InnieHub Consumer Health Data Privacy

Published by: T&T Consulting Business, LLC
13575 58th Street North, Suite 200, Clearwater, FL 33760, United States

Lives at: /consumer-health-data-privacy, its own page, with its own link, on purpose
Version: 1.0
Last updated: 23 August 2026
Effective: 23 August 2026

Why this is a separate page. Washington State's My Health My Data Act requires a consumer health data notice to be a distinct document with its own link, not a heading inside a privacy policy. Nevada's SB 370 and Connecticut's amendments point the same way. The requirement is structural before it is textual, and it is also just correct: this is the part most people actually want to read, and it should not be in the middle of something longer.
It applies to residents of Washington and Nevada by statute, and we apply it to everybody, because writing two versions of the truth is how one of them ends up stale.

The short version

Everything here came from you. We do not buy health data, do not infer it from your browsing, and do not obtain it from data brokers.

Almost nobody sees it. Moderators cannot, not as a policy they follow, but because the server refuses them.

Three companies process parts of it on our instructions, and section 5 names all three and says exactly what each one gets. Anyone who tells you a service like this shares health data with nobody at all is not counting its own suppliers.

We do not sell it, and selling it would require your signed authorisation, a separate document we do not ask anyone to sign.

You can have it deleted. Section 8 says how, how long it takes, and what happens to backups.

Contents

1. What counts as health data here
2. Where it comes from
3. What we use it for
4. Who can see it inside InnieHub
5. Who processes it outside InnieHub
6. What we never do with it
7. Consent, and taking it back
8. Your rights, and how to use them
9. If we say no
10. Crisis signals
11. Changes to this notice
12. Contact

1. What counts as health data here

1.1 Under these statutes, "consumer health data" is information that identifies your past, present or future physical or mental health status. In this service that means:

• your mood check-ins and their whole history;
• your exposure plans, and how far you got with each one;
• your thought reframes, practice sessions, social battery entries and small wins;
• your conversations with the InnieCare assistant, in full;
• anything you tell a professional in a session booked here, though see 5.4, because we do not receive it;
• your InnieDate preferences, which can indicate sexual orientation;
• anything you chose to write about your own health in a post, a group, a comment or a message.

1.2 And the one nobody likes to write down. The bare fact that you have an InnieHub account is health data about you, because this is a community for people living with agoraphobia and social anxiety. Membership here says something, and pretending it does not would be the dishonest part of this page.

1.3 What that means in practice is that everything in this notice applies to the existence of your account, not only to what you typed into it. It is why the account itself is not discoverable by search engines, and why nothing about your membership is published anywhere by us.

2. Where it comes from

2.1 You. Every item in section 1 is something you entered yourself.

2.2 We do not buy health data, do not obtain it from data brokers, do not receive it from any partner, advertiser or affiliate, and do not infer it from your browsing, your device or your behaviour anywhere else.

2.3 One inference, and only one. The crisis check in section 10 reads a message you wrote to the assistant and decides whether it suggests immediate danger. That is the only conclusion this platform draws about your health that you did not write yourself, and it exists for one purpose.

3. What we use it for

3.1 To give the wellbeing tools and the InnieCare assistant back to you, and to show you crisis resources if a safety signal is raised.

3.2 That is the whole list. Not to profile you, not to rank anything, not to decide anything about your account, your tier or your role, not to target anything at you, not to train any model, and not to change what you see anywhere else in the service.

4. Who can see it inside InnieHub

4.1 You. For the wellbeing tools and your InnieCare conversations, that is the entire list.

4.2 Community moderators cannot reach any of it. This is not a rule we ask them to keep: the server refuses the request, rather than the interface hiding a button. Every attempt is logged, and an automated test fails our build if a moderator account can reach a single one of those tables.

4.3 Employees and contractors may access it only where it is necessary to provide the service in section 3, or for a safety or legal reason. Access is restricted accordingly and every access is logged.

4.4 Other members never see any of it unless you wrote it somewhere you chose to make visible.

5. Who processes it outside InnieHub

This is the section where "nobody" would be the comfortable answer and the wrong one. Three companies handle parts of it, each on our instructions and each contractually bound to use it for nothing else.

5.1 What Anthropic does not get: your name, username, email address or any account identifier; your mood history, exposure plans, reframes or social battery log; anything you posted anywhere; anything from InnieDate; your location or IP address. The AI Assistant Disclosure sets this out in full.

5.2 Our analytics provider receives none of it. Two events are recorded, that a post was created, and that an event RSVP changed, and you are identified to it by an opaque id that is not your name, username or email. Nothing from the wellbeing tools, InnieCare or InnieDate reaches it, ever.

5.3 Our error-monitoring provider receives none of it either. When something breaks we record that it broke, on which feature and on which tier. No message, no reply, no name, no account identifier.

5.4 A professional you book a session with sees what you choose to tell them in that session. They do not receive your mood history, your exposure plans or your InnieCare conversations. We do not receive, store or have access to what is said in the session, they are an independent controller of it, and their own privacy practices apply.

