Consumer health data privacy policy

1. What consumer health data means

Consumer health data is information linked to you that says something about your physical or mental health, including what can be worked out from other information.

2. What we collect, and why

Depending on how you use bymae.com, we may collect:

• Health details you choose to type in the chat on our site. We use them to answer you.
• Health details you tell us about yourself or a family member in an email, the contact form or a review. We use them to answer you, or to publish the review you asked us to publish.
• Reports of a reaction to one of our products. We use them to look into what happened and to report serious reactions to the FDA, as federal law requires.

We don’t use what you buy from us, or the pages you view, to work out anything about your health. We don’t use consumer health data for anything else unless we ask you first.

3. Where it comes from

It comes from you, or from a family member who writes to us about you: what you type in the chat, write to us, post in a review or report about a reaction.

4. Who we share it with

We share consumer health data only with companies that do work for us, and only for that work:

• The AI company that writes the chat’s answers gets what you type in the chat.
• The company that hosts our website stores chat conversations.
• Google Workspace, which runs our inbox, gets the emails between us, including reaction reports.
• The service that runs our contact form gets your message.
• Judge.me, which collects and shows our reviews, gets the review you write.

When the law requires it, we share reports of serious reactions with the FDA, and share information with courts or government agencies.

We don’t sell consumer health data, and we don’t use or share it for advertising. We don’t share it with any affiliated company. We don’t let other companies collect consumer health data about you over time and across other websites when you use bymae.com.

5. Your consent

We collect and use consumer health data only to give you what you asked for, like answering your message or publishing your review, and to do what the law requires, like reporting a serious reaction to the FDA. Before we use or share it for anything else, we’ll ask you separately and tell you what, why, who gets it and how to take your consent back. To take back a consent you’ve given us, email support@bymae.com.

6. Your rights

You can ask us to:

• confirm whether we collect, share or sell your consumer health data, and let you see it
• list every company we’ve shared it with or sold it to, with a way to contact each one
• correct it
• delete it
• stop collecting or sharing it, by withdrawing your consent

Requests are free, up to twice in 12 months. We won’t treat you differently for making one.

7. How to make a request

Email support@bymae.com with “Health data request” in the subject, and tell us which right you’re using. We’ll confirm the request is yours by matching details we already have, such as your email and a recent order. We’ll never ask for a password or a card number. Someone you authorize can ask for you, with your signed permission.

We’ll answer within 45 days of receiving your request. If we need longer, we’ll tell you why within those 45 days and finish within 45 more.

When you ask us to delete your data, we delete it within 30 days of confirming it’s you, and always within the time above, except records the law requires us to keep, such as reaction reports, which we must keep for 6 years. We remove it from backups within 6 months and tell the companies that hold it for us to delete it too.

Appeals

If we turn down your request, we’ll tell you why. To appeal, reply with “Appeal” in the subject. We’ll answer in writing within 45 days. If we still say no, we’ll tell you how to complain to the Washington or Nevada Attorney General.

8. Changes to this policy

If we make a material change, we’ll post the new policy here with its effective date and email customers before it takes effect. We won’t use consumer health data in a new way without asking you first.

9. Contact us

Email support@bymae.com with “Health data request” in the subject.

byMae, Inc.