Consumer health data privacy policy

Some information can show that a person is looking for health care. Washington's My Health My Data Act and similar state laws call it consumer health data. This policy explains what consumer health data Jachi Health ("Jachi," "we," "us") collects through jachihealth.com and the Jachi Health app, why, who handles it and how to use your rights. Our privacy policy covers everything else. Jachi isn't open for care yet.

What we collect

• The care you're interested in: the services you choose when you join the waitlist or save in your account. If you joined from one of our ads or waitlist pages about a particular kind of care, the ad's name and campaign show that too. Together with your email, state, language and first name, if you give it, this can show that you're looking for care.
• Health details you choose to send: anything about your health that you write in a support ticket, an email or the help chat. We ask you not to include health details, but if you do, we treat them as consumer health data.

We don't ask for symptoms, conditions, medications or insurance, and we don't collect your precise location, biometric data or genetic data. The care finder, condition search and weight care check run entirely in your browser, so what you enter there is never sent to us. The health journal in the Jachi Health app stays on your phone.

Where it comes from

• From you, through the waitlist form, account page, help chat and support tickets on our website and in the app, and the emails you send us.
• From the link you followed, if it came from one of our ads. It carries the ad's name and campaign.
• From Meta, if you join through a sign-up form in one of our Facebook or Instagram ads. Meta collects what you enter under its own privacy policy and passes it to us.

How we use it

• To keep your place on the waitlist and email you when the care you chose opens in your state.
• To show and update your choices in your account.
• To answer your questions and support tickets, and to write replies in the help chat.
• To understand which services people want, by state and language, so we know where and how to open.
• To count which of our ads bring sign-ups.

We collect it because you asked to join the waitlist, to have an account or to get an answer, and we use it only for the purposes above. We never use it to target you with ads or to build ad audiences, and we never sell it.

Who handles it

We don't share consumer health data with third parties or affiliates (we have no affiliates), and we don't sell it. These service providers handle it for us, under contract, only to provide their service to us:

• Netlify hosts the website, stores sign-ups, tickets and accounts, sends account emails and runs the site's server code.
• Anthropic provides the AI that writes help chat replies. Your chat messages pass through Netlify to Anthropic to generate each reply.
• Our email provider hosts our support inbox, where tickets and your emails arrive.

Meta runs the sign-up forms in our Facebook and Instagram ads and collects what you enter in them under its own privacy policy. Nothing from our site is sent to Meta. We may disclose information if the law requires it or to protect someone's safety. If Jachi merges with or is sold to another company, this policy will still apply to your data.

When Jachi opens

Care will come from licensed clinicians at an independent medical group. Your health records will be kept in that group's secure patient portal and protected under HIPAA, as its Notice of Privacy Practices will explain. Information protected by HIPAA isn't covered by this policy.

Your rights

Wherever you live, you can:

• Confirm and access: ask whether we collect, share or sell your consumer health data, get a copy, and get a list of the third parties and affiliates we've shared it with or sold it to, with a way to contact each. Today that list is empty.
• Withdraw consent: ask us to stop collecting and using your consumer health data. To stop our emails, use the unsubscribe link in any email or turn emails off in your account.
• Delete it: ask us to delete it. We'll delete it from our records and tell our service providers to delete it too. Copies in backups can take up to six months to clear.

How to make a request

• In your account: on the account page you can change your choices, turn emails off or delete your account. Deleting it also removes the waitlist sign-ups and support tickets sent with that email, if you've confirmed the address with the link we sent you.
• By email: write to support@jachihealth.com from the address you used with us and tell us what you'd like. You don't need an account. If we can't confirm the request comes from you, we may ask for more information.

Requests are free, up to twice a year. We'll answer within 45 days. If we need more time, we'll tell you why within those 45 days, and we'll take no more than 45 days more.

Appeals

If we decline a request, we'll explain why. You can appeal by replying to our answer with "Appeal" in the subject line. Within 45 days, we'll tell you in writing what we did and why. If we deny your appeal, you can file a complaint with the Washington State Attorney General or the attorney general where you live.

How we protect it

Every page is encrypted with HTTPS, only the people who run Jachi can see sign-ups, tickets and accounts, after signing in, and our providers protect data with industry-standard safeguards.

Changes to this policy

If we change this policy, we'll update the date at the top. We won't use consumer health data for a new purpose without asking you first.

Contact us

Questions or requests? Email support@jachihealth.com.