Privacy Policy

Subjective Health operates this website. Our mission is to help people feel their best, built around how you actually feel rather than a single number on a chart.

This policy explains what information we collect through this site, why we collect it, and the choices you have. It is written to be read by a person, not only a lawyer. If you have a question, email privacy@subjective.health.

Information you give us. When you use the intake on our /start page, we collect the free-text description of how you feel, the focus areas you select, your name, and your email address. If you contact us directly, we keep what you send.

Information collected automatically. When you visit the site, we collect basic usage and analytics data, such as your IP address, device and browser type, the pages you view, and how you arrived. We collect this using cookies and similar technologies through Google Analytics 4, PostHog, and Vercel Analytics.

Information from the Subjective app. If you use the app, we collect what you enter to run your program — your daily check-ins (how you feel, energy, mood, sleep, side effects), your weight and body measurements, any medication and dose you log, and your goals — and, only if you turn it on, the Apple Health categories you allow. This is consumer health data and is covered in detail by our separate Consumer Health Data Privacy Policy. We use it only to provide the service; we never use it for advertising, never give it to analytics or advertising tools, and never sell it.

To follow up with you about Subjective Health and respond to your inquiry, using the name and email you provide.

To understand what you are looking for, so our follow-up is relevant to the focus areas and the note you shared.

To operate, secure, and improve the site, including understanding which pages are useful and where the experience can be better.

To meet legal and safety obligations where they apply.

When you submit the intake form, you are asking us to follow up with you, and we process your information to do that and because we have a legitimate interest in operating and improving the site.

For non-essential cookies used for analytics, the default depends on where you are. If you are in the European Economic Area, the United Kingdom, or Switzerland, analytics stays off until you accept it, so we rely on your consent. Elsewhere, analytics is on by default and we rely on our legitimate interest in operating and improving the site, with the ability for you to opt out at any time. Either way you can change your choice whenever you like using the Cookie preferences link in the footer, or by managing cookies in your browser.

We share information only with service providers that process it on our behalf to run the service — our cloud hosting, database, and authentication provider (Amazon Web Services and Amazon Cognito, in the United States), our analytics providers (Google Analytics 4, PostHog, and Vercel Analytics, which never receive your consumer health data), our payments provider (Stripe), our email provider (Resend), and Apple for Sign in with Apple. They may use your information only to provide their service to us.

We may disclose information when required by law or to protect the safety of a person or the integrity of the site.

We do not sell your personal information, and we do not “share” it for cross-context behavioral advertising, as those terms are used under California law (CCPA/CPRA). Other than the service providers above, we do not hand your information to third parties for their own purposes.

Your information is stored securely in the United States on Amazon Web Services. It is encrypted in transit and at rest, and access is limited to authorized personnel who need it to do their work.

No system is perfectly secure, so we cannot promise absolute security, but we treat your information as something to be protected, not traded.

We keep the information you give us only as long as needed for the purpose you gave it, such as following up with you and operating the site, and as long as the law requires. When we no longer need it, we delete it or remove what identifies you.

You can ask us to access, correct, or delete the personal information we hold about you. You can opt out of any sale or sharing of your personal information, though, as noted above, none occurs.

Depending on where you live, you may have additional rights. If you are in the EU or UK, the GDPR and UK data-protection law give you rights to access, correct, delete, restrict, and object to certain processing, and to data portability, along with the right to lodge a complaint with your supervisory authority.

We will not discriminate against you for exercising any of these rights.

Email privacy@subjective.health and tell us what you would like to do. We will verify your request and respond within the time the law allows. You can also opt out of marketing emails at any time using the link in the email.

We use a small set of cookies and similar technologies. Some are essential to keep the site working. Others are non-essential and power our analytics: Google Analytics 4, PostHog, and Vercel Analytics, which help us see aggregate traffic, product usage, and performance.

What happens by default depends on your location. If you are in the European Economic Area, the United Kingdom, or Switzerland, non-essential analytics cookies are off until you accept them on the banner shown on your first visit. Everywhere else, analytics is on by default and the banner lets you opt out; if you do nothing, it keeps running.

You can change your choice at any time using the Cookie preferences link in the site footer, which reopens the banner, and you can manage or clear cookies through your browser settings. If you decline or opt out, analytics cookies are not set, capture stops, and the rest of the site still works.

This site is intended for adults 18 and older. It is not directed to anyone under 18, and we do not knowingly collect information from anyone under 18.

This site, and the intake form on it, are for general information only. They are not a medical consultation, not a diagnosis, and not a substitute for advice from a qualified clinician. Submitting the form does not create a clinician-patient relationship. Nothing is prescribed from a form.

When Subjective Health begins providing clinical care, health information created in the course of that care is handled separately under the privacy and security laws that apply to health care, such as HIPAA. This policy covers the marketing website and the information you share through it.

We review this policy periodically and may update it as the site grows and as the law changes. When we do, we will revise the date at the top of this page. Material changes will be communicated more directly where appropriate.

Questions about this policy or your information can be sent to privacy@subjective.health.