Consumer Health Data Privacy Notice
Effective: August 7, 2026
Scope of this notice
This notice supplements our Privacy Policy. It describes information that identifies or can reasonably be linked to a person and reveals, or could be used to infer, a physical or mental health status. We call that information “consumer health data” in this notice. This description does not mean the Service provides healthcare, diagnosis, or treatment.
Consumer health data we may collect or process
- Mental-health or course topics you select or enter, including a condition-labeled page or onboarding choice.
- Questionnaire and self-check answers and scores; messages with Diana; journal, note, and exercise entries; support messages; and course progress.
- Technical events connected with those activities, such as the page or course step used and its date and time.
- Non-clinical inferences needed to operate the Service, such as an apparent interest in a course topic, a calculated questionnaire score, or a safety classification produced from text. These are not diagnoses.
Sources
We receive this data directly from you; from your use of the website, course, and automated tools; from calculations or classifications the Service makes from those inputs; and, when you choose to use them, from connected payment or customer-service messaging providers. A link or page used to enter the Service may also indicate the educational topic you selected.
Why we process it
- Provide the self-guided course, automated educational explanations, exercises, progress features, and account support you request.
- Run deterministic safety guardrails and show crisis or professional-help resources when relevant language is detected. The Service is not monitored in real time and cannot provide crisis care.
- Operate accounts, subscriptions, payments, and service communications.
- Secure, debug, maintain, and improve the Service, including limited review by authorized personnel and use of aggregated or de-identified information.
- Comply with law and establish, exercise, or defend legal claims.
Processors and other recipients
We disclose only the data reasonably needed for the functions below. Depending on the feature you use, recipients may include:
- Our third-party AI provider, to generate Diana responses as described in the Privacy Policy and to answer a public product-support question from approved support information. Public support sends the AI provider only the redacted current turn, without client-supplied history, and requests no provider storage. The Service may retain support message text, reply identifiers, and an optional handoff email in encrypted form for staff follow-up as described in the Privacy Policy.
- Cloud hosting, database, security, and error-monitoring providers, to run and protect the Service and diagnose technical problems.
- Payment processors and email providers, to complete transactions, maintain required records, and send account or service messages.
- Customer-service messaging platforms you choose to use and providers that help us respond through those channels.
- Authorized staff and contractors who need access for support, safety, security, quality review, or legal compliance.
- Courts, regulators, law enforcement, or other parties when disclosure is required by law or needed to protect legal rights and safety.
No sale or health-targeted advertising
We do not sell consumer health data, use it for health-targeted advertising, or share health-related inputs or inferences with advertising platforms. Optional public-site Analytics and generic signup or verified-purchase Marketing measurement require the relevant administrator controls. In ordinary jurisdictions where these purposes are permitted, enabled Analytics and Marketing start on by default. A one-time, nonblocking notice explains this, and a persistent Privacy Choices control lets you turn either purpose off at any time. In strict opt-in regions, optional measurement remains off until you choose it. In prior-notice jurisdictions, it remains off until the notice is acknowledged. Prohibited or unresolved locations remain off without offering an optional choice. Global Privacy Control turns off Marketing only; it does not turn off separately permitted first-party or processor Analytics. These tools receive no chat, questionnaire, exercise, contact-form, condition, or other health-related payload, and browser loaders are blocked on sensitive routes and health-related URLs.
Your choices and rights
- Access: Ask whether we process your consumer health data and request access to it through our contact form.
- Delete: Delete your account from the account page. If you cannot access the account, do not have an account, or want local customer-service messaging data deleted, contact us.
- Withdraw consent: Use the persistent Privacy Choices control to change optional Analytics and Marketing choices at any time. For processing needed for Diana or another course feature, you may stop using that feature and contact us; closing and deleting the account may be necessary where the processing is required to provide the Service.
- Appeal: If we deny a consumer health data request, send a new contact-form request with “Consumer health data appeal” in the subject and explain why you believe the decision should be reconsidered.
We may need to verify your identity before completing a request. Rights and response requirements depend on applicable law. Account deletion does not erase every linked record. We maintain course progress and progress ratings—including questionnaire answers and scores—to evaluate product quality, while identifying information on the active account, such as the original name and email, is deleted and replaced with deletion placeholders. The retained quality records remain linked through an internal user identifier. Audit or security records and legally required financial records may also remain. Financial records can include the name and email used for a transaction, processor and document identifiers, amounts, statuses, and dates. We do not represent the retained records as anonymous. Data may also await deletion through a limited backup cycle or remain with a messaging, payment, or other third-party platform.
Contact
For a consumer health data question, request, complaint, or appeal, use our contact form. Please select a privacy-related subject or write “Consumer health data” in the subject. Do not include health details that are not needed to identify and complete your request.
SELF HELP DOCTOR CORPORATION
2093 PHILADELPHIA PIKE #6423
CLAYMONT, DE 19703