All legal documents

Consumer Health Data Privacy Policy

Disclosures and rights for consumer health data under Washington's My Health My Data Act, Nevada SB 370, and similar laws.

Last updated July 4, 2026

Kalvri connects families with caregivers, so some of what you enter is health-related. Because HIPAA does not cover a consumer app like ours, that information is “consumer health data” under the Washington My Health My Data Act, Nevada SB 370, and similar laws. This policy is our consumer-health-data disclosure under those laws and supplements our Privacy Policy.

1. What consumer health data we collect

  • The care recipient's stated conditions, allergies, and care situation, entered by the family arranging care.
  • A family's description of the care needed (for example, dementia care, post-surgery recovery, or medication support).
  • A caregiver's self-described care capabilities (for example, dementia training, medication comfort, CPR certification).

We collect it from you directly — never from data brokers, advertisers, or inference engines — and we do not use location data to infer health status.

2. Why we collect and use it

Solely to provide the service you asked for: matching families with caregivers against stated care needs, displaying the profile content you wrote, and operating safety features. This processing is necessary to provide the service you request, and we additionally capture your affirmative consent at the point of entry — you type this information in so it can be used for matching, and families affirm they are the care recipient's authorized representative.

3. Who can see it

  • Other users, only as the product requires — a caregiver you match with sees the care needs a family chose to publish.
  • Our service providers (processors), under contract, strictly to run the service — hosting and storage, the AI profile-drafting service, and content-safety screening. No processor may use it for its own purposes.
We do not sell consumer health data, we do not share it for advertising, and we will not sell it without the separate, signed authorization those laws require (we do not seek such authorizations).

4. No geofencing

We do not create geofences around care facilities or anywhere else, and we do not use geofencing to identify, track, or send notifications to anyone in connection with health data.

5. Your rights

  • Access — see the consumer health data we have about you (the in-app export includes it), including the third parties it has been shared with.
  • Withdraw consent — stop entering it, edit it out of your profile, or contact us to withdraw consent for its processing.
  • Delete — delete your account in the app, which extends to data held by our processors, subject to the narrow legal-retention exceptions described in the Privacy Policy.
  • Appeal — if we decline a request, you may appeal by replying to our decision; if the appeal fails, you may contact your state attorney general.
  • No discrimination — we will not deny you service or treat you differently for exercising these rights.

To exercise any of these rights, use the in-app controls or email privacy@kalvri.com. We verify requests using your authenticated session or an email round-trip.