Consumer Health Data Privacy Policy

Last updated: 19 October 2026

Some US state laws, such as Washington's My Health My Data Act and Nevada's consumer health data law, protect "consumer health data", which can include information about a person's physical or mental health that is inferred from other information. Vermilleon is not a health service and does not diagnose anyone. But an uploaded conversation may mention someone's health, and a read may describe mood, stress or emotional patterns that these laws could treat as consumer health data.

This policy is provided by Aura Tech FZ-LLC, a free zone company in the United Arab Emirates ("Vermilleon"), which you can reach at [email protected].

• What we collect: health-related information that appears in a conversation uploaded to Vermilleon, or that a read infers from it.
• Where it comes from: the user who uploads the conversation, who must first get the agreement of everyone in it.
• Why we use it: only to produce the read or report the user asked for, to keep the service secure, and to comply with law.
• Who we share it with: our AI provider, Cloudflare (which carries requests to our website and API) and our cloud hosting provider, which process it for us (see our Privacy Policy, Section 9, including what our AI provider may keep under its own policies). We do not sell it or use it for advertising.
• Your rights: you can ask whether we hold consumer health data about you, get a copy and the list of everyone we shared it with, have it deleted, and withdraw your consent. Email [email protected] with "Consumer health data request" in the subject line. If we refuse your request, you can appeal by replying to our decision. If your appeal is refused and you live in Washington, you can contact the Washington State Attorney General at atg.wa.gov.