Last updated: July 22, 2026
This is a separate consumer health data privacy policy required by Washington Law. For information about Suvi Health’s broader privacy practices, please review the Suvi Health Privacy Policy.
This Washington State Consumer Health Privacy Policy (“MHMD Policy”) describes how Suvi Health, Inc. (d/b/a “Suvi Health”) collects, uses, and shares consumer health data covered by Washington’s My Health My Data Act (“Washington Law”) through its website www.suvi.health and the Suvi Health platform and related services (together, the “Services”). This MHMD Policy applies only to consumer health data collected directly from users of the Services or visitors to our website, including information a user directly provides, submits, or records through the Services, which may include information collected from such user’s interactions with healthcare providers, family members, or caregivers. This MHMD Policy does not apply to your medical records or other health information that we handle on behalf of a hospital, healthcare provider, or other covered-entity customer of Suvi Health. In particular, it does not cover protected health information (PHI) or any other information that Suvi Health receives from those customers or processes as a HIPAA Business Associate, or that is otherwise exempt from Washington Law. That information is instead governed by HIPAA and the privacy practices of the applicable healthcare provider or other covered entity.
NOTE: You are responsible for obtaining any consent, permission, or authorization required by applicable law from any third party whose personal information you collect, submit, or record using the Services.
“Consumer health data” means personal information that is linked or reasonably linkable to a consumer and identifies the consumer’s past, present, or future physical or mental health status, including any information derived or extrapolated from non-health information (such as proxies, derivatives, inferences, or emergent properties) that is used to identify such health status. Depending on what you choose to provide and how you use the Services, we may collect: (i) health-related information you enter or submit through forms, questionnaires, chatbot, voice-agent, messaging, or support interactions; (ii) care-conversation audio recordings, transcripts, summaries, follow-up tasks, and related outputs when you initiate or use those features; (iii) identifiers, contact details, account information, and caregiver or care-network information that are linked or reasonably linkable to your health status; (iv) website, device, usage, and log information that is linked or reasonably linkable to your health status or use of health-related Services; (v) inferences drawn from any of the foregoing, including derived insights, summaries, or predictions about your health status that we generate through your use of the Services; and (vi) location information where required to support ambient activation of voice features.
We collect this data directly from you and, in some cases, from third parties of your choice (e.g., family members, caregivers, healthcare team members), and through your use of the Services (e.g., using cookies, tokens, local storage, log files, and similar technologies, as described below). Consumer health data covered by this MHMD Policy does not include information Suvi Health receives from hospitals, healthcare providers, or other covered-entity customers of Suvi Health, including protected health information (PHI) or other information Suvi Health processes as a HIPAA Business Associate.
We collect and use consumer health data only as reasonably necessary to provide the Services and features you request; create and manage your account; respond to your inquiries and provide support; personalize and improve health-related features; conduct internal analytics regarding use and performance of the Services; protect the safety, security, and integrity of the Services; and comply with applicable law. We will obtain consent before collecting or using consumer health data for any purpose not described here, as required by Washington Law.
We may share any of the categories of consumer health data described in Section 1.2 when reasonably necessary for the purposes described there. We do not sell consumer health data. Recipient categories are:
To exercise any right described in this MHMD Policy, submit a request by email or mail using the information below. Please provide enough information for us to authenticate your request using commercially reasonable efforts. We will respond to your request within 45 days of receipt. When reasonably necessary, we may extend this period by an additional 45 days, in which case we will inform you of the extension and the reason for it within the initial 45-day period. You may also use these methods to ask questions about this MHMD Policy.
We may update this MHMD Policy as required by Washington Law and will post the revised version on our website.
