Consumer Health Data — Washington State (RCW 19.373)

This notice supplements our Privacy & Terms. It describes how CalmaLink handles “consumer health data” (CHD) for Washington residents.

What we collect

CHD may include information linked or reasonably linkable to you that indicates past, present, or future physical or mental health status—such as messages you type into the chatbot, self‑reported mood or stress content, or usage events related to mindfulness practice.

How we use CHD

  • Generate chatbot responses and surface relevant mindfulness content.
  • Provide crisis guidance (e.g., 988) and prevent abuse.
  • Understand aggregate usage to improve the experience.

We do not use precise geolocation and we do not sell CHD.

Sharing

We use service providers (e.g., OpenAI API) under contract to process chat inputs to generate responses. OpenAI does not train its models on our API data; provider logs may retain inputs/outputs for a limited period for abuse prevention, or be configured for zero‑data‑retention where available.

Your rights

Washington residents may request access, deletion, or withdrawal of consent for CHD. We will verify your request and respond consistent with RCW 19.373.

Consent

If we ever collect or use CHD for a new purpose, we will first ask for your affirmative consent.

Geofencing

We will not implement geofencing around health‑care facilities to identify or track individuals, collect CHD, or send health‑related messages or ads.

Homepage link

A link to this notice appears in our site footer and in the Policies menu.