Consumer Health Data Privacy Policy

Last updated: June 11, 2026 · Version 1.0

This policy explains how Kintaria (a product of THRIVE.ME Corporation) handles consumer health data — information that identifies you or a family member and relates to past, present, or future physical or mental health. It supplements our Privacy Policy and exists to satisfy state consumer health privacy laws, including Washington's My Health My Data Act and Nevada's consumer health data law, which protect health data held by companies that are not covered by HIPAA.

Plain-language summary: the health information in your family workspace is there because you put it there, to run your family's care coordination. We use it for that purpose only. We never sell it, never share it with advertisers or data brokers, and never use it to train AI models. You can see it, export it, correct it, or delete it at any time.

1. Categories of consumer health data we collect

Health conditions and history — diagnoses, conditions, procedures, and immunizations you record in a workspace or import from Apple Health.
Medications — medication lists, doses, schedules, and review notes.
Care activity — appointments, doctor-visit notes and summaries, hospitalizations, follow-up questions, and plan checklists.
Lab results and clinical documents — values you enter and documents you upload (after-visit summaries, discharge paperwork, referrals, insurance cards).
Care-context information — free-text notes, emergency contacts, and the parent profile.
Voice-line call content — if you call (888) 704-0999, what you describe on the call may include health information (recordings/transcripts kept 90 days, then deleted).
Research-survey responses — if you choose to share health context in the survey.

2. Sources

We collect consumer health data only from you and the workspace members you invite: what you type or upload into the app, what you import from Apple Health on your device (a feature you initiate), what you say on the voice line, and what you submit in the research survey. We do not buy, scrape, or infer health data from third parties, and we do not collect it from advertising or tracking technologies (we use none).

3. Why we collect it (purposes)

One purpose: to provide the service you asked for — a shared family workspace for coordinating a loved one's care. That includes displaying the data to the workspace members you've invited, generating the summaries and checklists you request (including the optional AI features, which are off by default), sending the notifications you enable, and securing the service. We do not use consumer health data for advertising, profiling, or any secondary purpose.

4. Sharing

We do not sell consumer health data. Not now, not ever, in any sense of the word — including the broad definitions in state law.
We do not share it with advertisers, data brokers, or analytics networks.
We have no affiliates with whom data is shared. THRIVE.ME Corporation is the only entity involved.
Service providers (processors) handle data on our behalf, under contracts limiting them to our instructions: cloud hosting (Vercel, Supabase, Fly.io), AI processing for features you enable (Anthropic — inputs not used for model training), communications (Twilio, Resend), call-audio processing for the voice line (Deepgram, ElevenLabs), payments (Stripe — never sees health data), and the survey host (Tally). Section 4 of the Privacy Policy describes each.
The people you choose — workspace members you invite, and clinicians or others you explicitly share a link with, see what you choose to share.
Legal requirements — we may disclose data if validly required by law, and will notify you unless legally barred.

5. Consent

Because the health data in Kintaria is collected solely to provide the service you request, your entering it constitutes the collection we rely on — we don't collect health data beyond what the service needs. We will ask for your separate, explicit consent before ever collecting consumer health data for any other purpose, or sharing it in any way not described above. You can withdraw any consent at any time (section 6).

6. Your rights and how to exercise them

You can, at any time:

Access — confirm whether we hold consumer health data about you and get a copy (the app's export produces a complete workspace bundle), including a list of the third parties (section 4) it has been shared with.
Correct — edit anything in the workspace directly, or ask us to correct it.
Delete — delete individual items in the app, or ask us to delete your account and workspace entirely. Deletion requests are honored within 30 days, including from backups on their rotation schedule.
Withdraw consent — turn off AI features, leave a workspace, revoke shared links, or withdraw any other consent you've given.

To exercise any of these: email info@kintaria.com, call (888) 704-0999, or use the in-app controls. We respond within 30 days, and we don't discriminate against you for exercising your rights.

6.1 Appeals

If we decline a request, you may appeal by replying to our response (or emailing info@kintaria.com with “Appeal” in the subject line). We'll review and respond within 45 days. If you live in Washington and are unsatisfied with the outcome, you may contact the Washington State Attorney General.

7. Changes and contact

Material changes to this policy will be announced the same way as changes to the Privacy Policy — by email to account holders at least 30 days before they take effect. Questions: info@kintaria.com · THRIVE.ME Corporation, 2007 W Carson St, Torrance, CA 90501, United States.