Health Data Policy
Irisen helps with your physical and mental wellbeing, so it handles information about your health. This policy explains what that information is, why we collect it, who it is shared with, and your rights over it. It adds to our Privacy Policy and is written to meet Washington's My Health My Data Act and similar laws.
1
The health information we collect
- Mood check-ins, and how you rate your energy, stress and wellbeing.
- Sleep, exercise, meals and other health habits you track or tell us about.
- Anything you tell Iris about your physical or mental health, including conditions, symptoms, medication, therapy and how you are feeling.
- What Irisen works out from the above, such as how steady your physical and mental life looks, and notes Iris keeps so she can help you.
- Health information in sources you choose to connect, such as an email from your doctor or a calendar appointment.
We do not collect precise location, biometric identifiers or genetic data, and we do not use location to place a virtual boundary around any health care service.
2
Where it comes from
- From you, when you use Irisen or talk to Iris.
- From services you choose to connect, such as Gmail and Google Calendar.
- From Irisen itself, when it works out patterns from the above.
3
Why we collect and use it
Only to provide Irisen to you: to show how you are doing, to let Iris help you plan and follow through, to remind you of things you asked about, and to keep the service secure. We collect it only after you agree in the app, and you can withdraw that agreement at any time.
We never sell health information, we never use it for advertising, and we never use it to train AI models for anyone else.
4
Who we share it with
We share health information only with the service providers that run Irisen for us, under contracts that let them use it only to provide that service to us:
- Hosting and database: Supabase and Vercel.
- AI providers: Anthropic (Iris's replies) and OpenAI (search and voice transcription), and ElevenLabs when Iris speaks or listens.
- Error monitoring: Sentry, where enabled, which receives technical details when something fails. These can occasionally include text you entered.
The full list is on our subprocessors page. We do not share health information with affiliates, advertisers or data brokers. We may disclose it where the law requires.
5
Your rights
- Withdraw consent: in Irisen, go to Settings, then Privacy, then Health information. Iris stops her background reading straight away.
- See it: download your data from Settings, or ask us for a copy, including a list of everyone we have shared it with.
- Correct it: if Iris has something wrong, mark it as not true on the About you page and tell her what is right, or tell her in chat.
- Delete it: delete your account in Settings, which deletes all of your data, including your health information. We also delete it from backups within 90 days, and tell our service providers to delete it. If you want a specific piece of health information deleted without closing your account, email us and we will consider your request under the law that applies to you.
You can also email privacy@irisen.ai. We respond within 45 days. If we decline a request, you can appeal by replying to our answer, and we will tell you the outcome within 45 days. If you are still unhappy, you can contact your state Attorney General or the privacy regulator where you live.