Consumer Health Data Privacy Policy
Version 2 · Last Updated: October 15, 2026
This policy explains how ProgramU LLC ("ProgramU", "we") handles consumer health data about people in Washington and Nevada. Our full Privacy Policy is at programu.app/privacy.
1. Consumer Health Data We Collect
"Consumer health data" is information that identifies or can reasonably be linked to you and describes your physical or mental health. In ProgramU, that can include: • What you choose to write or say about how you feel, what you want to change and what you are working through: your identity vision and intake answers, journal entries, daily Identity Check-In and 7PM Identity Reflection entries, Living Proof wins, the Time Capsule letter and session focus text. • Your conversations with Kaion, our AI identity-shifting support system: chat messages, voice-call transcripts and the short summaries made after calls. • Session scripts we generate from what you asked for. • A record that our automatic crisis check ran on something you wrote (when, where in the app and which kind), never your words. • Biometric data, only if you use Voice Clone: the voice recording you make to create your voice model (passed to Inworld and not kept by us) and the identifier of the resulting voice model. We do not collect diagnoses, prescriptions, test results, readings from health devices or precise location, and we do not track your location near health care facilities.
2. Why We Collect It and How We Use It
We use consumer health data only to provide what you ask for: • to create your sessions and run your programs; • to hold your conversations with Kaion and remember them for continuity; • to personalize sessions and conversations, only if you choose it when you sign up, or later in Profile → Personalization in the app or Account → Personalization on the website; • to keep you safe: our crisis check and content filters read your text to spot a crisis or content we don't allow; • to answer you when you contact support, and to keep the service secure and working. We do not sell consumer health data, use it for advertising, or use it to train AI models.
3. Where It Comes From
• From you: what you type, say or record in the app or on the website. • From our own processing of what you give us: generated session scripts, conversation summaries and crisis-check records.
4. What We Share and With Whom
We share consumer health data only with the service providers (processors) that run ProgramU for us, under contracts that let them use it only to provide their service to us: • AI providers: Anthropic (session scripts, conversation summaries, Kaion's memory notes and the crisis check), OpenAI (GPT-6, the live replies in Kaion conversations, reached through Inworld), Google (Gemini, the crisis check's backup) and Inworld AI (speech-to-text, voice synthesis and model routing). They receive the text or audio a feature needs, such as your session focus and intake context or your conversation with Kaion. • Cloud hosting and storage: Google Cloud and Firebase (your account data, journals, conversations and scripts) and Cloudflare (your session audio files). We have no affiliates that receive consumer health data, and we do not share it with advertisers or data brokers. Our error-reporting tool (Sentry) never receives what you write or say. Payment providers (Apple, Google, Stripe and RevenueCat) do not receive consumer health data. Third parties do not collect consumer health data about your activity over time and across other websites or apps through ProgramU. On the website, product analytics (PostHog, United States visitors only) records page views and taps with all on-screen text and typing hidden, and never records visits to our Get Help crisis page.
5. Your Rights
You can: • confirm whether we collect or share your consumer health data, get a copy of it, and get a list of every service provider that received it, with a way to contact each one; • withdraw your consent: delete the content, turn personalization off, or delete your account; • have your consumer health data deleted, including from our service providers. Delete your account in the app (Profile → Privacy & Security → Delete Account), on the website (programu.app/delete-account), or ask us by email. Backups are overwritten within 35 days. To make a request, email privacy@programu.app with the subject "Consumer health data request". We may need to confirm it is you. We answer within 45 days; if we need more time, we tell you why within those 45 days and take at most 45 more. Requests are free, up to twice a year. We never treat you differently for using these rights.
6. Appeals
If we decline your request, you can appeal by replying to our decision email with "Appeal" within 30 days. We answer your appeal in writing within 45 days and explain our reasons. If we deny it, you can complain to your Attorney General: Washington at atg.wa.gov/file-complaint, or Nevada at ag.nv.gov.
7. Changes and Contact
If we change this policy in a material way, we tell you in the app or by email before the change applies, and update the date above. Questions: privacy@programu.app. ProgramU LLC, 30 N Gould St Ste N, Sheridan, WY 82801, United States.