Washington Consumer Health Data Privacy Policy
Version v0.5 | Effective date 12 September 2026
This policy describes how Communication Band Ltd, operating Ottavia, collects, uses and discloses consumer health data subject to the Washington My Health My Data Act. It applies to Washington consumers and is separate from Ottavia's general Privacy Policy, available at https://ottavia.band/privacy-policy.
1 Consumer Health Data We Collect
| Category | Purpose and use |
|---|---|
| Health, wellbeing and lifestyle information | To create and maintain the health profile and provide guidance requested by the user. This may include sleep, activity, fitness, nutrition, mood, habits, symptoms, reproductive-health information and other information the user chooses to provide. |
| Connected health and fitness information | To import and use information the user authorizes from Apple HealthKit, Android Health Connect, Garmin or other connected services. |
| Conversation and submitted content | To respond to text, voice, photo or document inputs and provide requested guidance. |
| Health-related inferences and generated interaction data | To personalize and provide requested Ottavia features, including information inferred from profile data and interactions. |
| Technical information linked to health use | To secure, operate and troubleshoot the Service where device, account or diagnostic information is reasonably capable of being linked to consumer health data. |
2 Sources
- You, including information you enter, upload, say or otherwise provide.
- Connected services that you authorize, including Apple HealthKit, Android Health Connect, Garmin and similar services.
- Your use of Ottavia, including interactions and health-related information generated or inferred when providing the requested Service.
- Service providers that process information on our behalf and return results needed to operate the Service.
3 Consumer Health Data We Disclose
We do not sell consumer health data. We do not disclose consumer health data for targeted advertising. We disclose consumer health data only as needed to provide a feature you request, operate and secure the Service, comply with law, or where you give any additional consent required by law.
| Recipient category | Data and purpose |
|---|---|
| AI and transcription processors, including OpenAI | Profile, conversation, voice, image or document information needed to generate the response or transcription requested by the user. |
| Cloud hosting and database processors, including Amazon Web Services and MongoDB Atlas | Account, profile, health-related content and service records needed to host, store and operate Ottavia. |
| Connected health platforms selected by the user | Health or fitness information exchanged at the user's direction to provide the connected feature. |
| Security, diagnostics and notification processors | Technical identifiers and diagnostic information needed to secure, troubleshoot and operate the Service. Push payloads contain only an opaque identifier and neutral fallback text. The displayed message is assembled on your device; no health, wellbeing or other message content is sent to OneSignal, Apple or Google. |
| Professional advisers, authorities or transaction counterparties | Only where reasonably necessary and permitted by law, including legal compliance or a qualifying corporate transaction. |
Specific affiliates receiving consumer health data: none.
Anthropic may process selected consumer health data for limited quality or safety evaluation only where permitted by law and after any affirmative consent required for that separate purpose has been obtained. You may withdraw that consent using the method presented with the consent or by contacting support@ottavia.band.
4 Your Rights
- Confirm whether we collect, share or sell your consumer health data and access that data, including a list of all third parties and affiliates with whom it was shared or sold and an active email address or other online mechanism you may use to contact them.
- Withdraw consent from future collection or sharing based on consent.
- Request deletion of your consumer health data, subject to applicable legal limitations and permitted backup timing.
- Appeal if we refuse to act on a request.
Submit a request or appeal to support@ottavia.band. You do not need to create a new account, although we may ask you to use an existing account or provide information reasonably necessary to authenticate the request. We will respond to a request without undue delay and within 45 days after receipt, subject to one legally permitted 45-day extension. Requests are free up to twice per year unless applicable law permits otherwise. We will respond to an appeal in writing within 45 days after receipt. If an appeal is denied, we will explain the decision and provide a method to contact the Washington Attorney General.
5 Changes to This Policy
We will post material changes conspicuously as required by law. We will not collect, use or disclose additional categories of consumer health data, or use consumer health data for additional purposes, without first making the required disclosure and obtaining affirmative consent where required.
6 Contact
Communication Band Ltd, 188 Brent Street, London NW4 1BE, United Kingdom. Email: support@ottavia.band.