Privacy & Data

Consumer Health Data Privacy Policy

Required disclosures for consumer health data under Washington's My Health My Data Act, Nevada's consumer health data law (NRS 603A), and similar state laws.

Effective date: July 8, 2026

This Consumer Health Data Privacy Policy explains how Veyda, LLC ("Veyda," "we," "us") collects, uses, and shares consumer health data, and the rights you have over it. It supplements our Privacy Policy and applies to consumer health data as defined by Washington's My Health My Data Act, Nevada's consumer health data law (NRS chapter 603A), and similar state laws. If this policy conflicts with the Privacy Policy on consumer health data, this policy controls.

Our position in one sentence: we collect health data only to run Veyda for you, we do not sell it, we never use it for advertising, and you can access, withdraw consent for, or delete it at any time.

Consumer health data we collect

Depending on what you choose to share or connect, we collect these categories of consumer health data:

health conditions, symptoms, diagnoses, medications, supplements, and health history
measurements from Apple Health and connected wearables and devices, such as activity, workouts, sleep, heart rate and other vitals, body measurements, temperature, blood oxygen, respiratory rate, and cycle tracking data
mood and state of mind entries
lab results and biomarkers
medical records you retrieve through our consented records connection or upload yourself
nutrition information, including foods you log and food photos
body composition results and progress photos you choose to add
genetic information you choose to provide
the health related content of your conversations with Sage
information derived from the above to personalize your experience, such as health insights and scores

We do not collect precise geolocation, and we do not use location data to identify attempts to obtain health services. We do not use geofencing around health care facilities, ever.

Sources

We collect consumer health data from:

you directly, through the app, conversations with Sage, onboarding answers, logging, and uploads
your device and connected services, with your permission, such as Apple Health, wearables, and connected health apps
your health care providers, only through the records connection you explicitly authorize
laboratory partners, if you order testing through Veyda
processing we perform to generate your insights

Why we collect it

We collect and use consumer health data for one purpose: to provide and personalize Veyda for you. That includes operating your Lifelong Health Record, generating Sage's guidance and insights, powering the health features you use, keeping your account secure, providing support you request, and meeting legal obligations.

We collect consumer health data with your consent, or as necessary to provide a product or service you have requested. We do not collect it for advertising, and we do not use it to market other companies' products to you.

We do not sell consumer health data, and we will not sell it. We do not share it for advertising. We do not currently have affiliates with whom we share consumer health data; if that changes, we will update this policy first.

Consumer health data is processed by service providers acting on our instructions under contracts that limit their use to providing services to us, in these categories: cloud infrastructure and database hosting; AI service providers that generate Sage's responses; wearable and device connectivity providers; laboratory partners for testing you order; nutrition recognition providers; communications providers that deliver the messages you have enabled; and support and diagnostics tooling. If you connect your medical records, the records network retrieves them at your direction under its own privacy policy, shown in the connection flow. Our Privacy Policy describes each category.

Beyond service providers, we disclose consumer health data only with your separate consent, at your direction, or where required by law. If we are legally required to disclose it, we will notify you where the law allows.

Your rights

Where these laws apply to you, you have the right to:

Confirm and access. Confirm whether we collect, share, or sell consumer health data about you, and access it, including a list of the third parties and affiliates we have shared it with and a way to contact each of them.
Withdraw consent. Withdraw your consent to our collection or sharing of consumer health data. You can disconnect sources in the app at any time, and withdrawal stops future collection from that source.
Delete. Have your consumer health data deleted, including from archives and backups within the timelines the law allows. When you make a deletion request, we also notify the service providers and any third parties that received your consumer health data, and they are required to honor the deletion.

To exercise these rights, use the controls in the app or email privacy@veyda.com from the email address on your account. We will verify your identity, respond within 45 days, and may extend once by 45 days for complex requests, with notice. Requests are free.

Appeals. If we decline a request, you may appeal by replying to our response; we will answer within 45 days of receiving your appeal. If your appeal is unsuccessful, you may contact your state attorney general:

Washington Attorney General: www.atg.wa.gov/file-complaint
Nevada Attorney General: ag.nv.gov/Complaints/File_Complaint

Nevada residents

Nevada's consumer health data law applies to personally identifiable information that we use to identify your health status. Our practices are the same in Nevada as described above: consent based collection, no sale of consumer health data, no advertising use, no geofencing of health care facilities, and the same access, withdrawal, deletion, and appeal rights, exercised the same way.

Changes and contact

If we change this policy materially, we will notify you as described in the Privacy Policy. Questions about consumer health data: