Consumer Health Data Privacy Policy

This policy describes how VerseMine (operated by Kreyman Enterprises, LLC) handles "consumer health data" as defined by Washington's My Health My Data Act (RCW ch. 19.373) and similar state consumer-health-data laws. It is separate from, and in addition to, our general Privacy Policy. It covers only consumer health data.

What consumer health data we collect

VerseMine collects consumer health data only if you use our AI assistant (an optional spiritual-guidance chat). If you use it, we may collect:

• the messages you send and the assistant's replies. We do not keep the text of these on our servers. It is stored on your device, and deleting a conversation in the app removes it from there. Each time you send a message, that message and a recent part of the conversation are sent to our servers and on to our AI provider only to produce the reply;
• records about the conversation, not its content — that a group guidance session happened, when, and the display names participants chose; raw group-session audio for about 30 days; and content-free safety records noting that a crisis resource was shown, the date, and the type of concern. None of these contain message text; and
• if you turn on conversation memory, information derived from those conversations about your spiritual walk and personal struggles, which may relate to your emotional, mental, or spiritual well-being. Conversation memory is turned off for accounts in the current release, so nothing of this kind is created today. If it is enabled for your account, the derived information is stored on our servers, and personal names and places are replaced with placeholders before it is stored.

Cross-conversation context is different. If you turn on the optional cross-conversation context setting (or ask the assistant what you said in an earlier conversation), short excerpts of your prior conversations — read from the copy on your device — are included with your request so the assistant can respond with that context. Those excerpts reach our servers and our AI provider along with the request, as every message does, but VerseMine's servers do not store them, do not store anything derived from them, and this setting does not create or store any profile about you. Crisis-related conversations are never included. You can turn the setting off at any time.

We do not collect consumer health data unless you use the AI assistant. If you never use it, we collect no consumer health data about you.

Where we collect it from

We collect it directly from you — from the messages you write in the app. We do not collect consumer health data from any other source, and we do not buy it, rent it, or receive it from any third party.

Why we collect it

Solely to provide the AI assistant to you — to generate its responses and, if you enable conversation memory, to let it remember your prior conversations and continue them. We do not use it for advertising, we do not use advertising or analytics trackers on the assistant, and we never sell it.

What is never collected or stored

If a message indicates a crisis, VerseMine surfaces the 988 Suicide & Crisis Lifeline (or a local resource) instead of normal guidance. Messages caught by our first-line crisis check are never stored. If crisis signs emerge during a conversation, the affected messages are flagged and excluded from search, summaries, memory, and every other derived feature.

How it is shared

We do not share consumer health data with any third party. Service providers process it on our behalf, only to provide the assistant, under contracts that restrict their use of it:

• our AI provider, to generate responses and run safety checks — contractually barred from training its models on your content; and
• our hosting providers, to run the servers that handle your requests and to store the records about the conversation described above. They do not store the text of your conversations, because we do not keep it.

List of third parties with whom we share consumer health data: none. (Service providers processing data on our behalf under the contracts above are not third parties.)

Your rights

You may ask us to:

• confirm whether we collect consumer health data about you, and access it. An access response cannot include the text of your conversations, because we do not hold it — you can read that on your device in the app;
• withdraw your consent to our collection and use of it — this stops further collection without deleting your account; and
• delete it. We delete what we hold on our servers, including copies in our backups. We cannot delete the text of your conversations, because we do not hold it: that copy is on your device, and you remove it by deleting your conversations in the app or removing the app and its data. On iPhone, newer versions of the app ask iOS to leave the conversation store out of iCloud Backup; that is a request to the system, not a guarantee, and earlier versions did not make it. A device backup — iCloud or Google — may still hold a copy under Apple's or Google's terms rather than ours.

To exercise any of these, use Settings → AI & Privacy in the app, or email privacy@versemine.app. We will respond within 45 days (extendable once by another 45 days where reasonably necessary, with notice to you). You may authorize another person to make a request on your behalf.

Appeals

If we decline a request, reply to our response and we will review the decision. You may also contact your state Attorney General.

Changes

We will update this policy and request your consent again before collecting or using consumer health data for any new purpose.

Contact: Kreyman Enterprises, LLC — privacy@versemine.app