Consumer Health Data Privacy Notice
Effective: September 1, 2026
This notice supplements the VillageMetrics Privacy Policy and applies where consumer health privacy laws cover information reasonably linkable to an individual and related to health, care, treatment, behavior, medication, or support needs.
Consumer health data we collect
- Behavior observations, journal entries, medication and supplement details, treatment information, and health-related questions you choose to provide in the VillageMetrics app.
- Child and caregiver profile information needed to organize the service and control access.
- Health-related inferences and summaries generated to provide requested VillageMetrics features.
- Name, email address, and message submitted through website correspondence, including health information you voluntarily include despite our request not to include personal health details.
We collect this information directly from users and their authorized caregivers, from their use of requested VillageMetrics features, and from the information they choose to submit to support.
Why we collect and use it
We use consumer health data to provide requested tracking, analysis, collaboration, account support, privacy-request, security, and service-maintenance functions. Optional quality-assurance review and aggregated Community Insights use separate opt-in choices described in the Privacy Policy. We do not use consumer health data for advertising.
Sharing and processors
We do not sell consumer health data. We disclose it only as needed to provide requested services, comply with law, protect rights and security, or act on your direction. Service providers may include AWS for encrypted hosting, storage, and AI processing; GCP/FCM for configured push delivery; and Deepgram for requested voice transcription. They process data for VillageMetrics under contractual and security restrictions. Plausible does not run on the Contact page and receives no website correspondence.
Your rights and choices
Subject to applicable law, you may ask whether we collect or share your consumer health data, request access or a portable copy, withdraw consent for processing based on consent, or request deletion. We authenticate requests before locating, exporting, or deleting records. A limited legal, security, fraud-prevention, or recordkeeping exception may delay or restrict deletion; we will explain any refusal permitted by law.
Submit a request through our secure contact form. If we deny a request, reply with or submit a new request labeled Consumer Health Privacy Appeal and include the non-identifying case reference from our decision. A different authorized reviewer will reconsider the decision. We will respond within the period required by applicable law and explain any further right to contact the relevant state authority.
Retention and security
Website correspondence is encrypted in transit and at rest, restricted to explicitly permitted reviewers, and deleted 90 days after resolution unless an expiring legal hold applies. Unresolved records are reviewed at one year. Content-free accountability metadata expires after one year, and deleted data ages out of recoverable backups within the configured backup window. App-data retention is described in the main Privacy Policy.
Contact and changes
Questions and rights requests may be submitted through the secure contact form or sent to hello@villagemetrics.com without including sensitive details. We will post material changes here and update the effective date before the revised notice takes effect where required.