This Consumer Health Data Privacy Policy is provided separately from our general Privacy Policy, as required by Washington State’s My Health My Data Act and Nevada’s Consumer Health Data Privacy Act, and describes specifically how BRAIN.ONE collects, uses, shares, and protects “consumer health data.” It supplements, and does not replace, our general Privacy Policy, available as a separate document.
1. What Is Consumer Health Data
“Consumer health data” means personal information that is linked or reasonably linkable to you and that identifies your past, present, or future physical or mental health status, including, without limitation: health conditions, symptoms, and diagnoses; cognitive, emotional, mental health, and substance use conditions; neural data, including EEG and other brainwave or neurotechnology sensor data; biometric data; self-assessment and screening responses; treatment and appointment information from the client portal; and any inferences drawn from the foregoing that identify your health status. The collection of consumer health data does not mean that BRAIN.ONE is a medical provider, mental health platform, medical device, or provider of medical advice.
2. Categories of Consumer Health Data We Collect
3. Purposes for Which We Collect and Process Consumer Health Data
We collect and process consumer health data to: provide and personalize the Services you request, including scoring assessments and displaying results; support educational protocols and self-tracking features; facilitate your use of the client portal and communications with clinicians you choose; maintain the security and integrity of the Services; and comply with legal obligations. We do not process consumer health data for any additional purpose without first obtaining your separate, opt-in consent, and you may withdraw that consent at any time as described in Section 6.
4. Sources of Consumer Health Data
We collect consumer health data directly from you, through assessments, device sensors, wearable or neurotechnology data sources you connect, and portal messages, and, if you separately authorize it, from a clinician or other third party you direct to share information with us.
5. Third Parties and Affiliates With Whom We Share Consumer Health Data, and Why
6. Your Consent Rights
Before we collect or share consumer health data beyond what is strictly necessary to provide a product or service you have requested, we obtain your affirmative, opt-in consent, specific to that collection or sharing. You have the right to withdraw your consent at any time. If you withdraw consent, we will stop collecting or sharing your consumer health data for the relevant purpose going forward and, if you request, delete consumer health data collected on the basis of that consent, as described in Section 7.
7. Your Rights Regarding Consumer Health Data
8. No Sale of Consumer Health Data Without Valid Authorization
9. No Geofencing Around Health Care Facilities
10. Data Security
11. Changes to This Policy
12. Contact Us
