or third parties you did not authorize.

3. Purposes for collecting and using it

We use consumer health data only to provide the features you are using it for:

• To generate the AI companion's replies and its personalised, week-appropriate content
• To display your own logs back to you — trends, histories, charts, and reminders
• To detect urgent health signals in what you write, so the app can show you fixed, non-AI safety information (see our AI Safety Protocol)
• To investigate a particular AI response when you choose to report it and improve the safety and quality of the service
• To share with a partner you have deliberately linked, and to notify them about the specific events listed in section 7 of the Privacy Policy
• To keep the service working and secure — operational logs, abuse prevention, and per-account usage counters

We do not use consumer health data for advertising, profiling for marketing, or any automated decision producing legal or similarly significant effects.

4. How we share it, and with whom

We do not sell consumer health data. We have never sold it, and we have no advertising, analytics, or data-broker relationships of any kind. Under MHMD, "sale" includes exchange for anything of value — this is a flat no, not a narrow one.

Consumer health data is disclosed only in these situations:

• To a partner you link. Entirely your choice, requires an invite code you generate, and stops when you unlink. What they see and are notified about is itemised in section 7 of the Privacy Policy.

  If you feel unsafe with a partner you have linked, unlink at any time from Profile › Partner. Unlinking does not notify your partner; they will no longer see your information, and they will see that the link has ended the next time they open the app. Help is available from the National Domestic Violence Hotline in the United States (1-800-799-7233, or text START to 88788) and, in Canada, through ShelterSafe.ca, which lists shelters and crisis lines.

• From a linked partner to you. The app’s baby character is shared between the two of you: if one of you tells it something it judges worth raising with the other — how they have been, or news to share in — it may bring that up with that parent the next time they open the app, naming who mentioned it and how long ago. What crosses between your accounts is a short line the app writes itself, plus who raised it and when — never the message itself. What is worth raising, and which of you it reaches, are decided by an automated system and can be wrong, including raising something the other parent would rather have told you themselves; no other user of the app receives it, though we and our processors handle it in order to produce the message. You both agree to this on the sharing sheet when you link, it requires an active PRO or partner-trial plan, and unlinking stops it and deletes anything still waiting. Asking the app to keep something to itself may not work as intended: it shares conversation summaries between the two of you, and a later instruction not to mention something may not carry across. It is capped at three at a time, expires after seven days, and never replaces advice the app gives at the time. Also itemised in section 7 of the Privacy Policy.
• To our processors, who act only on our instructions and may not use it for their own purposes. They are named individually below.
• Where the law compels it, subject to the safeguards in section 6.
• In a business transfer, if PreggyAI is ever acquired or merged — in which case we would notify you first and any acquirer would be bound by this policy.

Named recipients

• Amazon Web Services, Inc. — cloud hosting, storage, and AI processing via Amazon Bedrock, in the United States. Processes chat content and all stored health data on our instructions. AWS does not use your content to train its models.
• Expo (650 Industries, Inc.) — push-notification delivery. Receives notification text, which for partner notifications can name a symptom or mood.
• Apple Inc. / Google LLC — sign-in and app distribution, and the push-notification networks (APNs and FCM) that deliver our notifications to your device. The text of a notification passes through them and may refer to something you logged. Their delivery systems may temporarily retain a queued notification under their own delivery rules. You can switch off any notification category in Settings.
• RevenueCat, Inc. — subscription management. Receives your account identifier and purchase records, plus basic technical details its software collects (a device identifier, language, country, and app and operating-system version). We do not send it chat messages, tracker entries, due date, baby name, or other profile details. Its records identify use of this pregnancy app, and a Pregnancy Pass purchase can support a pregnancy inference, so we do not characterize the vendor as categorically health-data-free.

5. Your rights over consumer health data

Under MHMD, Nevada SB 370, and comparable laws you have the right to:

• Know and access what consumer health data we hold about you, including a list of everyone we have shared it with
• Withdraw consent to its collection and sharing
• Correct it where it is inaccurate
• Delete it — and to have us pass that deletion request on to our processors
• Appeal a refusal, and to complain to your state's Attorney General

How to exercise them

Most of it is immediate and in your own hands:

• Access — nearly everything we hold is visible and editable in the app.
• Correct — you can edit most of what you entered directly in the app. For anything you cannot, email privacy@preggyai.online and we will correct it within 30 days.
• Delete — Profile → Settings → Delete account, or via our web deletion page. This revokes access immediately and queues permanent removal of your health data from our active systems. Where a processor holds an identifiable copy of that health data for us, we pass on the deletion request. To delete your conversations, and the memories and summaries built from them, without deleting your account, use Profile → Settings → Privacy & Security → Clear chat history. App-account deletion does not automatically erase Apple, Google, or RevenueCat purchase records. Email our Privacy Officer for a specific RevenueCat request; we handle it manually after verifying you and explaining that vendor deletion may affect purchase restoration. Apple and Google provide their own account and purchase privacy controls. Feedback, bug, and AI-response reports sit in support records rather than the app database and are not removed automatically with the account; email our Privacy Officer to request their deletion.
• Withdraw consent — disconnect your health app in Settings (this deletes our copy of imported activity data), unlink your partner, delete your account, or contact our Privacy Officer to withdraw the broader consent recorded at setup. Withdrawing consent required to provide the core pregnancy experience means we must stop that processing, so the affected features may no longer be available.

