Consumer Health Data Privacy Policy

1. Purpose of This Policy

Grace Unworthy Ministries, LLC ("we," "our," or "us") provides this Consumer Health Data Privacy Policy for information that may be treated as consumer health data, sensitive wellness data, or related personal information under laws such as Washington's My Health My Data Act (MHMD) and similar state statutes. This document applies to the properties listed in our Covered Properties notice, which is incorporated by reference.

This policy supplements our Privacy Policy, GDPR & UK GDPR Privacy Notice, and Data Deletion & Retention Policy. Where those documents conflict with this one on a point about health or wellness data, this policy controls for that point.

2. Categories That May Be Consumer Health or Wellness Data

Depending on what you choose to share and which products you use, the following may include or reveal consumer health, mental health, or wellness information:

• Journals and reflective writing you create in our apps or courses, including entries that discuss health, trauma, grief, or recovery.
• GuidedSteps and program responses that capture prayer, reflection, accountability notes, and category scores (we do not currently store a named "mood" score).
• Prayer and pastoral care requests that disclose physical or mental health circumstances.
• Safety and trauma-related scores generated for moderation or routing (see our AI & Automated Moderation Notice).
• Abuse, self-harm, or crisis disclosures in posts, comments, or messages that we process for safety.
• Voice notes and private messages whose content or transcripts reveal health information (see our Voice Transcription Notice).
• Optional profile fields that you voluntarily provide about health, disability, or related topics.

We do not operate as a covered entity under HIPAA for these consumer products. Content you write is not medical advice, diagnosis, or treatment.

3. Sources

• You, when you create journals, posts, messages, or program entries.
• Automated systems that score or transcribe content for safety and feature delivery (OpenAI, AssemblyAI, and similar processors described in our Privacy Policy).
• Moderators and support staff who review flagged content when necessary for safety or legal compliance.

4. Purposes of Use

• Feature delivery: storing and displaying your journals, GuidedSteps progress, and related tools you ask us to provide.
• Community and pastoral features: prayer lists and care workflows where you intentionally submit content.
• Safety and trust: detecting abuse, self-harm risk, illegal content, and Community Guidelines violations.
• Support and legal: responding to your requests, defending claims, and complying with valid legal process.

5. Sharing and Processors

We share this data with service providers who process it on our instructions (hosting, AI moderation, transcription, email/SMS, analytics infrastructure). We do not sell consumer health data for money. Cross-context advertising technologies on our marketing sites are described in our Privacy Policy and Notice at Collection; those tools should not receive journal, prayer, DM, or transcript content.

6. Retention

We keep health- and wellness-related content only as long as needed for the purposes above, account operation, safety investigations, and legal obligations. When you delete an entry or your account under our Data Deletion & Retention Policy, we delete or de-identify associated content according to that policy, subject to backups and legal holds.

7. Your Rights and How to Exercise Them

Subject to applicable law, you may request access, correction, deletion, or a copy of consumer health data we hold about you by emailing [email protected]. We verify identity before fulfilling requests. There is currently no self-service health-data portal.

We do not yet automatically honor Global Privacy Control (GPC) signals, and we do not geofence consumer-health features by state. Cookie and sale/share choices are described on our Privacy Choices.

8. Related Notices

• Privacy Policy — full collection and use practices
• GDPR & UK GDPR Privacy Notice — EEA/UK/Swiss special-category and rights detail
• AI & Automated Moderation Notice — automated safety scoring
• Voice Transcription Notice — voice notes and DMs
• Data Deletion & Retention Policy — deletion and retention