This Consumer Health Privacy Policy explains how Calm Health (provided by Calm.com, Inc.) and our subsidiaries and affiliates (“Calm”, “Calm Health”, “we”, “our”, or “us”) collect, use, and disclose certain health information about you when you access or use our Calm Health websites, mobile applications, and other online products and services (collectively, the “Services”), and when you contact our customer service team, engage with us on social media, or otherwise interact with us regarding Calm Health. This Consumer Health Privacy Policy is a supplement to the Calm Health Privacy Policy and applies to personal information and other data that falls within the definition of “consumer health data” under applicable United States state laws including Connecticut’s Data Privacy Act, Nevada’s Consumer Health Data Privacy Act, and Washington’s My Health My Data Act (“Consumer Health Data”). We encourage you to review the Calm Health Privacy Policy to learn more about our privacy practices and our commitments to you when you use Calm Health. Capitalized terms used below have the same definitions as in the Calm Health Privacy Policy or in the applicable laws, unless otherwise noted.

We may change this Consumer Health Privacy Policy from time to time. If we make changes, we will revise the date at the top of the policy and, in some cases, we may provide you with additional notice.

This Consumer Health Privacy Policy does not apply to third-party websites or products. Please separately review their privacy policies to understand how your personal information is used and stored by those third parties.

If you are based in the United States and use our Services, we may collect or receive certain personal information and other data about you that is regulated by certain health information laws, including the Health Insurance Portability and Accountability Act (“HIPAA”). Specifically, if Calm Health is being made available to you by your health insurer, healthcare provider, or other HIPAA covered entity, the Services may be subject to that other entity’s HIPAA Notice of Privacy Practices, which describes how the covered entity uses and discloses your medical information, rather than this Consumer Health Privacy Policy. To review the covered entity’s Notice of Privacy Practices, please contact the covered entity.

Collection of Consumer Health Data

We may collect certain Consumer Health Data about you depending on how you engage with our Services. This health information may fall under the following specific categories of Consumer Health Data:

Sources of Consumer Health Data

We may collect Consumer Health Data in the following ways:

Use of Consumer Health Data

We may use your Consumer Health Data in the following ways:

Disclosures of Consumer Health Data

We may disclose your Consumer Health Data to third parties to achieve the purposes and uses listed above. The categories of third parties to whom we disclose your Consumer Health Data with are:

Privacy Rights

As provided for in the Privacy Rights section of the Calm Health Privacy Policy, you may make requests about your personal information. Applicable privacy laws provide you certain specific rights with respect to your Consumer Health Data law subject to exceptions.

Connecticut residents have the following rights in relation to your Consumer Health Data, subject to certain exceptions:

Nevada and Washington residents have the following rights in relation to their Consumer Health Data, subject to certain exceptions:

You may exercise your rights by contacting support@calmhealth.com with your request. As further stated in the Calm Health Privacy Policy, your request may be denied where an exception applies, including but not limited to, where we are legally required to maintain your Consumer Health Data or if we are unable to authenticate the request using commercially reasonable efforts.

We will respond to your request to exercise your right(s) within forty-five (45) days after receipt, and we reserve the right to extend the response time by an additional forty-five (45) days when reasonably necessary and provided consumer notification of the extension is made within the first forty-five (45) days. An authorized agent may submit a request to exercise the opt-out right on your behalf.

How to appeal decisions about your rights.