Effective August 28, 2026. Constellate Health, Co. (“Constellate,” “we”) provides this policy for consumer health data covered by Washington's My Health My Data Act, Nevada's Consumer Health Data Privacy Law, and similar laws. Our general Privacy Policy describes our other practices.
What consumer health data we collect
We collect the following, as needed to provide the service you have asked for:
- Information about your health conditions, symptoms, diagnoses, testing, and treatments, including procedures and medications;
- Information about medications prescribed to or used by you;
- Measurements of bodily function, vital signs, and laboratory results;
- Information about allergies and immunizations;
- Records of your visits to health care providers, and clinical documents and imaging reports held by them;
- Information you tell us directly about your own health history;
- Information that identifies your having sought health care services or information; and
- Information we derive or infer from the above, including the organized health picture we build for you.
Why we collect it
To provide the service you have requested: to assemble your records into a single, source-attributed picture of your health history, to let you ask questions about it, to keep it current, to identify and show you, within the product, research studies and clinical trials that may be relevant to your conditions, and to operate and secure the service.
Where it comes from
Two sources: directly from you, when you answer questions or upload a document; and from health care providers and health information networks, when you authorize them to release your records to us.
What we share, and with whom
We do not sell consumer health data, and we never share it with advertisers or use it for advertising. We do not share it with third parties for their own use, and we have no affiliates with whom it is shared. The only parties that handle it are service providers that process it on our behalf to operate the service (such as hosting, records retrieval, and model inference providers), under contracts that prohibit any other use, and government authorities where a law, court order, or valid legal process requires disclosure.
Part of our mission is advancing research. In the future, we may offer you the option to contribute de-identified data to research into autoimmune and immune-mediated conditions, including research conducted with life sciences and pharmaceutical companies. That would happen only with your separate consent, and would never be a condition of using Constellate. Any de-identified data we process is maintained and used only in de-identified form; we do not attempt to re-identify it, and we require the same commitment from anyone who receives it.
Your rights
You may confirm whether we collect consumer health data about you and access it; withdraw the consent you gave us to collect it; and delete the data we hold, including records we retrieved on your behalf. To exercise any of these rights, email privacy@constellate.health. We may need to verify your identity, and we will use the verification information only for that purpose.
If we deny your request, you may appeal by replying with “appeal” in the subject line. If your appeal is unsuccessful, you may raise a concern with the Washington State Attorney General at atg.wa.gov/file-complaint, the Nevada Attorney General at ag.nv.gov/complaints/file_complaint, or your state's regulator.
Contact
privacy@constellate.health · Constellate Health, Co., a Delaware corporation.