Consumer Health Data Privacy Policy

Consumer Health Data Notice for Washington and Nevada Residents

This notice is intended to serve as Atachy's consumer health data privacy notice where the Washington My Health My Data Act, Nevada consumer health-data law, or a similar state law applies.

Atachy is not a health-care provider and does not offer medical or mental-health treatment. Nevertheless, information users voluntarily provide through assessments, lifestyle fields, AI coach conversations, or safety features may reveal or permit inferences about mental, behavioral, emotional, reproductive, sexual, or other health-related matters and therefore may qualify as consumer health data under certain state laws.

Categories of consumer health data

Depending on what you choose to provide, Atachy may collect:

• Attachment-style assessment responses and results that reveal or infer psychological or behavioral characteristics.
• AI coach conversations concerning emotional or relationship matters.
• Inferences generated from those conversations.
• Safety-event information indicating that content may relate to self-harm or another safety category.
• Lifestyle or wellness information that you voluntarily provide.
• Family-planning information.
• Information concerning sexual or reproductive matters that you voluntarily provide.
• Other information that applicable law treats as consumer health data because it identifies or permits an inference concerning physical or mental health status.

Sources

Atachy obtains this information:

• Directly from you.
• From your activity within the Service.
• From assessment calculations.
• From AI-generated inferences based on information you provide.

Purposes

Atachy uses consumer health data, where applicable, to:

• Provide the assessment or AI coach feature you request.
• Personalize responses.
• If you choose to allow it, tailor AI coach guidance for users you have matched with, without showing them your results.
• Maintain conversation context.
• Provide user-directed profile features.
• Protect safety and investigate misuse.
• Maintain security.
• Comply with applicable law.

Atachy does not use this information to diagnose or treat a medical or mental-health condition.

Sharing

Where necessary to provide a feature you request, consumer health data may be processed by service providers, including:

• Anthropic, for AI relationship-coach processing.
• Microsoft Azure, for storage and application infrastructure.
• Resend, for emails you request that include your attachment-assessment result, including when they are sent automatically after you confirm your email following such a request, and for safety notifications to Atachy's moderation team.
• Namecheap, Atachy's email host, when we respond to a privacy request you make.

Atachy may also disclose consumer health data when legally required or reasonably necessary for safety, security, fraud prevention, or legal claims as permitted by applicable law.

Atachy does not sell consumer health data.

Consent

Where applicable law requires consent to collect or share consumer health data, Atachy will obtain the required consent before the covered activity unless an applicable statutory exception permits processing necessary to provide a product or service you requested.

Where a separate consent is legally required for sharing, Atachy will not rely solely on consent to collection.

Atachy asks for this consent on the sign-up form, as its own checkbox, separate from the Terms of Service and from the sensitive-data consent, with a link to its full text, and records the wording you agreed to and when. You cannot create an account without agreeing. You can withdraw it at any time in Settings; withdrawing stops new collection, and you can delete what is already saved by deleting your history or your account. Using your results to tailor AI coach guidance for users you have matched with requires a separate choice, described in Section 1.4 of our Privacy Policy, which is off unless you turn it on.

Consumer health data rights

Where applicable, you may have the right to:

• Confirm whether Atachy collects, shares, or sells your consumer health data.
• Access that data.
• Receive information about third parties or affiliates with whom it has been shared or sold.
• Withdraw consent to future collection or sharing.
• Request deletion.
• Appeal a refusal of a qualifying request.

Submit requests or qualifying appeals to privacy@atachyapp.com. We decide appeals within 45 days.