Eyozi Consumer Health Data Privacy Policy
Effective Date: August 6, 2026 Last Updated: August 6, 2026 Operated by: Telson Media, LLC
Why this is a separate document. Washington's My Health My Data Act requires that a consumer health data privacy policy be a standalone notice containing only the information the Act requires, with no marketing content and not combined with other notices. Nevada and other states impose comparable requirements. This document is therefore kept separate from the general Eyozi Privacy Policy.
1. Scope
This notice describes how Telson Media, LLC collects, uses, shares, and protects consumer health data through the Eyozi website and mobile applications.
This notice applies to all Eyozi users. It applies specifically to residents of Washington, Nevada, and other states with consumer health data laws, and we apply its protections to all users regardless of residence.
2. Categories of Consumer Health Data We Collect
| Category | Specific Data |
|---|---|
| Mood information | Self-reported mood rating (1–10 or 1–100 scale) |
| Related self-reported metrics | Energy level, stress level, sleep quality (1–10 scale) |
| User-authored notes | Free-text notes optionally attached to a check-in |
| Check-in timing | Date, time, and time slot of each entry; date of most recent entry |
| Check-in participation status | Whether a check-in was completed or missed within a defined window |
| Bodily-autonomy and topic preferences | Self-selected physical contact comfort level; self-selected subject-matter preferences, some of which may relate to health status |
| Safety incident information | Responses to meetup safety surveys and follow-up questionnaires, which may describe physical or psychological well-being |
| Location associated with the above | Approximate geographic coordinates derived from the city a user types in, and the location of a scheduled meetup. We do not collect precise or device-based geolocation. |
We do not collect as consumer health data: medical diagnoses, treatment records, prescription or medication data, laboratory or test results, genetic data, insurance information, reproductive or sexual health records, or data from any healthcare provider.
2.1 Biometric Information Is Not Consumer Health Data Here
Eyozi performs one biometric process, and it has nothing to do with health.
A consumer who chooses to purchase the paid Power Plan must first prove they are 18 or older. That check involves a facial scan, and where the scan is not decisive, a government-issued identity document. It is performed by a third-party verification provider, and Telson Media never receives the facial image, the facial geometry template, the identity document, or the consumer's date of birth.
This information is:
- Collected for one purpose only — determining whether the consumer is 18 or older
- Never used to identify, infer, assess, or record anything about a consumer's physical or mental health
- Never combined with, linked to, or used to interpret any of the consumer health data listed in Section 2
- Never shared with any recipient listed in Section 5, and never disclosed to our database, hosting, email, SMS, or push providers
- Never collected from a consumer under 18, because a minor cannot purchase the Power Plan
We do not treat this information as consumer health data, and we do not use it as such. It is described in full in Section 7.1 of the Eyozi Privacy Policy, including what is captured, its single purpose, how long our provider retains it, and how a consumer may have it deleted.
3. Sources of Consumer Health Data
- Directly from the consumer. All consumer health data listed in Section 2 is entered by the consumer into the Eyozi application.
- Generated by the service in response to consumer input. Timestamps, check-in completion status, and derived time-slot classifications.
- From another consumer. A safety survey or questionnaire completed by one user may describe a meetup involving another user.
We do not purchase consumer health data, obtain it from data brokers, or acquire it from third-party sources.
4. Purposes for Collecting and Using Consumer Health Data
We collect and use consumer health data only for the following purposes:
- To display the consumer's own entries back to them, including historical trends and graphs
- To determine which check-in windows are available to the consumer
- To deliver reminders the consumer has scheduled, and to suppress a reminder when the corresponding entry has already been recorded
- To operate the Morning Check-In Safety System, which the consumer enables and configures, including determining whether a check-in was completed within the consumer's selected timeframe and sending an alert to the consumer's designated Emergency Contact if it was not
- To operate meetup safety check-in surveys and, where a response indicates a safety concern, to take the responsive actions the consumer selected
- To match consumers with other community members based on preferences the consumer has set, where the consumer has chosen an active Community Status
- To provide customer support in response to a consumer's own request
- To detect, prevent, and respond to security incidents, fraud, and conduct that threatens the safety of any person
- To comply with legal obligations
We do not use consumer health data for advertising, marketing, targeted advertising, profiling for commercial purposes, training artificial intelligence or machine learning models, research, or any secondary purpose not listed above.
