Consumer Health Data Privacy Notice

1. What health data this notice covers

Guilietta does not collect menstrual cycle data, contraceptive methods or other reproductive health data, and does not ask you for diagnoses or medical history. The only data that could be considered consumer health data is what conversation analysis may infer about your emotional or wellbeing state from the text you choose to analyze.

2. How we use it

We use that content solely to return the conversation analysis you requested. We do not use it for advertising, and we never use it to train AI models.

3. No sale, no sharing

Guilietta does not sell, rent or share this information with third parties for commercial or advertising purposes, under any circumstances. Categories of third parties with whom it is shared for commercial purposes: none. The conversation excerpt is processed transiently by our AI processors — Anthropic and OpenAI (fallback) — solely to generate the analysis, under data processing agreements that prohibit using it to train their models. No other third party or affiliate receives this data. We also do not use geofencing around healthcare facilities.

4. Consent

The analysis runs only when you submit a conversation to be analyzed; that action constitutes your explicit consent to process it. It is an optional (opt-in) feature: if you do not use it, no health data is inferred or processed. You can withdraw your consent and stop using it at any time from your profile.

5. Retention

We keep at most a 500-character excerpt of the conversation together with the analysis result. On the Free plan it is retained for 30 days; on paid plans, for as long as your account is active. Our AI processors retain it only for a short abuse-monitoring window under their data processing agreement.

6. Law-enforcement and government requests

We treat this information as especially sensitive and apply the following safeguards:

• ·Guilietta does not disclose this data to authorities unless compelled by a valid and binding legal order.
• ·Where legally permitted, Guilietta will notify the affected user before disclosing any such data.
• ·Guilietta will assess and, where appropriate, challenge requests that are overbroad, disproportionate or invalid.

7. Your rights

You can access and request deletion of your data at any time by writing to hey@guilietta.com. Under applicable U.S. consumer health data laws, you also have the right to confirm whether we process health data about you and to request its deletion. We will respond within a maximum of 45 days. If we deny a request, we will explain the reason and you may appeal the decision by writing to hey@guilietta.com. If the appeal is also denied, you may contact your state Attorney General.

8. Identity verification

To protect your safety, we may ask you for additional information to verify your identity before giving access to or deleting your data. We will not release it without reasonably confirming that the request comes from the account holder.

9. Who is responsible

The controller of your data is Guilietta LLC, registered in the State of Florida, United States. For any question about this notice, contact hey@guilietta.com.

10. Relationship to our Privacy Policy

This notice is specific to consumer health data and does not replace our general Privacy Policy. For all other data and topics — including security, retention and your GDPR, CCPA and LGPD rights — please refer to our Privacy Policy.