Health Data Privacy Policy

# CONSUMER HEALTH DATA PRIVACY POLICY

Effective Date: October 23, 2026

This Consumer Health Data Privacy Policy describes how Mark Derian LLC, operating Animus and Animus AI (“Animus,” “we,” “us,” or “our”), collects, uses, and discloses consumer health data.

This policy is separate from our general Privacy Policy and is intended to provide disclosures concerning consumer health data, including disclosures required by the Washington My Health My Data Act where applicable.

## 1. CATEGORIES OF CONSUMER HEALTH DATA WE COLLECT

Animus AI is designed to help users bring emotional and psychological experiences into conscious awareness and put those experiences into words.

Depending on what you choose to provide, we may collect or process consumer health data including:

- Information about your emotional or mental state, including feelings such as anger, anxiety, resentment, fear, shame, worry, or related experiences.

- Information about psychological, behavioral, or emotional difficulties.

- Information about relationships, family experiences, interpersonal conflicts, and other circumstances when those details relate to your mental or emotional state.

- Information concerning psychological treatment, therapy, counseling, diagnoses, medications, or other health-related matters if you choose to disclose them.

- Information concerning sexual, reproductive, or other sensitive health matters if you choose to disclose them.

- Information concerning behaviors, symptoms, experiences, or circumstances that you associate with your mental or emotional well-being.

- Facts, feelings, meanings, responsibility reflections, expressions, and other material you enter while using Animus AI.

- Summaries and structured information generated from information you provide.

- Inferences or derived information concerning emotional or psychological experiences generated as part of providing Animus AI.

- Account, subscription, technical, or interaction information that may identify you as a user of Animus AI.

You are not required to disclose any particular diagnosis, health condition, treatment, or other sensitive fact in order to create an account.

## 2. WHY WE COLLECT AND USE CONSUMER HEALTH DATA

We collect and use consumer health data to:

- Provide Animus AI and the reflection process you request.

- Generate AI responses based on information you provide.

- Help you clarify facts, feelings, meanings, responsibility, and expression.

- Maintain an active reflection while you work through it.

- Generate and store summaries of completed reflections.

- Allow you to review and edit saved summaries.

- Maintain your reflection history when you choose to retain it.

- Authenticate users and maintain account access.

- Administer subscriptions and determine whether an account has access to Animus AI.

- Provide customer support and troubleshoot technical problems.

- Prevent fraud, abuse, unauthorized access, and misuse of the service.

- Maintain the security and integrity of Animus and its systems.

- Comply with applicable legal obligations.

We do not use consumer health data for targeted advertising.

We do not sell consumer health data.

We do not use consumer health data submitted through Animus AI to train a separate Animus AI model.

## 3. SOURCES OF CONSUMER HEALTH DATA

We collect consumer health data from the following categories of sources:

### You

Most consumer health data processed by Animus comes directly from information you voluntarily enter into Animus AI or otherwise provide to us.

### Information Derived From Your Use of Animus

Animus may structure, summarize, categorize, or derive information from material you provide in order to perform the service you requested.

For example, Animus may store an identified feeling, meanings developed during a reflection, responsibility reflections, expressions, and a completed summary.

### Artificial Intelligence Processing

Animus uses artificial intelligence to respond to information you provide. AI processing may generate summaries, questions, formulations, or other outputs derived from your content.

### Service Providers

We may receive limited account, authentication, subscription, security, payment-status, or technical information from companies that help us operate Animus.

## 4. CATEGORIES OF CONSUMER HEALTH DATA WE DISCLOSE

We may disclose the following categories of consumer health data to processors and service providers when reasonably necessary to provide the Animus service requested by you:

- Information you submit to Animus AI that is necessary to generate an AI response.

- Structured information and summaries associated with your use of Animus.

- Account identifiers and authentication information.

- Subscription and access-status information.

- Technical and security information necessary to host, operate, secure, and troubleshoot the service.

We do not disclose consumer health data to third parties for targeted advertising.

We do not sell consumer health data.

## 5. SERVICE PROVIDERS AND OTHER ENTITIES THAT RECEIVE INFORMATION

We currently use the following providers in operating Animus:

OpenAI — Processes relevant portions of information you submit to Animus AI in order to generate AI responses.

