Consumer Health Data Privacy Policy

Last updated: April 14, 2026

This Consumer Health Data Privacy Policy supplements our Privacy Policy and applies to "consumer health data" as defined under Washington's My Health My Data Act and Nevada's Consumer Health Data Privacy Law. If there is a conflict between this policy and our Privacy Policy regarding consumer health data, this policy controls.

1. Categories of Consumer Health Data Collected

Magica is a personal AI assistant that helps you get things done over text. In the course of providing the Service, we may collect consumer health data that you voluntarily share with Magica, including but not limited to:

• Medication names, dosages, and quantities (e.g., when you ask Magica to check on a prescription).
• Health-related appointment information (e.g., doctor visits, dental appointments).
• Pharmacy preferences and prescription pickup details.

We collect this information only when you voluntarily provide it through your interactions with Magica. We do not request information about your medical conditions, diagnoses, or reasons for needing medication.

2. Sources of Consumer Health Data

Consumer health data is collected from:

• You, through your text message interactions with Magica.
• Third-party services that Magica interacts with on your behalf (e.g., pharmacies, healthcare providers).
• Connected services you authorize (e.g., Google Calendar for health-related appointments, Gmail for health-related emails such as pharmacy notifications or appointment confirmations).

3. Purposes for Collecting Consumer Health Data

We collect and use consumer health data for the following purposes:

• Providing the Service: Fulfilling your requests, such as checking prescription availability, scheduling medical appointments, setting medication reminders, or reading and sending health-related emails on your behalf.
• Improving the Service: Analyzing how the Service is used to enhance functionality and user experience.
• Legal compliance: Addressing legal requirements, establishing or defending legal rights, and ensuring regulatory compliance.

4. Sharing of Consumer Health Data

We may share consumer health data with:

• Third parties at your direction: Pharmacies, healthcare providers, and other businesses that Magica contacts on your behalf to fulfill your requests.
• Affiliates: Current or future parent companies, subsidiaries, and related entities.
• Vendors and service providers: Companies that help us provide, maintain, and improve the Service.
• Legal compliance: When required to comply with applicable laws, regulations, or legal processes.
• Corporate transactions: In connection with business sales, mergers, or asset transfers.

5. Your Rights

If you are a resident of Washington or Nevada, you have the right to:

• Confirm whether we are collecting or sharing your consumer health data.
• Access your consumer health data.
• Delete your consumer health data.
• Withdraw consent for the collection or sharing of your consumer health data.

To exercise any of these rights, please contact us at privacy@insitohealth.com. If we deny your request, you may appeal the decision to your state's attorney general.

6. Updates to This Policy

We may update this Consumer Health Data Privacy Policy from time to time. We will post the updated policy on this page with a new "Last updated" date.

7. Contact Us

If you have any questions about this policy, please contact us at:

Insito Health, Inc.
200 Portland St Fl 5
Boston, MA 02114
Email: privacy@insitohealth.com