Consumer Health Data Privacy

This Consumer Health Data Privacy Policy supplements our general Privacy Policy and applies only to information treated as "consumer health data" under the Washington My Health My Data Act, Nevada's consumer health data law, or a similar applicable state law. It applies to covered consumers whose data is collected in those states. Soul Experience is not a health-care provider, and this policy does not make our spiritual, reflective, or educational Services health care.

Depending on what you choose to submit and how a law defines consumer health data, we may collect:

• reflection, intake, journal, assessment, and goal-setting responses that reveal or may permit an inference about emotional or mental wellbeing;
• information about meditation, hypnotherapy, regression, wellbeing, or other practices and services you request;
• birth details, astrology information, spiritual profiles, and generated insights, but only to the extent an applicable law treats them as consumer health data;
• communications or support requests that contain information about physical or mental health; and
• purchase, usage, device, and interaction data linked to one of the categories above.

Please do not submit medical records, diagnoses, prescriptions, insurance information, or emergency information. The Services are not designed for clinical care or medical-record storage.

• You: forms, assessments, communications, purchases, bookings, and content you submit.
• Our Services: scores, reports, summaries, and other insights inferred or generated from your inputs.
• Your device: use and interaction data when it is linked to covered information and collection is permitted.
• Providers you direct to interact with us: commerce, course, social, calendar, communications, or authentication services.

• to provide the assessment, report, meditation, course, membership experience, booking, or other Service you request;
• to personalize and maintain your account, progress, and saved content;
• to respond to support requests and deliver service communications;
• to secure the Services, prevent fraud or abuse, and comply with law; and
• to improve the Services or measure attribution only with the consent required by applicable law.

We may share the categories described above only as reasonably necessary for the stated purposes, with the following processors or categories of third parties:

• Vercel and Upstash for website hosting, application infrastructure, and storage;
• OpenAI and Anthropic for requested AI-assisted content generation;
• Stripe and Kajabi for payment, purchase, membership, and course administration;
• Resend and Twilio for service communications you request or consent to receive;
• Google and Zoom for booking, calendar, event, and meeting features;
• Meta/Instagram and ManyChat when you interact through those connected services;
• Google Analytics for optional analytics only when allowed and only to the extent interaction data is treated as consumer health data; and
• professional advisers, law enforcement, or a business successor when disclosure is legally permitted and reasonably necessary.

We have no corporate affiliates with which we share consumer health data. We do not sell consumer health data. If we ever propose a sale, we will first obtain the separate, valid authorization required by applicable law.

Depending on the law that applies, you may have the right to:

• confirm whether we collect, share, or sell consumer health data and access that data;
• receive a list of third parties and affiliates with whom your consumer health data was shared or sold;
• withdraw consent for collection or sharing;
• request deletion from us and, where required, from processors and other recipients; and
• appeal a refusal to act on your request.

To exercise a right, email mykefacebook@gmail.com from the address connected to your account and state the right you want to exercise. We may reasonably verify your identity or an authorized agent's authority. We will not discriminate against you for making a request.

If we deny a request, reply with the subject Consumer Health Data Appealand explain why the decision should be reconsidered. We will decide the appeal within the time required by applicable law. If the appeal is denied, we will provide a method to contact the appropriate state regulator, including the Washington or Nevada Attorney General when applicable.

We will not collect, use, or share a new category of consumer health data or use it for a materially different purpose without first updating this policy and obtaining any consent required by law.

Questions can be sent to Golden Soul Wellness LLC, doing business as Soul Experience, at mykefacebook@gmail.com. See our Data Deletion Instructions for the deletion process.