Consumer Health Data Privacy Policy

Consumer health data is personal information that identifies your past, present, or future physical or mental health status. Under these laws it is defined broadly, and it can include inferences drawn from other data.

We do not ask you for health information. Dispatch has no health intake form, no symptom questionnaire, and no connection to any wearable, fitness tracker, health app, pharmacy, or medical record. The only way health data reaches us is if you type it into a chat message — for example, telling the Health agent your age and activity level so it can suggest a training plan, or mentioning a condition so it knows to refer you to a clinician.

Categories collected. Only what you voluntarily include in the content of your messages and any files you attach. In practice this may include: activity, exercise, and fitness information; sleep; height, weight, or age; bodily functions or symptoms you describe; health conditions, medications, or treatments you mention; and any inference the AI model draws from those in composing its reply.

Sources. You, directly. We do not buy, license, or receive consumer health data from data brokers, advertising networks, healthcare providers, or any other third party, and we do not infer it from your device, location, or browsing.

Purposes. Solely to provide the Service you asked for: generating a response to your message, keeping your conversation history so you can return to it, and enforcing usage limits and safety measures. We do not use consumer health data to build profiles, to target advertising, or to train AI models.

Collection is limited to what is necessary to provide the specific service you requested. We do not collect additional health data beyond that, and we do not collect it for a secondary purpose without your consent.

We do not sell consumer health data. We have never sold it and we do not share it for cross-context behavioural advertising. We would not do so without first obtaining your separate, written, signed authorization as the law requires.

Your message content is processed by the service providers that make the Service work, and by no one else:

• AI model providers — the message is sent to the model that generates the reply. Requests are routed only to endpoints that operate under zero-data-retention terms and do not train on request content.
• Our hosting and database providers — to run the application and store your conversation history.
• Search and retrieval providers — only when a response requires looking something up, and only the search query itself, not your conversation.
• Our observability provider — request traces used to diagnose failures and measure cost.

We may also disclose data where legally compelled, or to protect against imminent harm. We do not use geofencing around any health care facility for any purpose, which the Washington statute separately prohibits.

Dispatch, Inc. has no affiliates, subsidiaries, or parent companies with access to consumer health data. If that changes, we will name them in this policy before granting access.

You have the right to:

• Confirm whether we are collecting, sharing, or selling your consumer health data, and access it — including a list of every third party it has been shared with.
• Withdraw consent to its collection and sharing.
• Delete it. On request we delete it from our live systems and backups and instruct our processors to do the same. Deleting a conversation in the app removes the messages in it; contact us to delete your account and all associated data.
• Appeal a refusal of any of the above. We will respond to an appeal within 45 days, and if we deny it we will tell you how to complain to your state Attorney General.

To exercise any of these, email hello@askdispatch.chat. We will verify the request against your account and respond within 45 days (extendable once by a further 45 days where reasonably necessary, with notice). Exercising a right never costs anything and never results in a degraded Service.

Consumer health data lives in your conversation history and is retained only as long as that conversation exists. Messages are pruned on a rolling schedule, and deleting a conversation or your account removes them sooner.

If you would rather a conversation not be stored at all, use Incognito mode, which does not persist the conversation or its messages.

Data is encrypted in transit and at rest, access is restricted to personnel who need it to operate the Service, and it is segregated by account through database-level access controls.

The Service is not directed to children under 13 and we do not knowingly collect their information, including health information. The Health agent will not provide weight, calorie, or body-composition targets to or about a minor. If you believe a child under 13 has provided us information, contact hello@askdispatch.chat and we will delete it.

If we make a material change to how we handle consumer health data, we will update this page, revise the date above, and — where the change requires it — ask for your consent before the new practice takes effect.

Questions, requests, or complaints: hello@askdispatch.chat.