If you are located in Canada, you have a right to complain under the prevailing laws with respect to the handling of your personal data. We are committed to working with you to obtain a fair resolution of any complaint or concern about your privacy. If you have any questions or concerns regarding our privacy practices, please contact our Privacy Officer first, details of whom are given below.

Jonatious Joseph Jawahar, Privacy Officer, Injoy AI Solutions Inc. — privacy@preggyai.online

If you feel that we have not satisfactorily addressed your privacy concerns, you have the right to escalate the matter by lodging a formal complaint with the relevant privacy regulatory authorities:

• Office of the Privacy Commissioner of Canada (OPCC): For concerns falling under federal privacy legislation. You can submit a complaint online via the Office of the Privacy Commissioner of Canada Report a Concern Page or by mail to 30 Victoria Street, Gatineau, Quebec, K1A 1H3.
• Office of the Information and Privacy Commissioner for British Columbia (BC OIPC): For concerns falling under BC's Personal Information Protection Act (PIPA). You can submit a complaint online via the BC OIPC Website or by mail to PO Box 9038 Stn Prov Govt, Victoria, BC, V8W 9A4.

• Anything else, or an appeal — email support@preggyai.online. We respond within 30 days, subject to any extension the applicable law permits and that we explain to you. If we refuse a request we will tell you why and how to appeal; if we deny an appeal we will give you a way to complain to your Attorney General.

We do not charge you or discriminate against you for exercising these rights. If you withdraw consent for information a particular optional feature needs, that feature may stop working; that functional consequence is not retaliation.

6. Legal requests

We treat pregnancy data as sensitive, and we do not hand it over casually.

• We disclose consumer health data to government or law-enforcement agencies only where valid, binding legal process compels it — a subpoena, court order, or warrant properly served on us. An informal request is not enough, and we say no to those.
• We review every request, and we challenge or narrow those that are overbroad, defective, or reach further than the law allows.
• We notify you before disclosing anything, so you have the opportunity to object — unless a court order or statute prohibits us from telling you, in which case we notify you as soon as that restriction lifts.
• We disclose the minimum the process actually requires, never a whole account when a single record is asked for.

Legal process should be served on our privacy contact at support@preggyai.online, which is the address monitored for this purpose.

7. Storage, retention, and security

Consumer health data is stored and processed in the United States (AWS, US East) — both the servers that hold it and the AI that generates replies. Chat message content, notebook entries, the text you enter when you log a symptom, an appointment or a weight (including the clinician and place for an appointment), imported health-app activity data, the AI-generated summaries the app keeps, and the notifications we send you are additionally encrypted by us at the field level, so they are not readable from the database alone. Retention limits are itemised in section 6 of the Privacy Policy; deleting your account removes this data from active systems rather than waiting for those limits. Support reports you choose to send, including any health-related message context you deliberately include, are kept while we work on them and deleted when no longer needed; email us to request earlier deletion. Bounded disaster-recovery copies can remain for up to 35 days for database records; deleted or replaced cloud-photo versions are configured to expire after 30 days. Operational logs are another exception: as described in that same section, they record system events rather than the health data you enter, are not deleted account by account, and expire on their own schedule.

If you are located in Canada, your information may be accessible to courts, law enforcement and national security authorities in the United States under US law.

If we learn of a breach of security affecting your consumer health data, we will notify you and the relevant authorities without unreasonable delay, and within the time required by the law that applies to you. In some places that is thirty (30) days or less from discovery.

8. Changes

If we materially change how we handle consumer health data, we will update the effective date above and obtain your consent again where the law requires it. The current version is always at https://preggyai.online/consumer-health-privacy.html.

9. Contact

Questions, requests, appeals, or complaints about consumer health data: privacy@preggyai.online. PreggyAI is operated by Injoy AI Solutions Inc., registered in British Columbia, Canada.

Injoy AI Solutions Inc. has designated a Privacy Officer, accountable for personal information and reachable at the address above. Section 14 of the Privacy Policy carries the same designation.

PreggyAI is offered only in Canada and the United States, and is not offered to residents of Quebec at this time. If you are in Quebec and use PreggyAI regardless, this policy applies to you in full — see section 8 of the Privacy Policy.

PreggyAI is for adults. You must be at least 18 years old (or the age of majority where you live, if higher) to use it.