Consumer Health Data Privacy Policy

DRAFT for legal review (version 2026-10-03-draft). Galvyn, LLC. The Health space is not yet open to households outside the operator's own.

Who this covers

This policy explains how Galvyn, LLC (“we”), which runs Compound (compound.galvyn.xyz and its iPhone app), handles consumer health data: information that identifies a person and relates to their physical or mental health, as defined by Washington's My Health My Data Act and similar state laws. It adds to our general Privacy Policy.

What we collect

• Care visits: dates, clinicians and clinics, reasons, diagnoses, orders, follow-ups and checklists.
• Medicines: names, strengths, schedules, the doses you mark taken, refill dates and what each is for.
• Test results: values, units, reference ranges and dates.
• Immunizations, conditions, allergies and your care team.
• Documents you upload or scan, and text you paste.
• Records you import with a SMART Health Link (paste or QR code).
• A birth date and a “ranges for” sex setting, used only for schedules and typical lab ranges.
• If you connect Apple Health on your iPhone (adults only): daily totals of the types you allow (steps, active energy, exercise minutes, workouts, weight, resting heart rate and sleep). Individual readings stay on your iPhone; Compound never writes to Apple Health.

We never collect precise location for health purposes and never set up geofences around clinics.

Where it comes from

• From you, when you type it in, paste it, upload it or import it.
• From a parent, for a child under 18 in the household.
• From the issuer of a SMART Health Link you choose to import (we show you which server it came from).
• From Apple Health on your iPhone, only after you turn on Apple Health sync and allow each type in iOS.

Consent comes first

• Collect: nothing about a person's health is stored until that person (or a parent, for a child) agrees.
• Share with the household: a separate choice. Without it, other adults in the household see none of your health data. With it, they see only the categories you pick.
• AI: a separate choice that names the AI providers (Anthropic and Google, through Vercel AI Gateway). With it, the person's structured records are used to write visit analyses, answer Ask questions about their health and read uploaded documents. Without it, nothing about that person's health is sent to an AI model.
• Apple Health: a separate choice, made on your iPhone, for adults only. Apple Health data is never used for advertising, never sold and never shared outside the household adults you choose. It is sent to an AI model only if the AI choice above is also on. Turning it off deletes the synced totals.
• You can withdraw any consent at any time in Settings → Health.

How we use it

Only to show it back to you and the people you choose, to remind you of doses, refills and visits, to work out schedules and ranges, and (with AI consent) to write visit analyses and answer your questions. We do not sell health data, use it for advertising, or use it to train AI models.

Who we share it with

• Household adults you choose, only for the categories you pick. Every change is recorded in your sharing log.
• Service providers that host and run Compound for us: Supabase (database and file storage) and Vercel (hosting). With the person's AI consent only: Anthropic and Google, reached through Vercel AI Gateway, for visit analyses, Ask answers and document reading. Each AI use is recorded in the sharing log; the content of AI requests and answers is not kept in our AI usage logs.
• We disclose health data to anyone else only if the law requires it.

How we protect it

Health records are separated by person and household with database row-level security. Raw imported records and pasted text are encrypted with a dedicated health key. Error logs never contain health values. SMART Health Links are used once and never stored.

Your rights

• See it: download a copy in Settings → Health.
• See who it was shared with: the sharing log in Settings → Health.
• Delete it: withdraw “Collect” or choose “Delete health data”. We delete it within 24 hours (and in any case within 45 days); backups roll off within 7 days.
• Withdraw consent at any time.
• To appeal a decision about a request, email yatharth@mlv.io with “Health data appeal”; we respond within 45 days. If we deny the appeal, you may contact the Washington State Attorney General.

Children

A child's health data is entered by, and its consents are given by, the household owner or a parent. Children never see consent screens, their own test results, weight or calorie information. A child's device never connects to Apple Health.

Not medical advice

Compound is informational. It does not diagnose or treat anything. Talk to your clinician.

Contact

yatharth@mlv.io