This Consumer Health Data Privacy Policy is separate and distinct from Stillwater's general Privacy Policy. It addresses our obligations under Washington's My Health My Data Act, Nevada Senate Bill 370, and the consumer health data provisions of the Connecticut Data Privacy Act. This policy contains only the disclosures required under those laws. For all other information about how Stillwater handles your data, see our general Privacy Policy at seekstillwater.app/privacy.
This policy applies to consumer health data we collect, use, or share in connection with your use of the Stillwater app. "Consumer health data" means personal information that identifies your past, present, or future physical or mental health status and is not otherwise regulated under HIPAA or the Gramm-Leach-Bliley Act.
We collect the categories of consumer health data listed above solely to:
We do not collect, use, or infer consumer health data for advertising, marketing, profiling, or any purpose beyond operating the features described above.
All consumer health data we collect comes directly from you, through your voluntary use of the app's journaling and intent-routing features. We do not purchase, license, or otherwise obtain consumer health data about you from any third-party source.
We do not sell consumer health data. We do not share consumer health data for advertising or marketing purposes. We share consumer health data only with the following specific service providers, and only as necessary to operate the app features you use:
We do not share consumer health data with any affiliates. Stillwater's operator, Jiaozi Group LLC, has no affiliated entities.
You have the right to:
To exercise any of these rights, email [email protected], or use the in-app tools at Settings → Delete Account & Data (full account and data deletion), Settings → Export My Data (download a copy of your data), or Settings → "Use AI to find tools" (withdraw consent to intent-routing processing specifically). To withdraw consent to journal-entry collection specifically, stop using the journal, or delete your account, which deletes all journal data. We will respond to rights requests without undue delay, and in all cases within 45 days.
Third-party contacts. The service providers who receive consumer health data are listed in Section 5. You can reach them at: Supabase — [email protected]; Cloudflare — [email protected]; Anthropic — [email protected]. These contact details reflect each provider's published data-protection documentation as of August 19, 2026.
Appeals. If we deny a request, we will tell you why. You may appeal by replying to our response, and a different member of our team will review it and respond in writing within 45 days. If your appeal is denied, you may contact the Washington State Attorney General's Office.
When you delete your account, we permanently delete all consumer health data described in Section 2. We retain one administrative record showing that you accepted our privacy terms and requested deletion — it contains consent dates and versions, and a one-way cryptographic code in place of any identifier. It contains no journal entries, no routing-field text, no health information, and no email address, and is not consumer health data. We retain it for six years for legal-compliance purposes, then delete it.
We do not collect or process journal entries or routing-field text as consumer health data until you take a specific, affirmative action. For the intent-routing feature: during onboarding, before the "What do you need right now?" field is ever available to you, we show a standalone consent screen describing what will be collected, why, and who it may be shared with, and ask you to affirmatively agree. If you decline, the feature stays off. You can turn it off or back on at any time in Settings → "Use AI to find tools" — each change is recorded as a consent decision. For the journal: the first time you attempt to save an entry, we show a brief, standalone notice and ask you to affirmatively agree before anything is saved. Creating an anonymous account on first app launch does not, by itself, involve the collection of any consumer health data. You may withdraw consent at any time as described in Section 6, without losing access to the app's core toolkit.
If we begin collecting, using, or sharing new categories of consumer health data, or use existing consumer health data for a new purpose, we will update this policy and obtain your affirmative consent before doing so.
Questions about this Consumer Health Data Privacy Policy: [email protected].