Legal
Consumer Health Data Privacy Policy
Effective September 17, 2026 · Last updated September 17, 2026 · Version 2.1
This Consumer Health Data Privacy Policy applies to “consumer health data” as defined by state laws such as Washington’s My Health My Data Act, Nevada SB 370 and the Connecticut Data Privacy Act. It is part of our Privacy Policy; where the two differ for consumer health data, this policy controls to the extent state law requires. It is also reachable on its own at gini.health/privacy/health.
Consumer health data we collect, and why
| Category | Examples | Purpose |
|---|---|---|
| Eligibility answers | Assigned female at birth; pregnant or planning pregnancy; date of birth | Confirm the Gini blood test and cycle-timed panels are safe and appropriate for you (18+, not pregnant) |
| Symptoms and concerns | Fatigue, hair loss, irregular cycles, acne, brain fog, PCOS/PMOS, endometriosis, cravings, free text | Prepare your experience; personalise your dashboard and Symptom Radar; answer your questions in the AI advisor when you allow it |
| Cycle, symptom and journal logs | Period dates, symptoms, notes, mood, supplements | Run the app you signed up for; show trends over time |
| Laboratory results | Hormone, metabolic and nutrient biomarkers from your Gini kit | Return and explain your results; track change between tests |
| Wearable and device data | Sleep, heart rate, HRV, temperature, SpO2, activity, glucose, weight, blood pressure | Show your own data alongside your cycle and labs; power Symptom Radar |
| Health records and claims | Conditions, medications, allergies, labs, notes, coverage, claims imported from your health system or insurer | Build one record you control; give the advisor and your clinician context you switch on category by category |
| Gini Care conversations | Questions you ask, AI replies, clinician messages, intake details | Answer you; hand off to a clinician when you ask |
| Inferences | Recovery scores, symptom-pattern flags, cycle phase estimates | The features described above, shown only to you |
Precise location is not collected. We do not use geofences around healthcare facilities to identify, track, or message you.
Where it comes from
- You, when you fill in forms, log data, upload files, or chat.
- Devices and services you connect (wearables, Apple Health, Health Connect), only for the categories you approve.
- Health systems, insurers and Medicare, only after you sign in there and authorise the transfer.
- Laboratories that process your Gini sample.
- Clinicians who care for you through Gini Care.
We do not buy consumer health data and do not collect it from data brokers.
Consumer health data we share, and with whom
We do not sell consumer health data and do not share it for advertising. We share it only:
- With processors that act on our written instructions and may not use it for their own purposes: cloud hosting and database (Vercel, Neon), transactional email (Resend), the AI model provider that generates advisor and Gini Care replies (Anthropic), laboratories that analyse your sample, and our restricted operations store for waitlist and founding-member records (Google Workspace).
- With clinicians you add through Gini Care, to the extent you share it with them.
- With a third party you choose, only after you turn on a separate sharing consent in Privacy & Compliance. It is off by default.
- When required by law, to protect life or safety, or to a successor if Gini is acquired, still under this policy.
We do not share consumer health data with affiliates for their own use. Stripe (payments) and Meta (a signup-happened conversion event) receive no eligibility answers, symptoms, or other consumer health data.
Consent
We ask for your consent before collecting consumer health data (when you fill in a form, connect a source, or turn on a feature) and, separately, before sharing it with any third party other than our processors. You can withdraw either consent at any time in Privacy & Compliance in your account or by emailing privacy@gini.health. Withdrawing collection consent for a feature turns that feature off and we stop collecting for it; withdrawing sharing consent stops the sharing. Selling consumer health data would require your separate, signed authorisation. We have never asked for one and have no plans to.
Your rights
- Confirm and access: learn whether we collect, share, or sell your consumer health data, get a copy, and see the list of third parties it was shared with.
- Withdraw consent for collection or sharing.
- Delete your consumer health data. Deleting your account removes it from our systems, and we pass the deletion request to processors holding a copy. Disconnecting a source deletes the data synced from it.
- Appeal if we decline a request. Email privacy@gini.health with “Appeal” in the subject; we respond within 45 days. Washington residents may also contact the Washington Attorney General; Nevada and Connecticut residents may contact their Attorney General.
We answer within 45 days (extendable once by 45 days with notice), may verify your identity first, and will never charge you a different price or reduce service because you exercised a right, except where the data is required to provide what you asked for (for example, eligibility answers are needed to purchase a blood test).
Contact for consumer health data: privacy@gini.health, or support@gini.health.