Consumer Health Data Privacy Policy

Effective and last updated: July 30, 2026

1. Consumer health data we collect

Consumer health data is personal information that identifies or can reasonably be linked to a person and reveals or can be used to infer that person's physical or mental health. Depending on what you choose to discuss or use, Backsie may collect or generate:

• Your descriptions of emotions, mental wellbeing, physical sensations, sleep, eating, routines, stress, exhaustion, relationships, sexuality, medications, care, diagnoses, or other health-related circumstances.
• Conversation messages, confirmed text extracted from screenshots, speech-to-text transcripts, and feedback that contain health or wellbeing information.
• AI-generated Mental Checkpoints, Insight Cards, patterns, summaries, suggested next steps, conversation-memory nodes, safety classifications, and other inferences based on what you tell Backsie.
• Actions involving health-related content, such as saves, reactions, reports, read-aloud requests, and a decision to publish or share a card.

Backsie does not require you to disclose a diagnosis or medical record. You control what you choose to enter, attach, dictate, confirm, publish, or share.

2. Sources of consumer health data

We collect consumer health data directly from you; from your use of conversations and reflection features; from screenshots, transcripts, and feedback you choose to submit; from AI systems that create inferences from your submitted content; and from other users only when they interact with content you have chosen to publish.

We do not purchase consumer health data from data brokers or use cross-site advertising trackers to build health profiles.

3. Why we collect and use it

We collect and use consumer health data only as reasonably necessary to:

• Provide the conversation, reflection, memory, Mental Checkpoint, Insight Card, pattern, safety, screenshot, speech, read-aloud, export, and user-directed sharing features you request.
• Maintain context and continuity and retrieve relevant prior information when needed.
• Operate, secure, debug, support, and improve those features and protect users and the Service.
• Moderate reports and community content that you choose to publish.
• Comply with law and valid legal process.

If we want to collect or use consumer health data for a materially different purpose, we will update this notice and obtain any consent required by law before doing so.

4. Consumer health data we disclose

We disclose consumer health data only at your direction, as needed to provide the Service, or for the legal and security purposes described below:

• AI and infrastructure processors: Amazon Web Services; LangChain's LangGraph and LangSmith services; Anthropic; and OpenAI process relevant content for hosting, thread continuity, AI inference, screenshot text extraction, tracing, and read-aloud generation.
• Device and platform providers: Apple, Google, browser, or operating-system providers may process speech or device data when you use their authentication, speech-recognition, notification, sharing, or distribution services.
• Backsie personnel and contractors: authorized people may access limited information when needed for support, security, debugging, abuse prevention, or report review and are subject to confidentiality and access controls.
• At your direction: when you publish an Insight Card, use a public share link, export or share a PDF, or use your device's share controls.
• Legal and security purposes: when reasonably necessary to comply with law or valid legal process, protect rights and security, investigate abuse, or address a credible threat.
• Business transactions: in a financing, acquisition, merger, reorganization, bankruptcy, or asset sale, subject to applicable legal safeguards.

We do not sell consumer health data. We do not provide it to data brokers or use it for cross-context behavioral advertising. No person or entity currently purchases consumer health data from Backsie.

5. Community and public sharing

Conversations and generated reflections are private by default. If you explicitly publish a card or create a public share link, the health-related content in that card can be viewed, copied, or reshared by other people. "Anonymous" sharing hides your profile identity from the public; it does not make the post anonymous to Backsie while your account is active because we keep an internal link for ownership, moderation, safety, and deletion.

Before publishing health-related content, consider whether the card contains details that could identify you or someone else. Backsie cannot retrieve copies made outside the Service.

6. Your consumer health data rights

Subject to applicable law and verification, you may:

• Confirm whether Backsie collects, uses, or discloses your consumer health data and access that data.
• Request a list of categories of affiliates, processors, or other third parties with which it has been disclosed and obtain their contact information where required.
• Withdraw consent or ask us to stop collecting or sharing consumer health data for an optional purpose.
• Request deletion of consumer health data held by Backsie and, where required, request deletion from processors.
• Appeal our refusal to act on a request.

You can delete your account from in-app settings or submit a request or appeal to hello@backsie.co. We may need to verify your identity and an authorized agent's authority. We will not discriminate against you for exercising a right.

When deleting your account, you may choose whether already-published community cards are removed or retained as de-identified public content. If you ask us to retain a published card, its account and private-source associations are removed. If you want all consumer health content deleted, choose to delete those published cards as part of the account-deletion flow.

7. Retention and security

Consumer health data is generally retained while your account is active unless you delete it sooner. LangGraph thread copies are configured to expire after up to approximately 60 days for ordinary continuity. Account deletion requests deletion of account-linked application data, AI threads, and traces, subject to temporary protected backups, legal requirements, minimal deletion receipts, content you direct us to retain, and copies made outside Backsie.

We use safeguards designed to protect consumer health data, including encryption in transit, encryption at rest where supported, access controls, authentication, environment separation, and deletion workflows. No safeguard can guarantee absolute security.

8. Changes and contact

We may update this notice as the Service or law changes. We will change the effective date and provide additional notice or request consent when required. Material changes apply prospectively.

Questions, requests, complaints, or appeals may be sent to:

Backsie Inc.
hello@backsie.co
1811 Silverside Road
Wilmington, DE 19810
County of New Castle, United States