Consumer Health Data Privacy Policy

This Consumer Health Data Privacy Policy supplements the AttorneyAide General Privacy Policy and applies to "Consumer Health Data" as defined by the Washington My Health My Data Act (MHMDA) and similar state laws.

1. Categories of Consumer Health Data Collected

We collect only the data necessary to provide our medical record review and chronology services. This includes:

• Individual Health Conditions & Diagnoses: Information found within medical records uploaded by Law Professionals.
• Medical Interventions & Procedures: Records of surgeries, treatments, and clinical outcomes.
• Prescription Information: Data regarding medication use and history.
• Vital Signs & Measurements: Physical health data extracted from clinical notes.
• Inferred Health Data: Chronologies and summaries generated by our AI that "infer" health status or severity from raw medical data.

2. Sources of Consumer Health Data

We collect this data from the following sources:

• Directly from Law Professionals: When you upload medical records, files, or clinical notes to our platform.
• Automatically via the Platform: If you use our AI tools to generate summaries, we "collect" the resulting inferences.

3. Purpose of Collection and Use

We collect and use this data only as necessary to provide the service you have requested, specifically:

• To extract and organize medical data into chronologies.
• To provide AI-assisted summaries for legal review.
• To ensure the security and integrity of our platform.

Note: We do NOT use this data for advertising, marketing, or training foundation AI models.

4. Sharing of Consumer Health Data

We do not "sell" your health data. We only "share" (disclose) data to the following:

• Processors: Third-party service providers (e.g., Cloud Hosting, LLM API providers) who are contractually bound to process data only for the purpose of providing AttorneyAide services.
• Specific Affiliates:
• Parent company: Veridical Technologies LLC
• Legal Obligations: To comply with valid court orders or law enforcement requests.

5. Your Rights and How to Exercise Them

Under MHMDA, consumers (and the individuals whose data is uploaded) have the following rights:

• Right to Access: You may request confirmation of whether we are processing your health data and a list of third parties with whom it has been shared.
• Right to Withdraw Consent: You may withdraw your consent for future processing at any time.
• Right to Deletion: You may request that we delete your consumer health data. We will cascade this request to our subprocessors.

To exercise these rights, please contact our DPO at: support@attorneyaide.com.