Health Data Privacy Policy

This policy is provided in good faith to describe our current practices and is written to address Washington State's My Health My Data Act and similar consumer health data laws.

1. What This Policy Covers

This Consumer Health Data Privacy Policy applies specifically to health data you choose to connect to Peerhood — today, that means data read from Apple Health (via HealthKit), including vitals and wearable data (steps, heart rate, sleep, workouts, body measurements, and similar) and, if available on your device, Clinical Records (lab results, medications, allergies, conditions, immunizations, and procedures synced from a healthcare provider's patient portal into the Health app). We may add additional, optional health data sources in the future. This policy is separate from and in addition to our general Privacy Policy, which covers the rest of the app.

2. Consent

We only collect health data after you take an affirmative action to connect a source (e.g., tapping "Connect" on the Health tab) and confirm an in-app consent prompt describing what will be collected. Apple's own permission sheet, which lets you choose which specific data types to share, is a separate step that follows our consent prompt. You may decline either step, in which case no health data is collected.

We do not collect, use, or share your health data for any purpose beyond what is described in this policy without asking for your consent again first.

3. What We Collect

• Vitals and wearable data: e.g., steps, heart rate, heart rate variability, sleep, workouts, body measurements, and symptom logs you record in Apple Health.
• Clinical Records (if present on your device and you authorize them): e.g., lab results, medications, allergies, conditions, immunizations, and procedures, stored in the standard FHIR format Apple provides.

4. How We Use It

We use your health data to power Scout — Peerhood's tool for helping you understand patterns and changes in your health data over time. We do not use your health data for advertising, and we do not sell it.

5. Sharing

We do not sell your health data. We do not share it with third parties for their own purposes. It is stored in our backend infrastructure (Google Cloud/Firebase) to provide the Services described above. If we add new health data sources in the future, this policy will be updated first, and connecting those sources will require your separate, affirmative consent.

6. Your Rights

You can, at any time, from the Health tab in the app:

• Access the health data Peerhood has stored, by viewing it in the app.
• Withdraw consent and delete all health data Peerhood has stored for you, by tapping "Disconnect Apple Health." This permanently removes the stored records.

If you'd rather exercise these rights by contacting us directly, email legal@peerhood.co. We will respond within 45 days.

7. Security

Health data is encrypted in transit and at rest using our cloud provider's standard encryption. Access is restricted to server-side systems that write and audit this data on your behalf — the data is never written directly from the app; every write and delete is logged.

8. Data Retention

We retain your health data until you disconnect the source and delete it, or until you delete your Peerhood account, whichever comes first.

9. Geofencing

Peerhood does not use geofencing (or any other technology) to identify or track users near health care facilities.

10. Changes to This Policy

If we materially change what health data we collect or how we use it, we will update this page and, where required, ask for your consent again.

11. Contact Us

Questions about this policy or your health data: legal@peerhood.co