PRIVACY

Privacy Policy

Effective August 29, 2026
Your health information can be deeply personal. This policy explains what information My Simple Health collects, how we use and disclose it, how long we keep it, and the choices and rights available to you.

My Simple Health (“MSH,” “we,” “us,” or “our”) provides health education and personal health tools designed to help people understand their health in the context of their lives. This policy applies to our website, My Health workspace, educational resources, interactive tools, AI-supported features, and related services.

1. Information We Collect

Information you provide

Depending on the features you use, you may provide account and profile information, preferences, health and wellness information, symptoms and observations, medications and medication changes, movement and activity information, menstrual or cycle information, food and nutrition information, sleep and wellbeing information, Calendar entries, responses to self-insight activities, goals and practices, notes, AI questions, support requests, and other information you choose to add.

You are not required to add health information simply because a feature allows you to do so.

Information from connected services

If you choose to connect a compatible health, fitness, device, or other service, we receive the information you authorize that service to share. You can disconnect a connected service or change its permissions as applicable.

Information collected automatically

We may receive limited technical information such as device and browser type, operating system, IP address, request timestamps, pages and features accessed, application errors, diagnostic information, and security events. We use cookies, local storage, and similar technologies where necessary to operate MSH, maintain sessions, remember preferences, and provide security and requested functionality.

2. How We Use Information

We use information to provide and operate MSH, maintain accounts, save information you ask us to remember, display health information over time, connect related information across features, personalize your experience, provide relevant health education, operate AI-supported features, maintain preferences, provide support, protect security, diagnose errors, comply with legal obligations, and protect our rights.

MSH is designed to preserve meaningful distinctions between information you provide, information recorded from another source, personal observations, estimates or predictions, scientific evidence, and interpretations generated by MSH.

3. Health Information

We consider information about your health and wellbeing sensitive and apply heightened protections to it.

We do not sell your personal health information.

We do not provide identifiable health information to advertisers for targeted advertising based on your health.

Where applicable law requires consent before collecting, using, or disclosing particular categories of consumer health information, we obtain that consent.

4. AI and Your Information

MSH uses artificial intelligence to support certain features. AI may help explain health concepts, summarize or organize information, identify information relevant to a question, explore possible relationships within information in My Health, and provide contextual educational responses.

When an AI-supported feature needs information from My Health to respond, MSH provides the information reasonably necessary to perform that request. Information processed by an AI service provider remains subject to our agreements with that provider and applicable safeguards.

We do not authorize AI service providers to use identifiable MSH health information to advertise to you. AI-generated interpretations are not treated as facts merely because they were generated by MSH. AI-supported features do not diagnose disease, prescribe treatment, or replace professional medical care.

5. How We Disclose Information

Service providers

We use providers supporting cloud infrastructure, databases and storage, authentication, artificial intelligence, security, application monitoring, communications, and customer support. They may process information on our behalf only for authorized purposes and subject to appropriate obligations.

At your direction

If MSH provides a feature allowing you to export, send, or share information, we disclose that information when you direct us to do so. Information does not leave My Health merely because it exists there.

Legal and safety reasons

We may disclose information when reasonably necessary to comply with law or valid legal process, respond to lawful requests, protect rights or security, investigate fraud or security incidents, or establish or defend legal claims.

Business transactions

If MSH is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction subject to applicable law and existing commitments.

6. What We Do Not Do

• We do not sell identifiable personal health information.
• We do not use private health information entered into My Health to target advertising based on your health.
• We do not allow an AI-generated interpretation to silently replace information you recorded.
• We do not make information in My Health public simply because you store it with MSH.
• We do not require you to share every aspect of your health to use MSH.

Your My Health information is private by default unless a feature clearly tells you otherwise and you choose to share it.

7. Cookies and Similar Technologies

MSH uses cookies, browser storage, and similar technologies for authentication, security, preferences, application state, and operation of requested features. Where optional technologies require consent, we provide the controls required by applicable law.

8. Data Retention

We retain personal information for as long as necessary to provide MSH, fulfill the purposes described in this policy, comply with legal obligations, maintain security, resolve disputes, and enforce agreements. Deleted information may remain temporarily in protected backups or security records until those systems are overwritten according to retention schedules.

9. Your Privacy Controls

Depending on the feature, you can review information stored in My Health, correct inaccurate information, delete information, manage connected services, change preferences, export certain information, withdraw permissions, disconnect integrations, and delete your account.

10. U.S. Privacy Rights

Depending on where you live, you may have rights to access personal information, understand how it is collected and disclosed, correct inaccuracies, request deletion, obtain a portable copy, withdraw consent for certain processing, opt out of certain uses or disclosures, and appeal certain privacy decisions. Certain states provide additional protections for consumer health data. We do not discriminate against you for exercising applicable privacy rights.

11. Privacy Requests

You may submit a privacy request through My Simple Health Support. We may need to verify your identity before providing, correcting, exporting, or deleting personal information.

12. Security

We use administrative, technical, and organizational safeguards designed to protect personal information, including measures appropriate to the information we maintain such as encryption, access controls, authentication, logging, monitoring, secure communications, and restrictions on administrative access.

No method of transmitting or storing information is completely secure. We cannot guarantee that unauthorized access, loss, misuse, or disclosure will never occur. If a security incident affects your information, we provide notifications when required by applicable law.

13. HIPAA

My Simple Health is a consumer health education and personal health platform. Using MSH does not create a physician-patient relationship, and MSH is not a healthcare provider or health insurance plan simply because you store health information with us.

HIPAA applies to specific healthcare organizations and certain organizations working on their behalf. Not all health information or consumer health applications are governed by HIPAA. Other federal and state privacy laws may protect information maintained by MSH even where HIPAA does not apply.

14. Children

MSH's general consumer service is intended for people age 18 and older. We do not knowingly collect personal information through the general service from children under 13. If we learn that information was collected in violation of applicable law, we take appropriate steps to address or delete it.

15. Research and De-identified Information

We may use aggregated or de-identified information to understand how MSH is used, evaluate and improve features, conduct internal analysis, and develop functionality. When information is treated as de-identified, we take reasonable measures designed to prevent it from being associated with an identifiable individual.

Participation in identifiable research is not a condition of using MSH. If research requires identifiable information or consent, we provide information about that research separately and obtain any required authorization or consent.

16. Third-Party Links

MSH may link to research papers, government agencies, health organizations, educational resources, and other third-party websites. Those organizations operate independently and their privacy practices are governed by their own policies. A link does not give a third party access to your My Health account unless you separately authorize sharing.

17. Changes to This Policy

We may update this policy as MSH evolves. If we make a material change to how we collect, use, or disclose personal information, we provide appropriate notice and obtain consent when required by law. The effective date above identifies the current version.

18. Contact Us

Questions about privacy or requests concerning your information can be submitted through My Simple Health Support or Contact.