← myessem

myessem — Consumer Health Data Privacy Policy

Effective date: [DATE — set at launch] Regulated entity: Chanducate LLC, a Wyoming limited liability company Contact: support@myessem.com

DRAFT — for founder and attorney review. Not yet published. This policy supplements our Privacy Policy and is provided for consumers protected by consumer-health-data laws, including the Washington My Health My Data Act and Nevada's consumer health data law (SB 370). Per Washington law, this document must be linked separately and distinctly from the myessem homepage.

1. Consumer health data we collect

  • Emotional-wellbeing check-ins: the values you record across myessem's personal dimensions, and notes you attach — information that identifies or can reasonably indicate your past, present, or future mental health status.
  • Reflection and conversation content: what you write beneath MIRRA's reflections and in conversations with MIRRA, and the automated safety classification of each of your chat messages (safe / distress / danger).
  • Safety-pause records: a content-free record (date and count only) when the safety system pauses a conversation.
  • Inferences the Service computes from your check-ins to reflect your own patterns back to you (for example, that several dimensions moved together recently).
  • Voice audio (optional, transient): if you choose to use voice dictation or listen to MIRRA's replies aloud, microphone audio is processed transiently by our speech processor (OpenAI) solely to convert it to or from text, and is not stored by us. Dictated words become consumer health data only if you choose to send them as a message.

We do not collect biometric data or precise geolocation, and we do not geofence. Voice audio is used solely for transcription, never for identifying you by your voice.

2. Sources

All consumer health data comes from you — what you enter in the app — and from the Service's own processing of it. We do not buy, receive, or infer health data from third parties.

3. Why we collect and use it

Solely to provide the Service you asked for: computing and reflecting your patterns, generating MIRRA's reflections and responses, operating the crisis-safety protocol, and securing the Service. Never for advertising. Never for sale.

4. Consent

We collect your consumer health data with your opt-in consent, given when you create your account and accept the health-data consent presented at sign-up; entering a check-in or writing to MIRRA is data you choose to provide. We do not collect consumer health data beyond what is necessary to provide the Service without a further, separate consent.

5. Sharing

We do not sell consumer health data, and we would never do so without the separate, signed authorization the law requires — a practice we have no intention of adopting. We share consumer health data only with the processors that operate the Service under contract on our instructions (database hosting — Supabase; AI processing — Anthropic; speech processing for the optional voice features — OpenAI, transiently and without storage by us; application hosting — Vercel; authentication — Clerk, which handles your identity rather than your health data). A full list, and the narrow legal exceptions (legal process, protection of life), appear in our Privacy Policy.

6. Your rights

You have the right to:

  • Access the consumer health data we hold about you, including a list of the third parties (processors) it has been shared with;
  • Withdraw consent to our collection and sharing of your consumer health data;
  • Delete your consumer health data — erase conversations in-app, or delete your account entirely, which removes your check-ins and conversations (subject to a short backup-rotation window);
  • Appeal a refusal, by replying to our decision; if the appeal fails you may contact your state Attorney General.

Because the Service is the processing of the wellbeing data you enter, withdrawing consent for all processing means deleting the relevant data or your account; the choice is always yours and takes effect in-app immediately.

To exercise any right: in-app controls, or support@myessem.com from your account email. We verify requests via your authenticated account and respond within the time required by your state's law.

7. Changes

Material changes to this policy will be notified in the app or by email and will not apply retroactively to previously collected consumer health data without your fresh consent.

Chanducate LLC · support@myessem.com