5. Categories of Consumer Health Data We Share, and With Whom
We share consumer health data only as follows:
| Recipient | Category Shared | Purpose |
|---|---|---|
| Convex (database and backend infrastructure) | All categories in Section 2 | Storage and processing on our behalf |
| Vercel (application hosting) | Data in transit during a user session | Hosting on our behalf |
| SendGrid (email delivery) | Only the content of an alert or reminder message, which may indicate that a check-in was missed | Message delivery on our behalf |
| Twilio (SMS delivery) | Only the content of an alert or reminder message, which may indicate that a check-in was missed | Message delivery on our behalf |
| Expo (push notification delivery) | Only the content of a push notification, which may indicate that a check-in was missed | Message delivery on our behalf |
| A consumer's designated Emergency Contact | Only: that a scheduled check-in was not completed, or that a meetup safety survey was not completed or indicated a concern; the consumer's name and time zone; the timestamp of the last completed check-in; and, for meetup alerts, the meetup location | To perform the function the consumer enabled and configured |
| Other Eyozi users | Only self-selected preference categories the consumer has chosen to display, including physical contact comfort level and subject-matter preferences | Community matching, only where the consumer has set an active Community Status |
| Law enforcement or other authorities | As required | Only in response to valid legal process, or where necessary to prevent imminent harm to a person |
Each service provider listed above is contractually restricted to processing consumer health data solely on our behalf and for the purposes stated.
We do not share consumer health data with any advertising network, data broker, analytics provider, artificial intelligence provider, or third-party content moderation service. Content moderation is performed within our own systems.
Our age verification provider receives no consumer health data of any kind. It receives only an anonymous account reference number and the facial scan or identity document the consumer provides to it directly, as described in Section 2.1. It has no access to mood entries, notes, check-in timing, safety survey responses, preferences, or location.
6. Sale of Consumer Health Data
We do not sell consumer health data, and we have never sold consumer health data.
We do not collect, use, share, or sell consumer health data for the purpose of advertising or marketing. Because we do not sell consumer health data, we do not seek or maintain valid authorizations for sale.
7. Consumer Rights Regarding Consumer Health Data
Every consumer has the following rights with respect to their consumer health data. We honor these rights for all Eyozi users, regardless of state of residence.
| Right | Description |
|---|---|
| Right to confirm and access | Confirm whether we collect, share, or sell your consumer health data, and access that data, including a list of all third parties with whom we have shared it and an active contact for each |
| Right to withdraw consent | Withdraw consent to our collection and sharing of your consumer health data at any time |
| Right to delete | Request deletion of your consumer health data from our records and from those of our service providers |
| Right to appeal | Appeal any denial of a request |
| Right against discrimination | Not be denied goods or services, charged a different price, or provided a different level of quality for exercising these rights |
7.1 How to Exercise These Rights
Email: info@eyozi.life Subject line: "Consumer Health Data Request"
Requests are fulfilled manually by our team; there is no self-service export tool. This does not limit your rights or delay them beyond the timeframe in Section 7.2.
We will verify your identity, ordinarily by confirming control of the email address associated with the account. We will not require you to create an account solely to submit a request.
7.2 Response Timeline
We will respond within forty-five (45) days of receipt. If reasonably necessary, we may extend by an additional forty-five (45) days and will notify you of the extension and the reason within the initial period.
7.3 Deletion Requests
Upon a verified deletion request, we will delete your consumer health data from our records and notify each of our service providers to delete it from theirs.
Limited exception. Where a meetup safety survey or incident record contains information necessary to protect the safety of another identified person, or where retention is required by law, we may retain that specific record. We will inform you if this applies to your request and will identify what was retained and why.
7.4 Appeals
If we deny a request, you may appeal by emailing info@eyozi.life with "Consumer Health Data Appeal" in the subject line. We will respond in writing within forty-five (45) days, explaining the reasons for our decision. If we deny your appeal, we will provide you with a method to contact your state Attorney General to submit a complaint.
Washington residents may contact the Washington State Attorney General at atg.wa.gov/file-complaint.
8. Employees, Contractors, and Service Providers With Access
Access to consumer health data is limited to:
- Authorized personnel of Telson Media, LLC whose role requires access to operate the service, resolve a technical issue reported by the consumer, respond to a consumer request, or respond to a safety incident
- The service providers identified in Section 5, each restricted by contract to processing on our behalf
We maintain access controls limiting access to what each role requires. We do not permit any employee, contractor, or service provider to use consumer health data for any purpose other than those stated in Section 4.
9. Geofencing
We do not use geofencing.
We do not operate, and will not operate, a virtual boundary around any facility providing in-person healthcare services for the purpose of identifying or tracking consumers seeking healthcare services, collecting consumer health data, or sending any notification, message, or advertisement related to consumer health data or healthcare services.
10. Retention of Consumer Health Data
Consumer health data is retained for the life of the account and deleted upon account deletion or upon a verified deletion request, except as stated in Section 7.3. This includes check-in entries — mood, energy, stress, sleep, and attached notes — which are kept for as long as the account exists and are not deleted on any schedule.
A consumer may request deletion at any time. There is no window to act within and no point at which the right expires.
11. Changes to This Notice
We will not collect, use, or share additional categories of consumer health data, or use consumer health data for additional purposes, without first disclosing the change here and obtaining consumer consent where required by law.
Material changes will be notified through the application or by email at least thirty (30) days before taking effect.
12. Contact
Telson Media, LLC Truckee, California, United States info@eyozi.life