Consumer Health Data Privacy Policy

Scope

SoulHeal Technology operates DreamPhones, DreamPhones Focus, the DreamPhones companion wellness ring, and the DreamApp mobile application. Because we collect health-related information, this Consumer Health Data Privacy Policy describes how we collect, use, share, and protect "consumer health data" under the Washington My Health My Data Act and similar consumer health privacy laws.

DreamPhones products are consumer wellness products, not medical devices. We do not use consumer health data to diagnose, treat, cure, or prevent disease.

Consumer Health Data We Collect

• Sleep data, sleep summaries, sleep stages, sleep timing, sleep duration, and sleep trends
• Heart rate, heart rate variability (HRV), blood oxygen saturation (SpO2), stress indicators, and camera-based rPPG measurements
• taVNS session data, such as session duration, intensity settings, stimulation status, and session history
• DreamPhones ring data, including ring-generated heart rate, HRV, SpO2, stress, and sleep metrics
• Health-related information you choose to share in conversations with Sophia, our AI wellness companion
• Data you authorize us to read from Apple Health or Android Health Connect
• Support, troubleshooting, warranty, return, and privacy-request information that includes health-related information

Sources and Purposes

We collect consumer health data directly from you, from your DreamPhones headset and DreamPhones ring through the DreamApp, from your device's camera with your permission, from Apple Health or Android Health Connect with your permission, and from messages or requests you choose to send to us.

We collect and use consumer health data only with your consent or to the extent necessary to provide a product or service you request. We use it to operate app features, personalize sessions, provide sleep and focus insights, show wellness dashboards and reports, operate Sophia, troubleshoot technical issues, maintain security, respond to your requests, and comply with law.

Consumer Health Data We Share

We do not sell consumer health data, and we do not use or share consumer health data for advertising, ad targeting, cross-app tracking, or data broker services.

• Categories of consumer health data shared: account identifiers connected to app health data; headset, ring, session, sleep, rPPG, and derived wellness metrics; Sophia chat messages that contain health-related information; support, privacy, and troubleshooting requests that include health-related information.
• Categories of third parties: cloud hosting, database, security, and infrastructure providers; contracted AI/model infrastructure providers that help operate Sophia; app platform and device-permission providers when you choose Apple Health or Android Health Connect; e-commerce, payment, customer-account, shipping, and support providers when purchase or support information may reveal your interest in a wellness product; professional advisors, compliance vendors, and government authorities when required by law.
• Specific affiliates: none currently. SoulHeal Technology does not currently share consumer health data with any affiliated company.

Service providers and processors may use consumer health data only to provide services to us under contract. We do not share Apple Health data, Health Connect data, ring metrics, rPPG measurements, Sophia health conversations, or app session history with advertising networks or data brokers.

Sophia AI Processing

Sophia is an AI wellness companion, not a doctor or medical service. Messages you send to Sophia may include consumer health data if you choose to share health-related information. We process Sophia messages through DreamPhones systems and contracted AI/model infrastructure providers solely to provide the chat response, maintain safety and reliability, troubleshoot abuse or technical issues, and improve the DreamPhones service in privacy-protective ways.

We do not use consumer health data, Sophia chat messages, raw camera video, ring metrics, Apple Health data, or Health Connect data to train third-party foundation models. We do not allow contracted AI/model infrastructure providers to use this data to train their general models.

Camera-Based Measurements and Biometric Data

Camera-based rPPG is optional. Before the first capture, the app asks for your explicit permission to use the front camera to capture a short video of your face during biometrics setup before a session. The video is processed to estimate measurements such as heart rate and HRV. We do not use camera-based measurements for facial recognition or identity verification.

Raw camera video is processed for measurement and is not kept as a video archive. If raw video is temporarily cached for measurement quality, troubleshooting, or security, it is deleted promptly after that purpose is complete and no later than 30 days after capture. Derived measurements such as heart rate and HRV may be stored with your account while needed to provide app features and are deleted within 30 days after account deletion unless a longer period is required by law.

We do not sell, lease, trade, profit from, or disclose camera-based biometric data except with your consent, to service providers that process it for us under contract, or as required by law.

Your Rights

• Right to know and access: confirm whether we collect, share, or sell your consumer health data and access that data, including a list of third parties and affiliates with whom we have shared it
• Right to withdraw consent: withdraw consent to our collection or sharing of your consumer health data
• Right to delete: request deletion of your consumer health data, including from backups and by service providers where required by law
• Right to appeal: appeal a refusal of your request by replying to our decision

To exercise these rights, email contact@dreamphones.ai or use our Delete My Data page. We will not discriminate against you for exercising these rights. If your appeal is denied and you live in Washington, you may raise a concern with the Washington State Attorney General at www.atg.wa.gov.

Retention

• Account data, session history, ring metrics, and derived wellness measurements: retained while your account is active to provide app features and deleted within 30 days after account deletion unless a longer period is required by law.
• Sophia messages: retained while your account is active to provide conversation continuity and deleted within 30 days after account deletion unless a longer period is required for security, legal compliance, or dispute resolution.
• Raw camera video: not kept as a video archive; any temporary cache is deleted promptly after measurement quality, troubleshooting, or security needs are complete and no later than 30 days after capture.
• Push notification tokens: retained while your account is active and notifications are enabled; removed when you disable notifications or delete your account.

After account deletion, we may retain anonymized, aggregated data that cannot identify you for analytics and service improvement.

Contact

If you have questions about this Consumer Health Data Privacy Policy, contact us at contact@dreamphones.ai.