Consumer Health Data Privacy Policy

1. Scope and Definitions

This Policy applies to Bryan True, operating as Bodily Truth, and to consumer health data processed in connection with Bodily Truth contact, appointment, intake, return, and multi-dream services.

“Consumer health data” means personal information that is linked or reasonably linkable to an individual and identifies or reveals past, present, or future physical or mental health status, bodily functions, symptoms, medication use or change status, health-related services sought or received, or an inference derived from such information.

Bodily Truth provides educational and nonmedical services. This Policy does not represent that Bodily Truth is a HIPAA-covered health care provider or that information governed by this Policy constitutes protected health information under HIPAA.

2. Categories of Consumer Health Data

Bodily Truth may collect the following categories:

• Identifiers and communications: name, email address, contact inquiries, appointment communications, and other service correspondence.
• Service-seeking and appointment information: requested service, booking status, appointment date and time, timezone, and eligibility affirmations.
• Bodily and functional observations: long-term or recent self-reported information concerning physical sensations, energy, sleep, stress response, recovery, daily functioning, digestion, bowel and urinary patterns, food response, swelling, sweating, environmental sensitivity, and subjective state.
• Diet and product-use information: diet type or changes, allergies, supplement or herbal use, medication-taking status, and medication-change status.
• Dream and contextual information: dream narratives, approximate dates or times, and voluntarily submitted physical, emotional, sleep, or situational context.
• Derived information: limited provisional educational inferences derived from intake responses.
• Consent, eligibility, and compliance information: affirmations, consent and eligibility records, timestamps, privacy requests, restrictions, and appeals.
• Technical and security information: device, browser, network, request, diagnostic, and security information associated with a health-related interaction.

Unstructured communications may contain additional consumer health data voluntarily supplied by the sender. Bodily Truth does not request medication names or dosages, medical records, payment-card details, government identifiers, account credentials, or emergency information through its service forms.

3. Sources of Consumer Health Data

Bodily Truth collects consumer health data directly from individuals; from scheduling, payment, communications, and other service providers; automatically from browsers, devices, networks, and security services; and through limited inferences derived from submitted information.

4. Purposes and Manner of Processing

Bodily Truth may collect, organize, analyze, store, retrieve, use, disclose as stated in this Policy, correct, restrict, and delete consumer health data for the following purposes:

• respond to health-related inquiries and administer communications;
• determine eligibility and administer appointments;
• prepare for and provide requested educational appointments and multi-dream interpretations;
• compare current and prior observations and maintain continuity between requested services;
• derive and review limited educational inferences;
• maintain client, appointment, service, practitioner-note, consent, and transaction records;
• deliver service communications and process payments, refunds, disputes, and fulfillment;
• protect the services, prevent abuse, diagnose failures, and respond to incidents;
• administer privacy rights, restrictions, appeals, retention, and legal holds; and
• comply with law and establish, exercise, or defend legal claims.

Any provisional educational inference derived from submitted information is not a medical diagnosis, current organ-state determination, treatment recommendation, psychological assessment, or automated decision producing legal or similarly significant effects.

5. Consent

Where affirmative consent is required, Bodily Truth obtains consent before the applicable collection or sharing of consumer health data. The request for consent identifies the relevant categories, purposes, recipient categories where applicable, and method of withdrawal. Consent to collection and any consent legally required for sharing are obtained separately when applicable. Bodily Truth maintains records of consent.

Consent may be withdrawn through the methods stated in Section 10. Withdrawal applies to future processing, does not invalidate processing completed before receipt, and does not itself delete existing records. Bodily Truth may be unable to continue a requested service when the affected information is necessary to provide or administer that service.

6. Disclosures and Recipient Categories

Bodily Truth may disclose consumer health data to the following categories of recipients when reasonably necessary for the purposes stated in this Policy:

Consumer health data disclosed for requested services may include identifiers, service-seeking and appointment information, submitted service information, derived information, consent information, transaction and fulfillment information, communications, and technical information, according to the recipient's limited function. A disclosure to a processor or service provider may not constitute “sharing” under applicable law.

