Consumer Health Data Privacy Notice

CosmiQ is not a health-care provider and does not provide medical or mental-health advice. However, a message, image, preference, support request, or reading request may reveal or allow an inference about health-related information as broadly defined by applicable law.

Depending on what you choose to provide, this can include information about physical or mental health, symptoms, diagnoses, treatment or medication, disability, reproductive or sexual health, gender-related care, biometric or genetic information contained in an upload, location information that identifies a health-related visit, or an inference drawn from that information.

CosmiQ is designed not to save medical, crisis, sexuality, trauma, abuse, legal, or similarly restricted details as learned Memory. Those details can still appear in a saved chat if you put them in a regular chat.

We collect consumer health data directly from you when you submit it, from the device or browser used to provide a requested feature, and from service providers that return the requested output or support the transaction.

We process it only as reasonably necessary to provide a feature you request, maintain the chat or account controls you selected, secure and troubleshoot the Service, respond to support or privacy requests, comply with law, and establish or defend legal claims. We do not use consumer health data for targeted advertising and do not sell it.

Depending on the feature, consumer health data may be disclosed to the processors listed in our Privacy Notice, including Supabase, Z.AI, Google Gemini, Inngest, Vercel, and providers needed for an image, search, place, notification, or support feature you request. Authorized CosmiQ personnel and professional advisers may access it only when reasonably necessary for support, safety, security, legal compliance, or legal claims.

We do not share consumer health data with data brokers or third parties for their independent advertising. If we ever seek to sell consumer health data, we will first obtain the separate authorization required by law.

Subject to applicable law, you may ask whether we collect, share, or sell consumer health data; request access to it and a list of relevant recipients; withdraw consent; or request deletion. Deletion requests are sent to processors where required, subject to permitted exceptions and protected backup lifecycles. Washington backup deletion may take up to six months where the law permits.

Use in-product deletion controls or email cosmiqapp@gmail.com with “Consumer Health Data Request” in the subject. We may verify your identity and authority. If we deny a request, you may appeal by replying with “Appeal” in the subject; we will respond within the legally required period and explain any further complaint route.

We will post an updated notice and effective date before materially changing these practices and will obtain consent where required.

Privacy Lead, Cosmiqapp
Ontario, Canada
cosmiqapp@gmail.com