Consumer Health Data Privacy Policy
Effective date: August 7, 2026 · Draft under counsel review
Some state laws treat certain data as health data. Here is what Graxe could touch under those laws, and what we actually do.
1. Status of this policy
This policy is in effect for Graxe's early-access period in the form below and is under continuing review by our counsel. If it changes materially, we will show you the new version and ask you to accept it again. It is published separately from our Privacy Policy because several state laws require a standalone consumer health data policy, and because the subject deserves its own page.
2. What consumer health data means
Some state laws, such as Washington's My Health My Data Act, define consumer health data broadly: not just medical records, but any information that could reveal something about your physical or mental health, including inferences drawn from other data. A matchmaking service that watches behavior has to take that breadth seriously, so we address it directly.
3. What Graxe does not collect or infer
We do not ask you health questions, and no feature reads what you write as medical information. We do not model your mood, your emotional state, or your mental wellbeing; we measure how you interact and use it for compatibility, and we do not turn it into a picture of your mental state. We do not diagnose anything, predict any condition, or build any health profile of you.
4. The venue rule
After a match, Graxe suggests places to meet. Medical and recovery locations, reproductive and gender-affirming care locations, places of worship, and identity-specific venues are excluded from our recommendation catalogue entirely. Not filtered at the moment of suggestion; never added to the catalogue in the first place. Where you choose to go is yours, and we would rather not be able to record that you went.
5. What could still count, and how we treat it
Two things we hold could be argued to fall under a broad health data definition: confirmation that you are 18 or older, and signals about how you interact that a statute might call inferences. To the extent any of it is consumer health data under your state's law, we collect and use it only with your consent, only to run the Service, and under every protection in this policy and our Privacy Policy.
6. What we never do with it
We do not sell consumer health data. We do not share it for advertising, and we do not advertise based on it. We do not use it to train anything beyond the matching service you consented to. No third party receives it except the service providers who host our infrastructure, under contracts that limit them to working for us.
7. Your rights
You may ask what we hold, ask for a copy, withdraw consent, or ask us to delete, at any time, by writing to the address below. Deleting your account removes the data this policy covers along with everything else, as the Privacy Policy describes. We will not treat you differently for exercising any right on this page.
8. Contact
Graxe.ai, Inc. · [email protected] · Subject line: health data request