DON Consumer Health Data Privacy Policy

Effective date: October 11, 2026

This policy supplements the DON Privacy Policy and describes how Paridym Agency Inc. (“Paridym,” “DON,” “we,” “us,” or “our”) handles consumer health data. It is intended to provide disclosures required by consumer-health-data laws, including Washington’s My Health My Data Act.

1. Consumer health data we may collect

At your direction, DON may collect or infer:

exercise, workouts, movement, activity, mobility, nutrition, sleep, energy, recovery, body measurements, and wellness goals;
Apple Health or other connected health and fitness information you choose to share;
symptoms, health conditions, medications, supplements, care preparation, or other health details you type or say;
reproductive or sexual-health information if you choose to provide it;
mental or behavioral-health information if you choose to provide it;
voice recordings and transcripts containing health information;
precise or approximate time and location context if included in information you submit or authorize;
identifiers and account information linked to health information; and
insights, recommendations, plans, or inferences derived from the above information.

2. Sources

We receive consumer health data:

directly from you;
from your device with permission;
from Apple HealthKit;
from connected services you deliberately authorize;
from files or AI-history imports you deliberately submit; and
from inferences generated to provide the DON features you request.

3. Why we collect and use it

We collect and use consumer health data to:

provide health, fitness, nutrition, workout, sleep, recovery, planning, conversation, and voice features you request;
personalize responses and retrieve relevant saved context;
display trends and progress;
maintain safety, security, and reliability;
prevent fraud or abuse;
honor privacy requests; and
comply with applicable law.

We do not sell consumer health data. We do not use it for advertising, data brokerage, or unrelated credit, employment, or insurance decisions.

Depending on the feature you choose and the permissions you grant, the consumer health data shared may include:

health or fitness details contained in prompts and conversation context;
audio or transcripts containing health information;
workouts, nutrition, sleep, recovery, or wellness summaries;
identifiers needed to secure and route a request; and
relevant derived insights or plans.

DON is designed to share the minimum context reasonably relevant to the requested feature.

5. Categories of recipients

We may share consumer health data with:

Supabase, for authentication, database, storage, logging, and server-side routing;
OpenAI, for AI text, safety moderation, transcription, or speech processing that you permit;
xAI, for Grok text, web-search, realtime voice, transcription, speech, or voice-preview processing that you permit;
connected health, fitness, calendar, task, or productivity services you explicitly direct DON to use;
professional advisers or authorities when reasonably necessary to comply with law or protect rights, safety, and security; and
a successor in a corporate transaction, subject to applicable legal protections.

Paridym Agency Inc. currently has no affiliate with which DON shares consumer health data for the affiliate’s independent use.

DON requests permission before accessing Apple Health information. DON also asks for explicit permission before sending relevant personal or sensitive context to OpenAI or xAI.

You may withdraw future collection or sharing permission by:

revoking Apple Health permission in iOS Settings or the Health app;
disconnecting a supported integration;
withdrawing AI permission under System & Privacy → AI Data Processing; or
emailing privacy@paridym.ai.

Withdrawal does not reverse processing completed before the withdrawal.

7. Your rights

Subject to applicable law, you may request to:

confirm whether we collect, share, or sell consumer health data;
access your consumer health data;
receive a list of third parties and affiliates with which it was shared or sold, including available contact information;
correct inaccurate consumer health data;
delete consumer health data held by us and, where required, notify applicable processors or recipients;
withdraw consent; and
appeal a refusal to act on a request.

Use System & Privacy in DON or email privacy@paridym.ai. We will use a secure and reliable process to authenticate the request. We will not discriminate against you for exercising a right.

If we deny a request, email privacy@paridym.ai with the subject “Privacy Appeal” and explain why you believe the decision should be reconsidered.

8. Security and retention

We use safeguards designed for the sensitivity of consumer health data, including access controls, encrypted connections, platform permission controls, and audit logging.

Consumer health data associated with an active account is generally retained while the account remains active. Following a verified deletion request, production deletion or de-identification begins and is completed within the period required by applicable law. Encrypted backups are targeted for removal through the ordinary rotation cycle within 90 days, unless preservation is legally required. Limited consent, security, privacy-request, and legal records may be retained as described in the general Privacy Policy.

No method of storage or transmission is completely secure.

9. Policy changes

We will not collect, use, or share additional categories of consumer health data, or use previously collected consumer health data for materially different purposes, without providing required notice and obtaining affirmative consent where required.

10. Contact

Paridym Agency Inc.

Privacy requests and appeals: privacy@paridym.ai

Product support: support@paridym.ai