Consumer Health Data Privacy Policy
Effective May 2026. Supplements our Privacy Policy for sensitive wellness data.
If you use CalmShield in Washington, Connecticut, Nevada, or other states with consumer health data laws, this policy explains how we handle mood logs, journal entries, panic records, and similar information. CalmShield is a wellness app, not a HIPAA-covered healthcare provider.
What we do
- Store journals, mood logs, and recovery notes on your device by default (on-device processing)
- Encrypt connections with TLS (HTTPS)
- Let you export or permanently delete your data anytime
- Keep optional Apple Health / Health Connect access fully under your control
- Use plain-language privacy explanations, not dense legal templates
What we never do
- Sell your anxiety or mental-health data to advertisers or brokers
- Use your journal entries, mood logs, or health readings to train external AI or language models
- Embed hidden third-party ad trackers in the app
- Require your camera or microphone to use core panic tools
- Record your voice, or send your full journal entries anywhere without explicit consent
This page provides general information about CalmShield policies. It is not legal advice. Have qualified counsel review these documents for your jurisdiction, subscription model, and data practices before launch.
About this policy
This Consumer Health Data Privacy Policy ("CHD Policy") supplements our Privacy Policy. It applies to personal information that qualifies as "consumer health data" under applicable laws, including Washington's My Health My Data Act, Connecticut's Data Privacy Act, Nevada's SB 370, and similar state laws.
Scope: what this covers
CalmShield is a wellness and self-help application, not a HIPAA-covered healthcare provider. This policy applies to health-related information collected through the app that falls under consumer health data laws. It does not apply to clinical care provided by licensed professionals outside our Service.
- •Mood check-ins and intensity ratings
- •Journal entries about anxiety, panic, or emotional state
- •Panic and recovery logs, courage logs, and fear-ladder progress
- •Anxiety profile quiz responses
- •Optional Apple Health or Health Connect data you authorize
- •Optional weekly reflection built from recovery metrics you already logged
Why we collect consumer health data
We use this information only to operate and improve the Service for you:
- •Personalize SOS plans, recommendations, and recovery tools
- •Show your trends and progress in the recovery dashboard
- •Enable the optional weekly recovery summary
- •Improve app reliability and fix bugs (in aggregated or de-identified form where possible)
What we do not do
We designed CalmShield to avoid common mental-health-app data practices:
- •We do not sell your consumer health data to advertisers or data brokers
- •We do not use consumer health data for targeted advertising
- •We do not require camera or microphone access for core panic support tools
- •We do not share full journal contents with third parties without your explicit consent
Who may receive consumer health data
We may share consumer health data only with:
- •Service providers that help us run the app (e.g. cloud hosting, authentication via Firebase) under contractual confidentiality obligations
- •A processing provider for the optional weekly reflection, and only the recovery metrics needed to write that recap
- •Law enforcement or regulators when required by valid legal process
Where data is stored
Much of your sensitive content, journals, mood logs, recovery notes, is stored on your device by default. If you enable account sync or cloud features, some data may be stored on our servers. Downloaded audio and offline content remain on your device until you delete them.
Your rights
Depending on where you live, you may have the right to:
- •Confirm whether we are collecting or sharing your consumer health data
- •Access a copy of your consumer health data
- •Request deletion of your consumer health data
- •Withdraw consent for certain processing where consent is the legal basis
- •Appeal a denied request where required by law
How to exercise your rights
Email {email:support} with the subject line "Consumer Health Data Request." We will verify your identity using commercially reasonable methods and respond within the timeframe required by applicable law. You can also export or delete much of your data directly in app settings.
Changes to this policy
We may update this CHD Policy as laws or our practices change. Material updates will be posted on this page with a revised effective date.
Contact
Consumer health data questions: {email:support}
Related: Privacy policy · Terms & conditions