Supabase — Provides authentication and database infrastructure and stores account information, reflections, messages, summaries, and related application data.

Render — Hosts the server-side Animus AI application and processes information transmitted through that infrastructure.

Stripe — Provides payment processing, subscription management, checkout, and billing services. Stripe receives billing, subscription, and account information but is not intentionally provided the substantive contents of your Animus reflections.

Resend — Provides email-delivery infrastructure for account-confirmation and password-recovery messages. Resend is not intentionally provided the substantive contents of your Animus reflections.

Squarespace — Hosts portions of the public Join Animus website. Squarespace is not intentionally provided the substantive contents of your Animus reflections.

We do not currently have affiliates with whom we share consumer health data.

We do not share consumer health data with third parties for their own advertising, profiling, data-broker, or independent marketing purposes.

## 6. YOUR CONSUMER HEALTH DATA RIGHTS

Where the Washington My Health My Data Act or another applicable law provides these rights, you may request to:

- Confirm whether we are collecting, sharing, or selling consumer health data concerning you.

- Access consumer health data concerning you.

- Obtain information about third parties or affiliates with whom your consumer health data has been shared or sold, where applicable.

- Withdraw consent to future collection or sharing of consumer health data where processing depends upon your consent.

- Request deletion of consumer health data concerning you.

- Appeal a refusal by us to take action on a qualifying consumer health data request.

Animus does not sell consumer health data.

## 7. HOW TO EXERCISE YOUR RIGHTS

You may permanently delete your Animus AI account through the Account page within Animus.

Account deletion is designed to delete your active Animus account and stored reflections, messages, and summaries.

For consumer health data requests that cannot be completed through your account, email:

privacy@joinanimus.com

Please describe the request and provide sufficient information for us to reasonably authenticate that you are the person to whom the information relates.

You do not need to create a new account in order to submit a privacy request.

Where applicable law requires it, we will respond to an authenticated request without undue delay and generally within 45 days. Where legally permitted and reasonably necessary, that period may be extended once by up to an additional 45 days.

## 8. DELETION REQUESTS

When we receive and authenticate a valid request to delete consumer health data, we will delete covered consumer health data from our records as required by applicable law.

Where required by applicable law, we will also notify processors, contractors, affiliates, and other recipients of covered consumer health data of the deletion request so that they can take the actions required of them.

Deletion from archived or backup systems may take additional time where permitted by law.

Certain information may be retained where applicable law permits or requires retention, including information necessary for security, fraud prevention, legal compliance, or protection against malicious or illegal activity.

Animus may retain a one-way cryptographic identifier derived from an email address for the limited purpose of enforcing the one-free-trial-per-email policy. This identifier is not used for advertising and does not contain the contents of your Animus reflections.

Payment providers may separately retain financial or transaction records where permitted or required by law.

## 9. WITHDRAWING CONSENT

Where our collection or sharing of consumer health data depends upon your consent, you may withdraw that consent for future collection or sharing by contacting:

privacy@joinanimus.com

Withdrawal of consent does not affect processing that occurred lawfully before the withdrawal.

Because processing information you voluntarily provide is necessary to provide Animus AI, withdrawing permission for processing necessary to provide the service may prevent us from continuing to provide some or all Animus AI functionality.

You may also stop future processing by discontinuing use of Animus and deleting your account.

## 10. APPEALS

If we refuse to take action on a consumer health data request and applicable law gives you the right to appeal, you may submit an appeal by emailing:

privacy@joinanimus.com

Use the subject line:

Consumer Health Data Appeal

Please identify the original request and explain why you believe the decision should be reconsidered.

We will review qualifying appeals and respond in writing within the time required by applicable law.

If an appeal is denied, we will provide information concerning any applicable method by which you may submit a complaint to the appropriate regulator or attorney general.

## 11. CHANGES TO OUR CONSUMER HEALTH DATA PRACTICES

We will update this Consumer Health Data Privacy Policy if our consumer health data practices materially change.

Where applicable law requires affirmative consent before we collect, use, or share additional categories of consumer health data or use consumer health data for additional purposes, we will provide the required disclosure and obtain the required consent before beginning that processing.

## 12. CONTACT

Questions or requests concerning consumer health data may be directed to:

Mark Derian LLC

privacy@joinanimus.com‍ ‍

https://joinanimus.com