Consumer health data privacy policy

1. What health data we handle and why

• Risk alerts from the assistant (program creators only): if one of your messages to the Panel assistant talks about harming yourself, our server detects it or the AI flags it. The assistant gives you the helpline and the emergency number for your country, and an alert is created for the owner of YourLegacy Studio, who will write to you by email. From the alert we keep your name, your email, your language, the date and a reference; we do not keep what you wrote or a summary of it. Why: so that a person can help you.
• What you tell the assistant: we do not ask you for health data. If you share it anyway, the assistant only uses it to answer you. We do not keep the conversation on our server, except for three things: the notes in its memory, if you turn it on; a request you ask it to pass to the team; and, if you write to it on WhatsApp, its reply to each message for 48 hours, so it does not answer you twice.
• Requests for our clients (today, KonnectMD): we do not ask you for health data, but the service you choose may show that you are interested in a health service. Why: so that the client can get back to you. We do not accept these requests from people in Washington, Nevada or Connecticut.

2. Where it comes from

• From you: what you write or say to the assistant and what you choose in a client’s form.
• From our server and the assistant’s AI, which detect when a message talks about harming yourself.

3. Who we share it with

• We do not sell health data or share it for advertising.
• Only the owner of YourLegacy Studio sees risk alerts; the rest of the team does not. We do not give them to anyone else.
• We pass a request for a client to that client (today, KonnectMD), because you ask us to. The team also sees it in its CRM (YourLegacy Tech, another brand of the same company), to manage it.
• Providers that handle it only on our behalf: OpenRouter, and through it OpenAI, Google or Anthropic (the assistant’s answers); Google Cloud / Firebase (the database); Resend (the alert email to the owner); Vercel (hosting); and WhatsApp (Meta), if you write to the assistant on that channel.
• No affiliated companies receive it. No third party collects health data on our website to track you across other websites, and we do not use geofences (virtual boundaries) around health care facilities.

4. How long we keep it

• Risk alerts: deleted automatically 90 days after they are created, by the daily sweep. The email the owner receives stays in his inbox until he deletes it.
• Assistant memory: deleted automatically after 90 days without using the assistant, or when you delete it. Requests you pass to the team: 12 months.
• Requests for our clients: what our Privacy Policy (§7) says for contacts and requests.

5. Basis and consent

• We create risk alerts to protect your life and safety, as part of the assistant you use. Today we do not ask you for a separate consent for them.
• The assistant’s memory, only if you turn it on. You can turn it off and delete it in the Panel.
• A request for a client, only if you send it, with the privacy box ticked.
• If we ever wanted to use your health data for anything else or share it with anyone else, we would ask for your consent first.

6. Your rights

• You can ask us to confirm whether we handle your health data, to see it, correct it, delete it, withdraw a consent, and to know who we share it with and how to contact them.
• From your Panel (Settings → Your data) you can download a copy of your data, including your risk alerts, and ask us to delete it. For anything else, write to contact@yourlegacy.tech. We answer within 30 days at most.
• If you disagree with our answer, you can appeal by writing to us with the subject “Appeal”. The owner reviews it and we answer within 45 days at most. If we uphold it, you can complain to your state’s Attorney General.
• We will not treat you worse for exercising these rights.

7. Changes

We will post any change on this page, with its date. If the change is important, we will let creators know in the Panel.