Bodily Truth has no affiliate to which consumer health data is disclosed.

7. Sale, Advertising, Profiling, and Geofencing

• Bodily Truth does not sell consumer health data.
• Bodily Truth does not use consumer health data for targeted or behavioral advertising.
• Bodily Truth does not disclose consumer health data to advertising platforms or data brokers.
• Bodily Truth does not use consumer health data for profiling that produces legal or similarly significant effects.
• Bodily Truth does not use client submissions to train generative-AI models.
• Bodily Truth does not use a health-facility geofence to identify, track, collect data from, or send health-related messages to individuals.

Bodily Truth does not knowingly permit a third party to collect consumer health data over time and across unaffiliated websites through the Bodily Truth website.

Any future collection, purpose, recipient, or disclosure requiring additional or separate consent will not begin until the required disclosure and consent have occurred. Consent to the current collection is not an authorization to sell consumer health data.

8. Retention and Security

Identified client, appointment, form, dream-order, and practitioner-note records are generally retained for seven calendar years from the applicable appointment, submission, transaction, or record date. Administrative form notifications are generally retained for 90 days, and ordinary contact messages and client replies are generally retained for one year. Privacy, incident, dispute, accounting, and legal-hold records are retained according to their applicable legal and recordkeeping periods.

Legal holds, disputes, fraud or security review, and other legal duties may suspend ordinary deletion. Deletion from backups or systems controlled by another entity may occur according to applicable law and that entity's retention processes.

Bodily Truth restricts access to consumer health data to authorized persons and service providers that require access for the purposes stated in this Policy. Bodily Truth maintains reasonable administrative, technical, and organizational safeguards appropriate to the nature and volume of the data. No method of transmission or storage is completely secure.

9. Consumer Health Data Rights

Depending on applicable law, you may have the right to:

• confirm whether Bodily Truth collects, shares, or sells consumer health data about you;
• access, correct, or delete that data;
• withdraw consent from future collection, use, or sharing;
• receive a list of relevant recipients and a way to contact them when required;
• receive a portable copy where applicable;
• use an authorized agent where applicable;
• exercise rights without unlawful discrimination; and
• appeal a refusal to act.

Bodily Truth does not sell consumer health data, so there is no sale authorization to revoke.

Upon an authenticated deletion request, Bodily Truth will delete covered active records and direct applicable recipients to delete covered data as required by law. Archived and backup records will be handled within the period permitted by applicable law. A lawful exception or legal hold may limit or delay deletion.

10. Requests and Appeals

A request, consent withdrawal, or appeal must be submitted to privacy@bodilytruth.com or the postal address in Section 12 and must identify the right, service, and email address involved. An appeal must be identified as “Privacy Appeal.”

Bodily Truth uses a proportionate authentication process, ordinarily by confirming control of the relevant email address and matching limited information already held. Creation of a new account is not required. Additional information may be requested only when reasonably necessary to authenticate the individual and the request.

Bodily Truth will respond without undue delay and within 45 days where required. One additional 45-day period may be used when legally permitted and reasonably necessary, provided notice and an explanation are given within the initial period. If an appeal is denied, Bodily Truth will provide the applicable attorney-general complaint method where required.

11. Policy Changes

Bodily Truth may amend this Policy to reflect changes in law, services, or data practices. The effective date identifies the current version. Material changes will be notified by posting the revised Policy on this page and, when required, through direct electronic or service notice. Bodily Truth will disclose and obtain consent before collecting, using, or sharing materially new categories of consumer health data, adding materially new purposes, or making materially new disclosures where such consent is required.

12. Contact Information

Consumer-health-data questions, requests, consent withdrawals, and appeals may be directed to privacy@bodilytruth.com or: