Veritell Consumer Health Data Privacy Policy

This Consumer Health Data Privacy Policy describes how Sound City Ventures, LLC, doing business as Veritell Care ("Veritell," "we," "us," or "our"), collects, uses, and shares consumer health data subject to applicable state consumer health data privacy laws, including the Washington My Health My Data Act and Nevada's consumer health data privacy law.

This policy applies to consumer health data about Washington and Nevada residents, individuals whose consumer health data is collected in Washington or Nevada, and other individuals where similar state consumer health data laws apply. It supplements our general Privacy Policy. If this policy conflicts with another Veritell privacy notice, this policy controls with respect to consumer health data covered by applicable state consumer health data privacy laws.

Consumer Health Data We Collect

Depending on how you use Veritell, we may collect the following categories of consumer health data:

• Health records and related details imported from patient portals, including labs, test results, clinical notes, visit summaries, appointments, medications, diagnoses, conditions, care plans, procedures, immunizations, allergies, blood type, and similar records.
• Information about loved ones or care recipients that you add to Veritell, such as profile details, care context, relationship information, health-related notes, and the types of health records listed above.
• AI-generated summaries, explanations, care context, record overviews, alerts, and suggested follow-up questions derived from health records.
• Portal connection and sync information, including connected health systems, sync status, timestamps, error states, and record-update metadata.
• Health-related support and diagnostic information that you choose to send us, such as screenshots, logs, troubleshooting details, or messages that may include consumer health data.
• Contact and waitlist information when it identifies or is reasonably linkable to your interest in Veritell as a caregiver or health-records tool, such as your email address and beta access request.
• Device, usage, and technical information when it is reasonably linkable to your use of Veritell to seek, manage, understand, or organize health information.

We do not intentionally collect precise location information for geofencing around healthcare facilities. We do not collect biometric data, genetic data, reproductive health information, or gender-affirming care information as standalone product features, but imported health records or user-provided materials may contain those categories if they are present in the records or information you choose to use with Veritell.

If imported records or user-provided materials contain reproductive or sexual health information, we process that information only as described in this policy and do not sell it or use it for advertising or marketing.

Sources of Consumer Health Data

We collect consumer health data from the following sources:

• You, when you create profiles, connect accounts, join beta programs, contact us, send support information, or use Veritell features.
• Patient portals and health systems that you choose to connect to Veritell.
• Your device and the Veritell application, when the app stores, processes, syncs, summarizes, or displays health records and related metadata.
• Service providers acting on our behalf, such as cloud infrastructure or AI processing providers, when they process consumer health data for requested Veritell features.

How We Process and Store Consumer Health Data

Veritell is designed so that consumer health data is stored on your device by default. When you request features that require cloud processing, such as AI-generated summaries or explanations, Veritell may transmit the information reasonably necessary for that feature to our cloud infrastructure or AI processing providers. Those processors may process consumer health data only to provide services to us and only under contractual restrictions.

We do not use consumer health data for advertising, behavioral targeting, or AI model training. We do not permit third parties to collect consumer health data over time and across different websites or online services through Veritell.

How We Use Consumer Health Data

We collect and use consumer health data for the following purposes:

• To provide Veritell features you request, including importing records, organizing records, displaying health information, generating summaries, tracking updates, and helping you understand changes in health records.
• To support caregiver workflows, including managing multiple loved-one profiles and keeping each profile separate.
• To generate AI summaries, explanations, alerts, and suggestions, using only the information reasonably necessary for the requested feature.
• To operate, secure, troubleshoot, debug, and improve the reliability of Veritell.
• To honor your privacy requests, manage consent, and comply with applicable law.
• To prevent, detect, investigate, or respond to security incidents, fraud, misuse, or illegal activity.

We do not use consumer health data for advertising, behavioral targeting, or training AI models.

Consumer Health Data We Share

We may share or disclose consumer health data in the following limited ways:

• With processors and service providers that help us provide Veritell and may need to process consumer health data, such as cloud infrastructure providers and AI model hosting or processing providers. Processors may process consumer health data only to provide services to us and only under contractual restrictions.
• With third parties at your direction, such as when you export, send, or share information with a caregiver, family member, healthcare provider, or other person you choose.
• With patient portals or health systems as necessary to connect, authenticate, sync, or maintain the service you requested.
• With legal, safety, or security recipients when necessary to comply with law, respond to valid legal process, protect rights or safety, prevent fraud or abuse, or preserve system security.

We do not sell consumer health data. We do not share consumer health data for advertising or marketing purposes.

Categories of Third Parties and Specific Affiliates

The categories of third parties or recipients with whom consumer health data may be shared are:

• Cloud infrastructure and hosting providers.
• AI model hosting and processing providers.
• Patient portals and health systems you choose to connect.
• People or organizations you direct us to share with.
• Legal, regulatory, safety, or security recipients when required or permitted by law.

As of the Last Updated date above, we do not have any corporate affiliates, and we do not share consumer health data with any affiliates.

Sale of Consumer Health Data

We do not sell consumer health data. If that ever changed, we would first obtain a separate written authorization that satisfies applicable state consumer health data privacy laws. We will not condition the use of Veritell on signing an authorization to sell consumer health data.

Geofencing

We do not use geofencing technology around healthcare facilities to identify or track consumers seeking health care services, collect consumer health data, or send health-related messages or advertisements.

Your Rights

Subject to applicable law, you may have the right to:

• Confirm whether we collect, share, or sell consumer health data about you.
• Access consumer health data we collect, share, or sell about you.
• Receive a list of third parties and affiliates with whom we have shared or sold your consumer health data.
• Withdraw consent for future collection or sharing of your consumer health data.
• Request deletion of consumer health data that we or our service providers maintain about you.
• Review consumer health data we maintain about you and request that we correct information you believe is inaccurate, where correction is available and appropriate.
• Appeal our refusal to act on a request.

Because most health records in Veritell come from patient portals or health systems, you may need to correct the original record with the source health system. If we maintain consumer health data about you in Veritell-controlled systems, you may contact us to request review or correction.

Temporary copies used for AI processing are deleted shortly after processing.

You can exercise these rights by contacting us at [email protected] with the subject line "Consumer Health Data Request." We may need to authenticate your request before acting on it. You do not need to create a new account to exercise these rights, but we may ask you to use an existing account or provide information reasonably necessary to verify your identity and authority.

We will respond to your request within 45 days. If we deny your request, you may appeal by contacting [email protected] with the subject line "Consumer Health Data Appeal," and we will respond to that appeal within 45 days. If your appeal is denied, we will explain our decision and provide information about how to contact the applicable state regulator or Attorney General.

California Medical Information

For California residents, certain medical information maintained by Veritell may also be protected by California's Confidentiality of Medical Information Act. We handle medical information consistent with applicable California confidentiality requirements, including limits on disclosure except as authorized by you or permitted by law.

Changes to This Policy

If we materially change this policy, we will update the Last updated and effective date above and provide notice in a manner appropriate to the change, such as through the website, in-app notice, or email if we have your email address.

Security

We restrict access to consumer health data to personnel, contractors, and processors who need access to provide the service you requested, honor your consent, secure the service, or comply with law. We use administrative, technical, and physical safeguards appropriate to the nature and volume of consumer health data we handle.

Contact Us

Sound City Ventures, LLC d/b/a Veritell Care
7511 Greenwood Ave North
Unit 4128
Seattle, WA 98103

[email protected]