Effective date: September 30, 2026

This policy is required by Washington's My Health My Data Act, Nevada Revised Statutes Chapter 603A (SB 370), and Connecticut's consumer health data law. It applies to consumer health data about anyone in those states, and we apply it to every Somare member. It is part of our Somare: Privacy Policy and Terms and Conditions.

1. Consumer health data we collect

2. Why we collect and use it

Only to provide Somare's features to you: personalizing practices, places, and retreats; your journal and body read; calculating an age-adjusted maximum heart rate; and, if you connect it, providing context to Claude. We do not use it for advertising or research.

3. Sources

You, your device, and Terra compatible devices and software (with your permission). Claude, if you connect it, writes wellness-context entries into Somare.

4. Who we share it with

Recipient Category What
Vercel, Supabase, Upstash Processors All consumer health data stored with your account
Resend
Terra APIProcessor / Integration providerWearable health and activity metrics shared by user authorization Processor No health data; email address only
Anthropic (Claude) Third party, only with your separate consent Body read (readiness, HRV balance, stress, cycle phase) and journal trends for up to 90 days

We do not share consumer health data with affiliates. You can ask for the list of every third party and affiliate that received your data by emailing [email protected].

5. Consent

During our private, invite-only preview, we collect consumer health data and biometric signals only with your explicit, opt-in consent provided during onboarding or account setup. Connecting external services—such as wearable devices via Terra API (including Oura and Garmin) or third-party AI tools like Claude—requires a separate, distinct action and affirmative authorization from you in the app. You can manage or revoke these integrations and consents at any time in your account settings. We never sell consumer health data; selling it would require a separate signed authorization, which we do not request.