5.5 Law enforcement and legal process. We disclose only what a valid, binding legal instrument compels, and only as much as it compels. Where we are permitted to tell you, we do.

6. What we never do with it

6.1 We do not sell consumer health data. We have never sold it and we do not intend to.

6.2 If that ever changed we would need your separate, signed authorisation first, a specific document, valid for a limited period, listing the purchaser and the purpose, which these statutes require and which you could revoke. We would not make signing it a condition of using the service, and we are not asking anyone to sign one.

6.3 We do not share it for advertising, do not permit any advertising network in the service, and run no advertising at all.

6.4 We do not use it to train any model, not ours, and under our contract with Anthropic, not theirs.

6.5 We do not use geofencing around any health facility, clinic or pharmacy, and we do not collect your precise location for any purpose. Nothing in the application reads your GPS.

7. Consent, and taking it back

7.1 Each of these is asked for separately, in plain words, before the processing starts, and none is bundled into accepting our Terms: the wellbeing tools, the InnieCare assistant, and InnieDate. Agreeing to one is not agreeing to another, and you can use the community without any of them.

7.2 You can withdraw any of them at any time, from your settings, without leaving InnieHub.

7.3 Withdrawing stops the processing. It does not delete what already exists. Those are two different requests and we would rather ask than guess, deleting a year of mood entries because somebody switched a feature off would destroy something that cannot be given back. Deletion is section 8, and it is yours whenever you want it.

7.4 We keep the record of what you agreed to and when, including the withdrawal. That is not us holding on to something you took back: it is the proof that the consent was real, which is the thing we have to be able to show. It is visible to you in your settings.

8. Your rights, and how to use them

8.1 You may:

a) confirm whether we hold consumer health data about you;
b) access it, and get a copy;
c) obtain a list of every third party with whom we have shared it, and how to contact each one;
d) have it deleted;
e) withdraw any consent (section 7).

8.2 The copy, you can take yourself. A complete export is available from your settings at any time, with no request and no waiting: it includes your wellbeing records and your full InnieCare conversation. It does not include messages other people sent you, those are theirs.

8.3 Deleting the assistant's conversation on its own is a button in the assistant. It is a real deletion, immediate, and it does not touch anything else in your account. Note that it does not restore any allowance you have already used.

8.4 Deleting everything means deleting your account, from your settings. Your account is hidden immediately, a 30-day grace period begins during which signing back in cancels it, and after that a scheduled process removes the account and everything in section 1, including the files themselves, not only the database rows that point at them.

8.5 To make any other request, write to privacy@inniehub.com. You do not need to explain why.

8.6 How long it takes. We answer within 45 days, and tell you before that if we need a further 45, which we would only do for a request that is genuinely complicated, not as a matter of routine.

8.7 Deletion and backups, honestly. Deletion reaches the live system immediately. Our encrypted backups are overwritten on a 35-day cycle, so a copy can persist there for up to that long. A backup restored within that window is re-processed against pending deletions, so a restore does not bring back data that asked to go. We would rather describe the mechanism than claim an instantaneous erasure that no system with backups actually performs.

8.8 We will not punish you for asking. No denial of service, no different price, no degraded experience, no reduced functionality, because you exercised a right on this page.

8.9 Somebody may act for you, an authorised agent, or a parent or guardian where that applies. We will verify the authority before acting.

9. If we say no

9.1 If we refuse a request, we tell you why, in specific terms rather than a category, and we tell you at the same time how to appeal.

9.2 You can appeal to us at appeals@inniehub.com, and a person who did not make the original decision reviews it. We answer an appeal within 45 days, with our reasons.

9.3 If we refuse the appeal, we give you a way to complain to your state's Attorney General, with the link, in the same message. We do not make you go and find it.

9.4 These statutes also give individuals a private right of action in some states. Nothing on this page limits it, and using our appeal is not a condition of anything.

10. Crisis signals

10.1 If something you write to the assistant suggests you may be in immediate danger, you are shown crisis resources and an alert goes to our administrators and to moderators who are on duty and have accepted the Moderator Terms.

10.2 The alert says who you are and that a signal fired. It never contains your conversation, a quotation from it, or the words that triggered it.

10.3 Nothing about a crisis signal is recorded against your account. It is not a report, not a strike, and it changes nothing about your standing. Reaching for help is not something we file next to infractions.

10.4 It is an automatic pattern check and not a clinical assessment. It will miss things and it will sometimes fire when nothing is wrong. The Health and Medical Disclaimer explains what it does and does not do, and what to use instead when something is happening now.

11. Changes to this notice

11.1 If we change what we collect, what we use it for, or who processes it, we update this page and change the date at the top.

11.2 A material change is notified, not left for you to notice. And if a change would extend the processing beyond what you consented to, we ask again rather than assume, a new purpose needs a new consent, not a new paragraph.

11.3 Previous versions are at the legal centre.

12. Contact

T&T Consulting Business, LLC
13575 58th Street North, Suite 200, Clearwater, FL 33760, United States

Not an emergency contact. If something is happening now, contact your local emergency number or open the Crisis Resources card in the app.