Consumer Health Data Privacy Policy

1. About this policy

This policy explains how Antelic collects, uses, and shares consumer health data, and how you can use your rights over it. It is written for Washington’s My Health My Data Act and Nevada’s consumer health data privacy law (Senate Bill 370), and we apply it to everyone who uses Antelic. It works alongside our Privacy Policy, which covers all the information we collect. If the two differ about consumer health data, this policy applies.

Consumer health data is personal information that is linked, or reasonably linkable, to you and that identifies your past, present, or future physical or mental health. In Antelic, most of what you save is consumer health data, and so is information we derive from it, such as AI summaries.

Antelic is in an invite-only Friends and Family Beta. The company that will operate Antelic has not been formed yet. Its legal name and business address will be provided here before public launch. In this policy, “Antelic”, “we”, and “us” mean Antelic and the people who operate it during the beta.

2. Your consent

We collect consumer health data only with your consent. When you register, you give that consent separately, in its own checkbox, which is not ticked for you. We record the version of this policy you consented to and when, and that record is included when you use Export my data. You can withdraw your consent at any time, as section 8 explains.

We do not share consumer health data with third parties, and we do not sell it. Our service providers process it only on our behalf, as section 6 explains. If we ever wanted to share or sell consumer health data, we would first ask for your separate consent or authorization, as the law requires.

3. Consumer health data we collect

• Profile details: date of birth, sex, height, weight, the health and wellness goals you choose, and your answers to lifestyle questions, such as sleep and exercise habits.
• Daily check-ins: how you rate your sleep, your energy and mood, your mental clarity, and how your body feels, plus symptoms, severity ratings, and notes.
• Medications and supplements: names, doses, schedules, how you take them, injection sites, and the doses you log as taken or skipped.
• Lab results: marker names, values, units, reference ranges, flags, and dates.
• Health documents: the summaries and listed items, such as medications or immunizations, that you approve from documents you upload, and a fingerprint of each uploaded document.
• Uploaded files: photos and PDFs of lab reports and health documents. These are read once and not kept.
• Appointments: visit dates, clinician names, and the questions you plan to ask.
• AI-derived information: summaries and explanations created from your data, such as your health overview, and your helpful or wrong votes on AI answers.
• Questions you ask: questions you ask the AI about your records. These are sent to our AI provider to be answered and are not stored.
• Information linked to your health data: your email address, your sign-up and consent records, your welcome email record, and usage counts.

We do not collect wearable data during the beta, because wearable connections are turned off. We do not collect precise location, and we do not use geofencing.

4. Where it comes from

• You, when you enter information, upload files, or use the app.
• Our AI provider, which reads the files you upload and creates summaries and explanations from information you provide.
• Antelic itself, which creates records as you use the app, such as usage counts.

We do not get consumer health data from data brokers, advertisers, or other companies.

5. How we use it

We use consumer health data only to:

• provide the features you use, such as saving your records, showing your history and progress toward your goals, and checking what you take for known interactions;
• create AI explanations and summaries, and read the files you upload;
• keep Antelic secure and prevent abuse;
• find and fix errors;
• review the quality of AI answers, using your votes and counts that do not identify you; and
• meet our legal obligations.

We do not use it for advertising, to train AI models, or for research. Any future research or AI training use would require a separate opt-in that you could withdraw at any time. That option is turned off during the beta.

6. Who receives it

We do not share consumer health data with third parties or affiliates. These service providers process it on our behalf:

• Supabase stores all of it in our database, which is hosted in Canada, and runs our sign-in system and server functions.
• Anthropic receives the consumer health data that an AI feature needs, such as your profile details, what you take, lab results, document and check-in summaries, questions you ask, and uploaded files. Under its commercial terms, Anthropic does not use content sent through its API to train its models.
• Sentry receives error reports from the app. We do not attach health records to them, but automatically collected details could occasionally include small pieces of information you entered.

Resend, which sends our emails, receives your email address but not your health records. Vercel, which hosts this website and the web app, receives technical information when you load a page, but not the health information you save.

We may disclose consumer health data if the law requires it, such as in response to a valid court order. If you export your data or share a care report yourself, you decide who receives it.

7. Your rights

You have the right to:

• confirm whether we collect, share, or sell your consumer health data;
• access your consumer health data, including a list of every third party and affiliate that has received it and how to contact them (today there are none, and section 6 lists our service providers);
• ask us to correct it;
• delete it; and
• withdraw your consent to its collection.

When you delete consumer health data, we delete it from our database, and we will tell our service providers to delete any copies they hold, as the law requires. Copies in backups and logs are removed on our providers’ own schedules.

We will not treat you differently, or charge you, for using these rights.

8. How to use your rights

You can use most of these rights in the app now:

• Access: use Export my data in Settings to download your information.
• Correct: edit your information in the app.
• Delete: delete individual entries in the app, use Clear history & records in Settings, or use Delete account in Settings to delete your account and all of the consumer health data linked to it.
• Withdraw consent: delete your account. This stops all collection and deletes your consumer health data. You can also stop using any feature, and we collect nothing new from features you do not use.
• Confirm and see who receives it: this policy lists everything we collect and every service provider that receives it.

For any other request, or to appeal a decision, email privacy@antelichealth.com. Our sending address, noreply@antelichealth.com, is not monitored.

We will respond to a request within 45 days. If we need more time, we may extend this once by up to 45 more days, and we will tell you why within the first 45 days. We may need to confirm your identity first, for example by asking you to make the request while signed in.

Appeals. If we decline a request, we will explain why and tell you how to appeal. To appeal, email privacy@antelichealth.com. We will respond to an appeal within 45 days and explain our decision. If we deny your appeal, you can complain to the attorney general in your state. In Washington, that is the Washington State Office of the Attorney General. In Nevada, it is the Office of the Nevada Attorney General.

9. Online activity across websites

No third party can collect information about your online activities over time and across different websites or online services through Antelic. This website uses no cookies, analytics, or third-party scripts, and the app uses no advertising or analytics tools.

10. Security and retention

We restrict each record to the account that owns it and encrypt consumer health data in transit and at rest. We keep it until you delete it or delete your account. Uploaded files are not kept after they are read. Our Privacy Policy explains retention and security in more detail.

11. Changes to this policy

If we make a material change, we will update the date at the top and tell you by email or in the app before the change applies to your consumer health data. We will ask for your consent again where the law requires. This version applies from 7 October 2026.