CONSUMER HEALTH DATA PRIVACY POLICY

Last updated: November 12, 2026

This Consumer Health Data Privacy Policy applies to "consumer health data" as defined by the Washington My Health My Data Act, Nevada law (NRS Chapter 603A) and similar state laws, collected by Inciteful, Inc. ("Inciteful", "we" or "us") through incitefulmed.com and app.incitefulmed.com (the "Services"). It supplements our Privacy Policy. Consumer health data is personal information that is linked or reasonably linkable to you and that identifies your past, present or future physical or mental health status.

1. CONSUMER HEALTH DATA WE COLLECT AND WHY

Health questions and conversations. The questions you ask, the symptoms, conditions, medications and other details you describe, and the answers we generate. We use them to answer your questions and to provide the Services you request.
Health records. Documents you upload and records you choose to connect from a patient portal or other health record system, such as diagnoses, test results, medications, procedures and visit notes. We use them to explain your records, answer questions about them and keep track of changes you ask us to monitor.
Profile information. Details you add to a patient profile for yourself or someone you care for, such as age, sex, conditions and medications. We use them to tailor answers and the research we show you.
Use of the Services. That you have an account with a health information service, and how you use the Services. We use this to provide, secure and improve the Services.
Website visits, only with your consent. If you allow the advertising cookie on incitefulmed.com, the fact that your browser visited incitefulmed.com. We use it to show you Inciteful Med ads on Meta's services and measure them, as described in Section 6 of our Privacy Policy.

We collect consumer health data only with your consent or to the extent necessary to provide a product or service you have requested.

2. SOURCES

Directly from you, when you use the Services.
From patient portals and other health record systems that you choose to connect and authorize.
From your browser or device, when you use the Services.

3. CONSUMER HEALTH DATA WE SHARE, AND WITH WHOM

We do not sell consumer health data. We share it only as follows:

Service providers (processors) that operate the Services for us, under contracts that limit their use of the data to providing services to us: cloud hosting and infrastructure, artificial intelligence model providers that process your questions and records to generate answers, email delivery, customer support, and analytics and error monitoring. They may receive any category in Section 1 that is needed for the service they provide.
Meta Platforms, Inc., only if you allow the advertising cookie. Meta receives only that your browser visited incitefulmed.com (with the browser and cookie details described in our Privacy Policy). Meta never receives which page you viewed, your account information, your questions, your documents or your health records.
People you choose to share with, such as when you create a share link for a conversation.
As required by law, or to a successor in a merger or acquisition, as described in our Privacy Policy.

We do not share consumer health data with affiliates.

4. YOUR RIGHTS

Depending on where you live, you have the right to:

Confirm whether we collect, share or sell your consumer health data, and access it, including a list of the third parties and affiliates with whom we have shared it and their contact information.
Withdraw your consent to our collection and sharing of your consumer health data.
Delete your consumer health data. We also tell our processors and any third parties with whom we shared it to delete it.
Appeal our decision on any of these requests.

How to make a request. You can delete records, profiles or your whole account in the app at any time. You can stop the advertising cookie with the "Your privacy choices" link at the bottom of every page of incitefulmed.com. For any other request, email hello@incitefulmed.com from the email address on your account with the subject "Consumer health data request". We may need to verify your identity before acting on a request. We respond within 45 days; if we need more time, we will tell you why, and we may extend once by up to 45 more days. Requests are free of charge up to twice a year.

How to appeal. If we decline your request, reply to our decision with the subject "Consumer health data appeal" within a reasonable time. We will respond in writing within 45 days, explaining any action taken or not taken and why. If your appeal is denied, you may contact the Washington State Attorney General or the attorney general of your state.

5. CHANGES TO THIS POLICY

We will post any change to this policy on this page and update the date above. If a change would let us collect, use or share consumer health data in a way you have not agreed to, we will ask for your consent first.

6. CONTACT

Questions about this policy: hello@incitefulmed.com