Consumer Health Data Privacy Notice

Version 1.3 — effective July 13, 2026

This notice is provided under Washington State's My Health My Data Act (MHMDA). We publish it as its own page, separate from our main Privacy Policy, so it's easy to find and read on its own. Questions: [email protected].

What “consumer health data” means

MHMDA defines consumer health data broadly: personal information that identifies a consumer's past, present, or future physical or mental health status, and that isn't otherwise regulated under health-privacy laws like HIPAA. Because Go Go Gaia is a health-tracking app, nearly everything we collect falls into this category.

Categories of consumer health data we collect

  • Cycle & reproductive data — period dates, flow, cycle length, fertility signals (BBT, cervical mucus, ovulation tests), pregnancy status and gestational data, birth control type and usage, hormone levels, PCOS and IVF journey data, menopause stage and HRT status
  • Biometric & vital sign data — heart rate and HRV, blood pressure, SpO2, respiratory rate, body temperature, VO2 max, glucose, weight, body composition
  • Lab results — bloodwork values extracted from uploaded lab PDFs, with reference ranges and interpretations
  • Mood & mental wellness data — mood and symptom logs, stress and anxiety indicators
  • Medication & treatment data — medications, dosages, adherence, side effects, supplement prescriptions, linked health conditions
  • Fitness, nutrition & sleep data — workouts, meal logs, hydration, sleep sessions and stages
  • AI conversation data — your conversations with Delphi, and vision analysis results from meal or lab photos you choose to upload

We do not collect precise geolocation data.

Why we collect and use it

  • To provide the core app: tracking, dashboards, health scores, and predictions
  • To generate optional AI-powered insights and vision analysis, via Google Gemini (Vertex AI) under a Data Processing Agreement
  • To enable care coordination with healthcare professionals you explicitly connect with and authorize
  • To improve the app using de-identified, aggregated statistics, computed over groups of at least 100 members
  • With your separate, explicit opt-in only: to train Gaia's own AI models
  • For security, fraud prevention, and legal compliance

Where it comes from

  • Directly from you — what you manually log, upload, or type into the app, including conversations with Delphi
  • From Apple HealthKit, with your permission, including data your connected wearables (Apple Watch, Oura, Whoop, Garmin, Eight Sleep, and similar) have written to HealthKit
  • Generated by us — scores, predictions, and AI-derived insights based on the data above

Who we share it with

We do not sell consumer health data. We use a small number of service providers who process data only on our instructions, to run Gaia, under contract:

  • Google Cloud (Vertex AI / Gemini) — AI conversations and vision analysis, under a Data Processing Agreement
  • Amazon Web Services (AWS) — database and file hosting, Stockholm region (eu-north-1), within the EU
  • Google Cloud / Firebase — authentication only (email, password hashes, tokens); no health data
  • Fullscript — supplement prescriptions, only when a practitioner prescribes
  • Sentry — error monitoring, with health data scrubbed from reports before transmission

We also share data with healthcare professionals you explicitly connect with, per the categories you authorize, and as required by law (see our Privacy Policy for our law-enforcement request stance). Helping improve Gaia's own AI models under the separate opt-in described below is not a sale or sharing of your data to any outside party — it stays inside Go Go Gaia.

Your rights under MHMDA

  • Right to confirm and access — confirm whether we are collecting, sharing, or selling your consumer health data, and access it (also available anytime via Settings > Download My Data)
  • Right to withdraw consent — withdraw your consent for the collection or processing of your consumer health data at any time
  • Right to delete — have your consumer health data deleted
  • Right to appeal — appeal a denial of any of the above requests

To exercise any of these rights, email [email protected]. We aim to respond within 45 days. If we deny your request, you may appeal by replying to our decision; we will respond to the appeal within 45 days. If we uphold the denial, we will explain why and how you may contact the Washington State Attorney General.

Non-discrimination

We will not deny you goods or services, charge you a different price, or provide a different level of service because you exercised any right under this notice.

Changes to this notice

We may update this notice periodically. We will update the version and effective date above, and, where required, notify you directly of material changes.

Contact

Go Go Gaia, operated by Holland Neurotech Inc.

Privacy Contact: Abby Holland — [email protected]