Odyssi Consumer Health Data Privacy Policy

Version 0.0.0 placeholder. Not for public use. Pending lawyer review.

Last updated: [pending]

This document is the Washington My Health My Data Act (RCW 19.373) Consumer Health Data Privacy Policy required for any app processing consumer health data about a Washington resident. Odyssi ships nationwide with Washington-level handling because Washington's regime is the strictest in the United States; this policy therefore applies to every user regardless of residency.

This is a placeholder so https://odyssi.app/consumer-health-data resolves to real HTML during App Store and Play Store submission review. It will be replaced with a lawyer-reviewed MHMDA-compliant policy before V1 ships publicly.

What this policy will cover (outline, per RCW 19.373.030)

Categories of consumer health data collected
Categories of sources from which the data is collected
Categories of consumer health data shared
Categories of third parties and specific affiliates with whom the data is shared
How a consumer can exercise their rights under MHMDA, including:
- Right to confirm whether the entity is collecting, sharing, or selling data
- Right to withdraw consent
- Right to deletion (including a chain of deletion to all affiliates and processors)

Interim contact

For MHMDA-related requests during the closed demo period: privacy@odyssi.app

No geofence

Odyssi does not place a geofence around any facility providing in-person health care services.

No sale of consumer health data

Odyssi does not sell consumer health data. This will remain true after V1 ships.

Interim policy statement

During the closed demo group period, Odyssi collects:

On device, encrypted with SQLCipher: conversation transcripts, knowledge graph, goals, session summaries, notes about mental health, finances, relationships, benefits, or service history. This data never leaves the device except as described below.
On Odyssi servers: account identifier, push notification token, notification scheduling preferences. No conversation content.
Transmitted to Anthropic (Claude API) per message: the text of each message plus relevant context pulled from on-device history. Anthropic's privacy terms govern their side; they do not train models on this data.
Transmitted to Apple Speech Recognition or Google Speech Services per utterance: the audio captured by the device microphone. Platform privacy terms govern their side.

Affiliates and processors as of V1: Anthropic PBC, Supabase Inc., Fly.io, Expo, Apple Inc., Google LLC.