Consumer Health Data Privacy Policy

Effective September 4, 2026

This is PreggyAI's Consumer Health Data Privacy Policy. It is published as a separate document, and is deliberately not combined with our general Privacy Policy, as required by Washington's My Health My Data Act (RCW 19.373). It also serves the equivalent requirements of Nevada SB 370 and the consumer health provisions of the Connecticut Data Privacy Act.

It describes how PreggyAI ("we", "us", "our") handles consumer health data — information that identifies your past, present, or future physical or mental health status. For a pregnancy app that is most of what we hold, so this document covers the heart of the product. Where this policy and the general Privacy Policy address the same topic, this one governs for consumer health data.

1. Categories of consumer health data we collect

All of it comes from you, either typed into the app or imported at your request:

• Pregnancy status and reproductive health — that you are pregnant, your due date, your current pregnancy week, and whether your baby has arrived
• Symptoms — what you log, its severity, and when
• Bodily functions and vital signs — weight entries, fetal movement (kick) counts and sessions, and contraction timings
• Moods — the mood you record, which is mental-health information
• Health-related appointments — the type, date, provider, and any notes you add
• Health-related notes and photos — notebook entries and bump photos you choose to save
• Health topics you discuss in chat — the content of your conversations with the AI, which routinely concerns symptoms, medications, and how you are feeling
• Imported activity data — if, and only if, you connect Apple Health or Android Health Connect: daily step counts and workout summaries (a rolling 14 days)

We do not collect precise geolocation, and we do not infer health data about you from anything other than what you enter.

2. Sources of consumer health data

There are exactly two, and both are you:

• Directly from you, when you type or record something in the app
• From your device's health platform (Apple Health or Android Health Connect), only after you explicitly connect it, and only for the activity categories listed above

We do not buy, license, or receive consumer health data from data brokers, advertising networks, other apps, or any third party.

3. Purposes for collecting and using it

We use consumer health data only to provide the features you are using it for:

• To generate the AI companion's replies and its personalised, week-appropriate content
• To display your own logs back to you — trends, histories, charts, and reminders
• To detect urgent health signals in what you write, so the app can show you fixed, non-AI safety information (see our AI Safety Protocol)
• To share with a partner you have deliberately linked, and to notify them about the specific events listed in section 7 of the Privacy Policy
• To keep the service working and secure — operational logs, abuse prevention, and per-account usage counters

We do not use consumer health data for advertising, profiling for marketing, or any automated decision producing legal or similarly significant effects.

4. How we share it, and with whom

We do not sell consumer health data. We have never sold it, and we have no advertising, analytics, or data-broker relationships of any kind. Under MHMD, "sale" includes exchange for anything of value — this is a flat no, not a narrow one.

Consumer health data is disclosed only in these situations:

• To a partner you link. Entirely your choice, requires an invite code you generate, and stops when you unlink. What they see and are notified about is itemised in section 7 of the Privacy Policy.
• To our processors, who act only on our instructions and may not use it for their own purposes. They are named individually below.
• Where the law compels it, subject to the safeguards in section 6.
• In a business transfer, if PreggyAI is ever acquired or merged — in which case we would notify you first and any acquirer would be bound by this policy.

Named recipients

• Amazon Web Services, Inc. — cloud hosting, storage, and AI processing via Amazon Bedrock, in the United States. Processes chat content and all stored health data on our instructions. AWS does not use your content to train its models.
• Expo (650 Industries, Inc.) — push-notification delivery. Receives notification text, which for partner notifications can name a symptom or mood.
• Apple Inc. / Google LLC — sign-in and app distribution, and the push-notification networks (APNs and FCM) that deliver our notifications to your device. They store none of your health data, but the text of a notification passes through them, and that text may refer to something you logged. You can switch off any notification category in Settings.
• RevenueCat, Inc. — subscription management. Receives your account identifier and purchase records, plus basic technical details its software collects (a device identifier, language, country, and app and operating-system version). It receives no consumer health data.

5. Your rights over consumer health data

Under MHMD, Nevada SB 370, and comparable laws you have the right to:

• Know and access what consumer health data we hold about you, including a list of everyone we have shared it with
• Withdraw consent to its collection and sharing
• Delete it — and to have us pass that deletion request on to our processors
• Appeal a refusal, and to complain to your state's Attorney General

How to exercise them

Most of it is immediate and in your own hands:

• Access — nearly everything we hold is visible and editable in the app.
• Delete — Profile → Settings → Delete account, or via our web deletion page. This permanently removes your health data from our systems, and we pass the deletion to our processors.
• Withdraw consent — disconnect your health app in Settings (this deletes our copy of imported activity data), unlink your partner, or delete your account.
• Anything else, or an appeal — email support@preggyai.online. We respond within 45 days. If we refuse a request we will tell you why and how to appeal; if we deny an appeal we will give you a way to complain to your Attorney General.

We will never charge you for exercising these rights, and we will never degrade the app because you did.

6. Legal requests

We treat pregnancy data as sensitive, and we do not hand it over casually.

• We disclose consumer health data to government or law-enforcement agencies only where valid, binding legal process compels it — a subpoena, court order, or warrant properly served on us. An informal request is not enough, and we say no to those.
• We review every request, and we challenge or narrow those that are overbroad, defective, or reach further than the law allows.
• We notify you before disclosing anything, so you have the opportunity to object — unless a court order or statute prohibits us from telling you, in which case we notify you as soon as that restriction lifts.
• We disclose the minimum the process actually requires, never a whole account when a single record is asked for.

Legal process should be served on our privacy contact at support@preggyai.online, which is the address monitored for this purpose.

7. Storage, retention, and security

Consumer health data is stored and processed in the United States (AWS, US East) — both the servers that hold it and the AI that generates replies. Chat message content and notebook entries are additionally encrypted by us at the field level, so they are not readable from the database alone. Retention limits are itemised in section 6 of the Privacy Policy; deleting your account removes this data immediately rather than waiting for those limits. Operational logs are the one exception: as described in that same section, they record system events rather than the health data you enter, are not deleted account by account, and expire on their own schedule.

8. Changes

If we materially change how we handle consumer health data, we will update the effective date above and obtain your consent again where the law requires it. The current version is always at https://preggyai.online/consumer-health-privacy.html.

9. Contact

Questions, requests, appeals, or complaints about consumer health data: privacy@preggyai.online. PreggyAI is operated by Injoy AI Solutions, registered in British Columbia, Canada.

Injoy AI Solutions has designated a Privacy Officer, accountable for personal information and reachable at the address above. Section 14 of the Privacy Policy carries the same designation.

PreggyAI is offered only in Canada and the United States, and is not offered to residents of Quebec at this time. If you are in Quebec and use PreggyAI regardless, this policy applies to you in full — see section 8 of the Privacy Policy.