SOLUNHEIR CONSUMER HEALTH DATA PRIVACY POLICY

1. CONSUMER HEALTH DATA WE COLLECT

Some information you choose to enter into SOLUNHEIR could identify or reflect your past, present, or future physical or mental health status, including information that could be inferred from your answers. This may include:

• Life Check answers about areas of your life, including wellbeing, stress, energy, sleep, and similar topics;
• Priority Finder answers and the priority results generated from them;
• First Move, 24-7-30 Plan, and Things I’m Not Fixing Yet entries;
• Facts / Story / Unknown, Control Map, Support Map, Decision Record, and Come Back Here reflections;
• the fact that a response led SOLUNHEIR to show safety and support resources (safety routing);
• comfort preferences, such as reduced motion or larger text, that you choose to set.

We do not collect precise geolocation, biometric or genetic data, contacts, advertising identifiers, or information from wearable or health devices.

2. SOURCES

We collect consumer health data only directly from you, when you type or select answers in SOLUNHEIR. Priority results and plans are generated by SOLUNHEIR from those answers. We do not buy or receive consumer health data from other sources.

3. WHY WE COLLECT AND HOW WE USE IT

We collect and use consumer health data only to provide the SOLUNHEIR experience you requested, specifically to:

• save your Life Check and Priority Finder answers so you can continue where you left off;
• calculate your priorities and show your recommended starting point;
• build and display your First Move and 24-7-30 Plan;
• save and show your reflections, history, and reassessments;
• show safety and support resources when an answer suggests immediate support may be appropriate;
• let you export or delete your information; and
• keep the Service secure and comply with law.

We do not use consumer health data for advertising, marketing, profiling for unrelated purposes, or cross-site tracking. Safety routing is not emergency monitoring; no person reviews your answers and we do not contact anyone on your behalf.

4. CONSENT

Before SOLUNHEIR collects any consumer health data, we ask for your separate, affirmative consent. That consent is requested on its own screen and is not part of accepting the Terms of Use or Privacy Policy. We record the version of this policy you consented to and the date and time.

You may withdraw consent at any time from Account in your dashboard. After you withdraw, SOLUNHEIR stops collecting consumer health data from you, and the guided experience is unavailable until you consent again. Withdrawing consent does not by itself delete information already saved; you can delete it as described in Section 8.

5. WHO RECEIVES CONSUMER HEALTH DATA

Consumer health data is processed only by service providers (processors) acting on our behalf under contract:

• Supabase: stores your account and saved answers in our database and handles sign-in.
• Vercel: hosts the application, so your answers pass through its servers when you save them. Vercel Analytics, which we use for basic page-view counts, does not receive your answers. Page addresses inside the guided experience and dashboard are reduced to a general section name before being counted.

Stripe (payments) and Resend (account emails) do not receive your answers, assessments, plans, or reflections.

6. SHARING

We do not share consumer health data with third parties or affiliates, other than the processors listed in Section 5 acting on our behalf. If that ever changes, we will ask for your separate consent before sharing, as required by law.

7. SALE

We do not sell consumer health data, and we will not do so. SOLUNHEIR has no advertising partners, data brokers, or other recipients that pay for or receive consumer health data in exchange for anything of value.

8. YOUR RIGHTS

Subject to applicable law, you have the right to:

• confirm whether we collect, share, or sell your consumer health data;
• access your consumer health data, including a list of all third parties and affiliates with which we have shared it (currently none beyond the processors in Section 5);
• withdraw your consent to collection and sharing;
• delete your consumer health data; and
• not be discriminated against for exercising these rights.

Access: Download your data at any time from Account in your dashboard (“Download my data”). Delete: Delete your account from Account in your dashboard, which permanently and immediately deletes your account and saved answers from our application database. Withdraw consent: use “Withdraw consent” under Account.

When you delete your account, we also notify our processors as required by law. Deleted information may remain in Supabase’s encrypted backup systems for a limited period until those backups are overwritten on their regular schedule; it is not restored or used during that time.

9. HOW TO SUBMIT A REQUEST

In addition to the in-product controls, you may email connect@solunheir.com with “Consumer Health Data Request” in the subject line. To protect your information, we verify requests by asking you to send the request from the email address on your account or to confirm through that address. We respond within 45 days, which may be extended once by an additional 45 days when reasonably necessary, and we will tell you if that happens.

10. APPEALS

If we decline to act on your request, you may appeal by emailing connect@solunheir.com with “Consumer Health Data Appeal” in the subject line within a reasonable time after our response. We will respond in writing within 45 days, explaining any action taken or not taken and the reasons.

If your appeal is denied, you may contact the Washington State Attorney General at https://www.atg.wa.gov/file-complaint, the Nevada Attorney General at https://ag.nv.gov/Complaints/File_Complaint/, or the attorney general in your state.

11. SECURITY

Access to consumer health data is restricted to you through authenticated sign-in and database row-level security. Connections are encrypted. No system is completely secure, but we use reasonable safeguards appropriate to the sensitivity of this information.

12. CHANGES AND CONTACT

If we change this policy in a way that affects how consumer health data is collected, used, or shared, we will update the effective date and ask for your consent again before the change applies to you.