Consumer Health Data Privacy

1. Scope

This Consumer Health Data Privacy Policy supplements the Jornio Privacy Policy. It applies when Cadenium LLC ("Jornio," "we," "us," or "our") collects or processes personal information that identifies or can reasonably be linked to a person's physical or mental health and is covered by the Washington My Health My Data Act or another applicable consumer health privacy law ("Consumer Health Data").

Jornio is a general-audience social service for adults, not a medical provider, health plan, or health-record service. Health-related Journeys are personal stories and progress context, not medical records or professional care.

2. Categories of Consumer Health Data we collect

Depending on what a person chooses to provide, Consumer Health Data may include:

• health conditions, symptoms, diagnoses, treatment, medication, procedures, recovery, disability, or care experiences described in a Journey, Episode, profile, comment, request, or accepted conversation;
• mental-health, substance-use, eating-disorder, self-harm, reproductive-health, sexual-health, or other sensitive experiences disclosed in User Content;
• images, video, audio, text, titles, descriptions, labels, and external links that reveal health information;
• audience, report, block, moderation, appeal, support, and deletion information associated with health-related content; and
• place coordinates, catalog search text, linked-media choices, or device, usage, and account information only when linked with and revealing Consumer Health Data.

Jornio does not intentionally require medical records, precise geolocation, biometric identifiers, genetic data, or government identifiers for ordinary use. Jornio does not intentionally infer a diagnosis or create an advertising health profile.

3. Sources of Consumer Health Data

We collect Consumer Health Data from:

• you, when you create content, select an audience, make a request, send an accepted message, or contact Jornio;
• another user, if that person includes information about you in content or a report;
• your interactions with health-related content and the related audience, safety, and account controls; and
• service providers acting for Jornio when they host, transmit, secure, moderate, or help process information under Jornio's instructions.

Users must have permission before posting another person's private health information.

4. Why we collect and use Consumer Health Data

We collect and use Consumer Health Data only as reasonably necessary to:

• create, host, organize, transmit, and display the Journey, Episode, comment, request, or conversation that a user asks Jornio to provide;
• organize discovery and recommendations using content topics and the user's interactions, including viewing, likes, saves, and Watch selections; health-related topics or activity can themselves reveal health information;
• where Smart Journey is available and the user chooses it, generate a draft from selected source material and written context through the cloud provider described in the Privacy Policy;
• apply the audience, visibility, warning, and content controls selected by the user or required for safety;
• moderate content, investigate reports, prevent abuse, and enforce the Terms of Service and Community Guidelines;
• provide support and respond to privacy, deletion, copyright, NCII, safety, or legal requests;
• secure accounts and the Service, preserve evidence where appropriate, and comply with applicable law; and
• establish, exercise, or defend legal claims.

Jornio does not use Consumer Health Data for third-party targeted advertising, data-broker profiles, credit or insurance eligibility, or employment decisions.

5. How Consumer Health Data is disclosed

The categories of Consumer Health Data described in Section 2 may be disclosed as follows:

• People selected by the user. Public content is available to Jornio users and visitors. Restricted content is available to the audience selected through the Service. Those recipients may copy or reshare information outside Jornio.
• Jornio processors. Authentication, hosting, database and storage, video delivery, support and moderation, security, email, analytics, and crash providers may process Consumer Health Data only to perform services for Jornio under applicable contractual restrictions. The current providers are identified in the main Privacy Policy.
• A catalog you choose to use. Where the KLIPY authoring catalog is available, searches are sent directly to KLIPY with locale and technical connection information; selected-item use may also be registered. A search can reveal health information if you put it in the query. Avoid entering private health information into a catalog search. The main Privacy Policy identifies the service and links its own privacy terms. This notice does not replace any separate consent required for covered sharing.
• Other optional integrations. Apple Maps receives authored-place searches or selected coordinates; Google/YouTube receives requests for linked-media thumbnails and playback. These requests can reveal health-related information depending on the place or media you choose. Hugging Face receives technical model-download requests for local caption generation, without receiving the caption audio, video, or transcript. The main Privacy Policy identifies these services and their own policies; any consent required for covered collection or sharing remains separate.
• Legal and safety recipients. We may disclose limited information to courts, regulators, law enforcement, emergency recipients, advisers, or other parties when required or permitted by law and reasonably necessary for safety, security, or legal claims.
• Business transaction recipients. Information may transfer as part of a merger, acquisition, financing, bankruptcy, or asset sale, subject to applicable legal protections and notice requirements.

The operator is Cadenium LLC. Jornio does not sell Consumer Health Data. If disclosure to an additional corporate affiliate is introduced, Jornio will identify that recipient in this notice and provide any disclosure or separate consent required before the new sharing begins.

6. Consent and user-directed sharing

When you deliberately submit health-related content and choose an audience, Jornio processes that content to provide the feature and audience you requested. General acceptance of the Terms of Service is not treated as a separate consent to collect or share Consumer Health Data where applicable law requires a specific opt-in.

If Jornio wants to collect a new category of Consumer Health Data, use it for a new purpose, or share it in a way that requires consent, Jornio will first provide the required disclosure and obtain a separate affirmative opt-in. Where applicable law requires separate consent for sharing, that request will be distinct from consent to collection.

7. Your Consumer Health Data rights

Where applicable, you may ask Jornio to:

• confirm whether Jornio is collecting, sharing, or selling your Consumer Health Data;
• provide access to the Consumer Health Data and a list of third parties or affiliates that received it, including an available contact method;
• withdraw consent for future collection or sharing;
• delete Consumer Health Data from Jornio's active systems and direct applicable processors and recipients to delete it; or
• review an initial refusal through an appeal.

Submit a consumer health data request or contact privacy@cadenium.com. You do not need to create a new account to make a request. We may use reasonable steps to authenticate the request and may ask only for information reasonably necessary to do so.

Jornio will respond without undue delay and, where the Washington My Health My Data Act applies, within 45 days after receiving the request. We will promptly take steps to authenticate the request; authentication does not restart or extend that response period. Jornio may extend the period once by up to 45 additional days when reasonably necessary and will explain the extension within the initial 45 days. If we decline a request, we will explain the reason and how to appeal. Submit an appeal through the same consumer health data request form, identifying the original request and the decision you want reviewed. We will communicate the appeal outcome and the reason within 45 days after receiving the appeal. If an appeal is denied, we will provide an online mechanism or another method to contact the Washington Attorney General where that law applies.

Deletion from archived or backup systems may be delayed where permitted by law, but will not exceed six months where the Washington My Health My Data Act applies. Jornio will not unlawfully discriminate against a person for exercising an applicable right.

8. Retention and security

Consumer Health Data follows the category-specific handling in the main Privacy Policy, including content and shared-history retention and optional Smart Journey source retention. Removing an author attribution or displaying "Deleted user" is not deletion of health information within the content. When an applicable deletion right requires erasure, Jornio must apply that right to the health information itself and notify relevant processors and recipients; shared-history preservation does not create a blanket exception. Access is restricted according to role and need. No system is completely secure, and Jornio cannot guarantee absolute security.

9. Changes to this Policy

We may update this Policy. We will publish the revised version and provide additional notice or obtain consent when required before collecting, using, or sharing a new category of Consumer Health Data or using it for a materially different purpose.

10. Contact

Operator: Cadenium LLC

Mailing address: 1209 Mountain Road Pl NE, Ste N, Albuquerque, NM 87110, USA

Privacy requests: Start a consumer health data request

Privacy email: privacy@cadenium.com