Consumer Health Data Privacy Policy

1. Categories of Consumer Health Data We Collect & Purposes

• Symptom logs and health conditions — to track your health over time and prepare summaries for you
• Medication logs — to help you track what you take
• Mood and sleep logs — to help you spot patterns
• Text and voice conversations with Juno (including transcripts) and the health inferences drawn from them — to provide personalized support and memory
• Biometric data you connect via Apple HealthKit or Android Health Connect (heart rate, HRV, sleep, steps) — to enrich your timeline
• Medical documents, records, and appointment notes you upload — to organize your health history
• Calendar data you connect — to support pacing features
• Safety signals — used only to show you crisis resources
• Reproductive or sexual health information you choose to share — only with your consent

We use consumer health data only to provide and improve the Juno service you asked for, with your consent, and never for advertising.

2. Categories of Sources

• Directly from you (chat, voice, logs, uploads)
• Devices and platforms you connect (Apple HealthKit, Android Health Connect, calendar)
• Inferences generated by the service from the data above

3. Categories Shared & Third Parties

The providers below may process consumer health data or related account and operational information where needed for the feature you use. Not every provider receives every conversation. Active providers depend on the feature, app build and region, and providers acting on our behalf are restricted to authorised service purposes under applicable agreements.

For the providers that have received your consumer health data, including their contact email addresses, request the list relevant to your account at privacy@junocompanion.com. OpenAI can be contacted at privacy@openai.com and Supabase at privacy@supabase.io. Our Privacy Policy explains provider roles, and its AI and ZDR section explains eligible requests and retention exceptions.

We have no affiliates with whom consumer health data is shared. At your direction, we also share the reports you generate with clinicians you designate.

4. How We Collect Consent

Before Juno first collects consumer health data, the app presents a standalone consent screen describing the categories collected and their purposes; optional purposes (such as de-identified research and product improvement) are presented as a separate, unbundled consent. We keep timestamped records of each consent, and you can withdraw any consent at any time in Settings.

5. Exercising Your Rights (Washington and Nevada consumers)

You have the right to:

• Confirm whether we collect, share, or sell your consumer health data, and access it — including a list of the third parties with whom we have shared it, with contact emails (Section 3)
• Withdraw consent to collection and sharing
• Have your consumer health data deleted

Submit requests in the app (Settings > Privacy) or by emailing privacy@junocompanion.com. We verify requests using your account credentials and respond within 45 days, with one 45-day extension when reasonably necessary (we will tell you if we take it). Requests are free up to twice per year. Deletion requests are honored without undue delay (within 30 days for Nevada consumers), including instructions to our processors to delete, with encrypted backups purged on the 35-day rolling cycle described in our Privacy Policy.

6. Appeals

If we deny your request, you may appeal by replying with the subject line "Privacy Appeal". We will deliver a written appeal decision within 45 days. If your appeal is denied, you may file a complaint with the Washington Attorney General (atg.wa.gov/file-complaint) or the Nevada Attorney General (ag.nv.gov).

7. Texas Consumer Health Data Notice

8. Contact

Questions about this policy: team@juno-chat.com.

SharedGenes, Inc.