Consumer Health Data Privacy Policy

This policy describes how Envyrofax handles "consumer health data" as defined by the Washington My Health My Data Act, Nevada SB 370, the Connecticut Data Privacy Act and similar laws. It supplements our Privacy Policy.

Consumer health data we collect

• Sex (female or male), which you provide when you create an account.
• Addresses you give us or scan, which, combined with environmental health records, could be used to infer health-related information about you.
• Work history, if you use the Work History Exposure Check: the employers, job titles, workplace addresses and years you confirm, which combined with environmental and county health records could be used to infer health-related information about you. We collect it only with a separate consent you give on that page, recorded with the date, time and IP address. We do not keep the resume or text you upload; it is read once to extract the workplaces and then discarded.
• We do not collect the health conditions you select in the Body Scan. Those selections are processed only in your browser and never leave your device.

Why we collect it

Only to show environmental health context relevant to you, for example cancer rates that differ between men and women or the records around the places you worked, and to operate your account. We collect it only with your consent, which you give by checking the health data box when you sign up.

Sources

Directly from you. Environmental and community health statistics come from government agencies and describe places and populations, not you.

Sharing

We do not sell consumer health data and do not share it with advertisers. We share it only with service providers that process it on our behalf (hosting, database and email), under contracts that restrict their use, or when required by law. An uploaded resume or pasted work history is processed by Google's Gemini API as our processor, only to extract the list of workplaces.

Your rights

• Confirm whether we collect, share or sell your consumer health data, and see a list of the third parties and affiliates with which we shared it.
• Withdraw your consent at any time.
• Delete your consumer health data. Deletion is also available instantly on your account page, and your saved work history can be deleted on its own from the Work History page.
• Appeal a decision about your request by replying to our response.

To exercise these rights, use your account page or email hello@envyrofax.com. We will respond within 45 days.

Geofencing

We do not use geofencing around health care facilities to identify, track or send messages to people.