Consumer Health Data Privacy Policy

1. Who this page is for

This is our Consumer Health Data Privacy Policy. It is written for people who live in Washington, Nevada and Connecticut, whose laws give health data extra protection. We follow it for everyone, wherever you live. Our Privacy Policy covers everything else.

Neurotoned is run by Neurotoned LLC, a Delaware limited liability company, 8 The Green STE B, Dover, DE 19901. To ask anything about this page, email support@neurotoned.com.

2. The health data we collect

Health data is information about your body or mind, or that could say something about it. This is what we collect that could count. All of it comes from you or from how you use Neurotoned. We do not buy health data about you from anyone.

• Your quiz answers. Our quiz asks how you feel and what you want help with. We keep your answers, including anything you type in a free-text box. From them we work out a short list of focus areas, such as grief or muscle tension.
• What you tell the Guide at /guide. It asks what you are going through and works out the same kind of focus areas. We keep the chat.
• Your daily check-ins. You rate your energy, calm and mood from 1 to 5. We keep your ratings and a one-word summary of your state: regulated, activated or depleted.
• What you type to our other AI assistants. That is the Guide in the member area and the chat on our public pages. We keep these chats.
• Your programs and progress. The programs you buy and join, the videos you watch and finish, your favorites and your streak.
• Live sessions. That you joined, and any comments or ratings you leave. Sessions can be recorded. If your camera or microphone is on, your face and voice may be in the recording. We also make a written transcript and notes from each recording.
• Practice partner preferences, if you opt in to be matched with a partner: your gender, your age range and the program you focus on.
• Anything about your health you choose to tell us in the community, in an email to support, on a call with our team, or in a note to a practitioner you book.

3. Why we collect it

• To suggest practices and programs that fit what you told us.
• To run your programs, and show your progress and your streak.
• To answer you when you chat with us or write to us.
• To run live sessions, and let members watch the replay with a transcript and notes.
• To match you with a practice partner, if you ask for one.
• To make the quiz, the Guide and our programs better, mostly from summaries across many people.

We never send your quiz answers, check-ins, chats or progress to Meta or use them to choose which ads you see. We do not sell your health data.

4. Who receives it, and what each gets

• Supabase stores all of it. It is our database.
• Vercel hosts our website and app. Everything you send us passes through it.
• Anthropic makes Claude, the AI behind our assistants. It gets what you write to the Guide in the member area, to the chat on our public pages, and to the Guide at /guide. In the member area it also gets your name, your plan, which programs you are in and, when you ask about it, your progress. It may get the emails you send support, so it can draft a reply. If you are matched with a practice partner, it gets your focus areas, with no name, to write a short note about the match. Anthropic's commercial terms say it may not train its AI models on what we send it.
• Google gets live session recordings, which its Gemini AI turns into the transcript and notes. Our support mailbox runs on Gmail, so Google also holds the emails you send support.
• LiveKit runs live sessions. It carries the sound and video, including yours if your camera or microphone is on, and makes the recording.
• Bunny streams our videos, and may stream session replays. It sees which video your device asks for.
• Resend sends our emails. Some of them mention your programs or a live session.
• DashFi measures visits to our website when you use it in a browser. It can see the address of the page you open, including member pages, which can name a program. It does not run in the iOS app.
• Slack, our team's chat tool, gets alerts that can name what you bought.
• Meta gets only what section 5 lists.
• A practitioner you book gets what you write for them. They get your focus areas only if you tick the box to share them for that booking. They never get your quiz answers.
• Other members see what you post in the community, and what you say or show in a live session, including in its replay.
• Our team. A small number of people on our team can see your records to help you. For example, the person who calls you on a welcome call can see your quiz answers.

These companies handle your data to provide their service to us. Our Privacy Policy lists them in more detail.

5. What Meta gets, and what it never gets

We advertise on Facebook and Instagram, which Meta owns.

• From our public website pages: Meta's pixel tells Meta which page you opened. On a program's sales page, that page's address and our server's report of the visit name the program. The pixel does not run in the member area, in live session rooms, or in the iOS app.
• From our server: that you started a checkout, signed up (for example after our quiz), bought something or got a refund. With it go the amount, the page it happened on, which can name the program, and your contact details. Your email, phone, name and location are hashed, which means turned into a code, before they leave us. Your IP address and browser details are sent too.

Meta never gets your quiz answers, your focus areas, your check-ins, your chats with our assistants, your progress in a program, your live session recordings or what you post in the community.

To stop it. Turn on Global Privacy Control in your browser. When your browser sends it, our website does not load Meta's pixel, and our server sends Meta no event about you. Or email support@neurotoned.com with the subject "Do Not Sell or Share My Personal Information".

6. Your rights

• Know and see it. Ask whether we collect or share your health data. Get a copy of it, and a list of every company above that received it.
• Correct it. Ask us to fix anything that is wrong.
• Delete it. Ask us to delete your health data.
• Withdraw your consent. Tell us to stop collecting and using your health data. We stop and delete it, as for a deletion. The parts that use it, like the practices we suggest for you, then become less personal.

Using these rights costs nothing, and we will not treat you worse for it.

7. How to use them

By email. Write to support@neurotoned.com from the email address on your account, with "Health data request" in the subject. We check that the request comes from you. We answer within 45 days. If we need more time, we tell you why, and the law lets us take up to 45 more days.

In the app. Go to Profile, then Delete account. That removes at once your quiz answers and focus areas, your check-ins, your program and video progress, your favorites and streak, your community posts and comments, your /guide chat, your practice partner preferences and your call bookings. Your name and email are taken off the account.

The button does not yet remove your chats with the Guide in the member area or on our public pages, your live session attendance, comments and ratings, or recordings you appear in. Email us and we delete those too. A record of what you paid stays for tax reasons.

If we say no. If we turn down any part of your request, we tell you why. You can appeal by replying with the word "Appeal". We answer an appeal within 45 days. If you are still not happy, you can contact the attorney general of your state.

8. Changes

If we change what health data we collect, why, or who receives it, we change this page first and update the date at the top.