Consumer Health Data Privacy Policy

This Consumer Health Data Privacy Policy supplements our Privacy Policy and describes how ProvenHERE, LLC ("HERE," "we," "us," or "our") collects, uses, and shares "consumer health data" in connection with the HERE applications and websites (the "Services"). It is provided to comply with health data privacy laws including the Washington My Health My Data Act ("MHMDA") and Nevada Senate Bill 370, and it applies to consumers covered by those laws. Where this policy and our general Privacy Policy differ with respect to consumer health data, this policy controls.

1. What Consumer Health Data We Collect

HERE is a general wellness product, not a healthcare provider, and we deliberately collect very little health-related information. The consumer health data we collect is:

• Emotional check-ins. If you choose to record how you are feeling before or after a session, we collect the emotion you select and the time of the check-in. This is the only category of health-related information you can provide in the Services.
• Wellness activity. Records of the wellness sessions you play (for example, which breathing or relaxation experience you used and for how long), to the extent this is considered health-related information under applicable law.

We do not collect medical records, diagnoses, treatment information, biometric data, or precise (street-level) location. Peace Map location contributions, if you enable them, are deliberately reduced to approximately 11 km / 7 mi precision and are anonymized at submission. We store without your name, account, or device identifiers so they cannot later be linked to you.

2. Consent

We ask for your explicit consent before your first emotional check-in, and that consent covers the collection of your check-ins and their use for the purposes described in Section 3, including personalizing your experience. Check-ins are always optional. Declining or withdrawing consent does not affect your access to the Services. You may withdraw consent at any time in the app or by emailing hello@provenhere.com, and you may delete your check-in history by deleting your account (Settings → Terms and privacy → Data management → Delete my account) or by contacting us.

3. How We Use Consumer Health Data

We use consumer health data only to: (a) provide the features you request, such as showing you your own check-in history and progress; (b) personalize your experience within the Services (for example, suggesting sessions or content based on how you told us you are feeling); (c) display aggregated, de-identified activity (for example, regional Peace Map session counts that cannot be linked to you); and (d) maintain the security and integrity of the Services. Personalization happens within our own systems; we do not send your check-in data to analytics or advertising platforms to do it. We do not use consumer health data for advertising or marketing, and we do not sell it.

4. How We Share Consumer Health Data

We share consumer health data only with service providers that process it on our behalf under contract, and only as needed to operate the Services:

• Amazon Web Services, Inc. Cloud hosting and data storage (United States).

We do not share consumer health data with advertising partners, data brokers, employers or Sponsors, or any other third parties, except as required by law (for example, in response to valid legal process) or with your separate, explicit authorization. A team or enterprise subscription Sponsor may see only aggregated, de-identified team statistics that are no longer consumer health data. A team or enterprise subscription Sponsor never sees your individual check-ins and may only see trends when at least 10 people have contributed. We do not sell consumer health data, and we will not do so without the separate authorization required by law.

5. Your Rights

Subject to applicable law, you have the right to: (a) confirm whether we collect, share, or sell consumer health data about you and access that data, including a list of third parties and affiliates with whom we have shared it; (b) withdraw consent to our collection and sharing of your consumer health data; and (c) have your consumer health data deleted, including from our backups and from our processors, within the timeframes required by law. Anonymous Peace Map contributions are the one exception: because nothing links a contribution to you, we cannot locate or delete them. We tell you this before you choose to contribute.

To exercise any of these rights, use the in-app controls (Settings → Terms and privacy → Data management) or email hello@provenhere.com with the subject line "Health Data Request." We will verify your request using the email address associated with your account and respond within the time required by applicable law. We will not discriminate against you for exercising your rights.

6. Appeals

If we decline your request, we will explain why, and you may appeal by replying to our decision with the subject line "Appeal." We will respond to appeals within the time required by applicable law. If your appeal is unsuccessful and you are a Washington resident, you may contact the Washington State Attorney General at www.atg.wa.gov/file-complaint. Nevada residents may contact the Nevada Attorney General.

7. Changes and Contact

We may update this policy from time to time; material changes will be notified as described in our Privacy Policy, and where required by law we will obtain fresh consent. Questions: hello@provenhere.com.