Consumer Health Data Privacy Notice
This notice is for residents of Washington (My Health My Data Act), Nevada (SB 370), and Connecticut, whose laws set specific rules for consumer health data and require this to be published separately from our main Privacy Policy.
The essential point: Mini keeps your health data on your phone. We do not collect it, we do not store it on our servers, and we never sell it. The one time it goes anywhere is when you switch on generative AI and ask Mini something — and you choose whether to do that.
What consumer health data is involved, and why
Mini handles the following, all of it on your own device, for the sole purpose of running the features you use — logging how you're doing, showing you patterns over time, reminding you about medication, and producing a report you can hand to someone:
- Conditions or diagnoses you choose to record (always optional).
- Symptoms, severity, mood, and anything else you set up questions about.
- Notes and written answers in your own words.
- Medications and doses you schedule reminders for.
- Bodily functions and measurements from a connected health app — steps, sleep, resting heart rate, heart-rate variability, active energy, exercise minutes, and, only if you enable them, VO₂ max and menstrual flow.
- What you say in conversation with Mini.
We do not use any of it for advertising, profiling, or research, and we do not derive inferences from it for any purpose other than showing you your own patterns.
Where it comes from
- You — everything you type, log, or say to Mini.
- Health apps you connect — Apple Health, Health Connect, or Fitbit, each only after you connect it and only for the figures you allow.
We do not buy health data, receive it from data brokers, or infer it from your location or browsing. Mini does not use your device's location at all.
What is shared, and with whom
We do not share consumer health data with anyone, with one exception that is entirely your choice:
| Third party | What is shared | When |
|---|---|---|
| Anthropic, PBC | The contents of the AI request — dated summaries of what you logged, connected health figures relevant to the question, your schedule for today and the week ahead (name, time, kind and whether it is done — no clinician or address), recent messages, and text you wrote when the request calls for it | Only when you have switched generative AI on and made a request. It is off by default |
| DailyQZ (us) | Feedback you send from Profile: what you typed, and the app details shown beside it. Nothing you have logged goes with it | Only when you write a message and send it |
| Google Cloud (Firebase) | Hosts the server those requests pass through. The request transits it; nothing about it is stored or logged | Same as above |
App failure (crash) reports contain no consumer health data. If you switch on crash reporting in Profile, the report describes where Mini's code failed and what kind of device it failed on. It does not include conditions, symptoms, severity, medications, notes, or any measurement from a connected health app. None of the categories listed above are collected, shared, or sold through crash reporting.
We have no affiliates and no parent or subsidiary companies with whom data is shared. Connecting Fitbit or a weather source involves those providers, but the flow there is to your phone, not a disclosure of your health data by us — weather requests carry only a rounded, city-level coordinate and nothing about you.
We do not sell your health data
We have never sold consumer health data and we will not. Selling it would require your separate written authorisation under Washington law; we do not ask for one, because we have no intention of doing this.
Your rights
You have the right to confirm whether we collect, share, or sell your consumer health data, to see the list of third parties it has been shared with, to withdraw consent, and to have it deleted.
In practice, Mini's design means you can exercise most of these yourself, immediately:
- Confirm and access — everything is in the app. "Back up data" in Profile exports the complete set as a spreadsheet.
- The list of third parties — it is the table above, in full.
- Withdraw consent — turn off generative AI in Profile. Requests stop at once. Disconnecting a health source in Profile → Health data stops that too.
- Delete — "Delete all data" in Profile erases everything on your phone, permanently. Because we hold no copy and Anthropic is not asked to retain one, this is the complete deletion; there is no separate request to make of us and nothing left on our side afterwards.
If you would prefer us to handle a request, or want written confirmation that we hold nothing about you, email privacy@dailyqz.com. We will respond within 45 days, and will tell you if we need the one extension the law allows. We will not charge you or ask you to create an account.
If we refuse a request, we will tell you why and how to appeal; reply to our message and a person will review it. If we deny the appeal, you may complain to the Washington State Attorney General, or to the Attorney General of your own state.
Changes
If what we collect or share changes, we will update this notice and the date above, and tell you in the app before anything new leaves your phone.
Contact
DailyQZ, LLC
privacy@dailyqz.com