Consumer Health Data Privacy Policy
Some US state laws, such as Washington's My Health My Data Act and Nevada's consumer health data law, give you rights over “consumer health data”. What you write in AmnesAI can be that kind of data, so this page sets out how we handle it. It adds to our Privacy Policy, which covers everything else.
The health data involved
- What you write: your pages, letters and check-ins, which can describe your feelings, mental state, or experiences.
- The numbers you choose on the app's scales, such as how much a memory hurts.
- The paper you choose for a page, which names a mood (such as “Storm”).
- That a support screen was shown because something you wrote suggested you may be in danger.
All of it comes from you, in the app. We do not get it from anyone else.
Where it is kept
On your phone, encrypted, and nowhere else. We have no copy of your notebook, and no account links it to your name or email.
When it leaves your phone, and why
- To write the AI replies. At a few moments in the program, the pages and the score a reply needs are sent through our server, which runs on Cloudflare, to OpenAI, which writes the reply. Our server does not store or log them. OpenAI does not use them to train its models, and may keep them for up to 30 days to detect abuse before deleting them. The Privacy Policy lists exactly what each reply sends.
- To count how often support is shown. When a support screen appears, the app sends an anonymous count to PostHog — that it was shown, not why, and under an identifier that is new every time the app opens.
That is all. We use your health data only to provide the app to you. We do not sell it, use it for advertising, or share it with anyone else. [[TODO: once the AI consent screen is built, say here that the app asks before the first AI reply, and where to change that answer.]]
Your rights
- Access: everything you have written is in the app, on your phone. Since we keep none of it, there is nothing more for us to send you.
- Deletion: Settings → Delete everything erases it from your phone at once, and so does uninstalling the app. Copies OpenAI keeps for abuse checks are deleted within 30 days.
- Withdrawing consent: you can stop any health data leaving your phone by not using the AI replies — offline, the app uses fixed words instead and keeps working.
- Knowing who receives it: the only companies that receive it are OpenAI and Cloudflare, for the AI replies, and PostHog, for the anonymous count above.
To use any of these rights, or to ask a question, write to privacy@amnesai.app. We will answer within 45 days. If we decline a request, you can appeal by replying to our answer, and we will respond to the appeal within 45 days. If you are not satisfied, you can contact your state's Attorney General.
Changes
If this policy changes, the new version will be posted here with a new date.