Consumer Health Data Privacy Policy
Consumer Health Data Privacy Policy
Effective date: July 4, 2026 Last updated: August 9, 2026
This policy explains how Corda handles consumer health data — required by the Washington My Health My Data Act and similar state laws, and applied to all Corda users regardless of state. It supplements the Mobile Privacy Policy (which covers everything else). Questions or requests: legal@meetcorda.com.
Who we are: Corda is operated by [Corda Health, Inc.] (the "Company," "we," "us").
1. What counts as consumer health data in Corda
Corda is a caregiving app: the health information you enter about the person you care for, and any you enter about yourself, is consumer health data. Concretely:
- Care recipient profiles (name, date of birth, relationship, primary condition)
- Medications, dosing schedules, and dose history
- Health conditions, allergies, and durable medical equipment records
- Providers and appointments
- Visit notes and care notes
- Calendar events you choose to connect from Google Calendar (event titles, times, locations)
- Calendar events you choose to connect from Apple Calendar (event titles, times, locations) — read only, and only from the calendars you select on your device
We do not collect biometric data, precise geolocation, or reproductive-health-specific categories, and we do not use geofencing of any kind — including around care facilities or providers.
2. Consent — how collection works
- We collect consumer health data only after you give explicit consent on the in-app consent screen, shown before any health data is entered. The consent is a separate, affirmative act — never bundled into the Terms of Use and never pre-checked.
- Sharing with your care circle is separately authorized: when you invite a caregiver, sending the invite is your authorization to share that care recipient's records with that person, and we record when you gave it.
- We collect this data for one purpose: to provide Corda to you. We never sell consumer health data, never use it for advertising, and never share it for those purposes.
3. Who can access it
- The caregivers you invite to a care circle (until you or they remove membership).
- Service providers that host and operate Corda under contracts limiting them to providing services to us: Supabase (database, auth, storage), Vercel (API hosting), Google (calendar events you connect, push delivery), Apple (App Store, push notifications), Resend (transactional email), PostHog (de-identified product analytics — no health content, no advertising use).
- No one else, except when required by law, to protect rights or safety, or in a merger or acquisition (with notice to you).
Payment processing involves no consumer health data. If you subscribe to Corda, payment is processed by Apple’s In-App Purchase system and we verify the purchase directly with Apple. There is no separate billing provider. No consumer health data — none of the categories in Section 1 — is ever shared with Apple or included in any purchase or billing data.
4. Your rights
- Withdraw consent — Settings → Privacy & data → Withdraw consent. Because Corda cannot function without the health data the consent covers, withdrawal is carried out by deleting your account (below).
- Access — Settings → Privacy & data → Download my data returns a complete JSON export.
- Delete — Settings → Privacy & data → Delete my account immediately and permanently deletes your sign-in and every record that belongs only to you; records in circles shared with other caregivers remain with those caregivers. Backups purge on a rolling 30-day cycle. Individual records deleted in-app are permanently purged within 30 days.
- Appeal — if we deny a request, reply to our decision email; we will respond within the timelines your state's law requires. Washington residents may also contact the Washington Attorney General.
We do not discriminate against you for exercising any right.
5. Requests and contact
Email legal@meetcorda.com from the address tied to your account. We acknowledge within 10 business days and respond within 45 days (extendable once by 45 days with an explanation).