Consumer Health Data Privacy Policy
Last updated: August 6, 2026
This policy is provided by MyloTech, Inc. (“Mylo,” “we,” “us”) under the Washington My Health My Data Act, and applies to consumer health data we collect about Washington residents and about residents of other states with comparable consumer health data laws, including Nevada and Connecticut. It describes only consumer health data. Everything else is in our Privacy Policy.
1. Categories of consumer health data we collect
| Category | What it includes |
|---|---|
| Health conditions, symptoms, and status | Symptoms you record, conditions you tell us about, how you say you feel, and the severity or frequency you report. |
| Interventions and treatments | Supplements, medications, diets, and protocols you are running, including doses and your adherence to them. |
| Bodily functions and vital signs | Sleep, heart rate, heart-rate variability, activity, respiratory measures, body measurements, and continuous glucose readings, where you connect a device that provides them. |
| Diagnostic and laboratory testing | Lab panels you upload or order through the app, and the values in them. |
| Diet and consumption | Meals you log, including photographs of food and information derived from them. |
| Reproductive and gender-related health | Menstrual-cycle information, only where you choose to record it or connect a device that supplies it. |
| Information that identifies you seeking health services | The fact that you use Mylo, that you have connected to a participating practice, and appointment or protocol-review activity within the app. |
We collect a category only where you supply it or authorize a connection that supplies it. Mylo does not require you to provide any particular category in order to use the app.
2. Sources of consumer health data
- Directly from you, when you enter information, speak to the app, upload a document, or photograph a meal.
- From devices and health apps you connect, such as Apple Health, a wearable, or a continuous glucose monitor — only the categories you authorize.
- From laboratories, where you order a panel through the app or upload a result.
- From a healthcare practice, where you have affirmatively connected your account to that practice.
3. Why we collect it, and how we use it
We collect and process consumer health data for a single purpose: to provide the service you asked for — to organize your health information, track the protocols you are running, tell you whether they appear to be working, and, if you have connected to a healthcare practice, make that information available to that practice.
Specifically, we use consumer health data to:
- Generate the responses, summaries, and explanations you request;
- Calculate your trends, charts, adherence, and protocol results over time;
- Send the reminders and notifications you set up;
- Surface to a clinician you have connected to that a protocol may not be working, for that clinician to review;
- Keep the service secure, available, and working correctly.
We do not sell consumer health data. We have never sold it and we do not offer it for sale.
We do not use consumer health data for advertising or marketing. We do not share it with advertising platforms or advertising networks, and we do not use it to build advertising audiences. Advertising technology, including the Meta Pixel, exists on our marketing website only and never receives consumer health data.
We do not use consumer health data to train artificial-intelligence models, and our agreements with our AI providers prohibit them from doing so.
4. Who we share consumer health data with
We share consumer health data only with the service providers below, each bound by contract to process it solely to provide services to us, and with a healthcare practice where you have affirmatively chosen to connect:
| Recipient | Purpose |
|---|---|
| Convex | Database and backend hosting. Stores consumer health data, encrypted in transit and at rest. |
| Google LLC (Gemini) and Anthropic, PBC (Claude) | Generate the app's responses. Relevant portions of your data are transmitted to produce your answer, under agreements that prohibit training on your data. |
| Junction (Vital) | Connects wearable devices and laboratory results, only where you connect a device or order a panel. |
| Clerk | Account identity and authentication. Receives account identifiers, not health data. |
| A healthcare practice you connect to | Receives the consumer health data you affirmatively agree to share with that practice, so it can follow your progress between visits. |
We may also disclose consumer health data where required by law, or to protect the rights, property, or safety of you or another person. We have no affiliates with which we share consumer health data.
5. Your rights
You have the right to:
- Confirm and access — confirm whether we are collecting, sharing, or selling your consumer health data, and access that data, including a list of all third parties with whom we have shared it and contact information for each.
- Withdraw consent — withdraw your consent to our collection and sharing of your consumer health data.
- Delete — have your consumer health data deleted. On a deletion request we delete the data from our records and notify our service providers to do the same.
To exercise any of these rights, email privacy@mylotech.org. You may also delete your account directly in the app, under Settings.
We will respond within 45 days of receiving your request. If we need more time, we will tell you within that period and may extend once by a further 45 days. We will not charge you for exercising these rights, and we will not discriminate against you for doing so.
6. How to appeal
If we decline your request, we will tell you why and how to appeal. To appeal, reply to our response or email privacy@mylotech.org with the subject line “Appeal.”
We will respond to your appeal in writing within 45 days, explaining the reasons for our decision. If we deny your appeal, we will provide you with a method to contact the Washington State Attorney General to submit a complaint. You may submit a complaint at atg.wa.gov/file-complaint.
7. Contact
MyloTech, Inc. — privacy@mylotech.org