Consumer Health Data Privacy Policy

1. Consumer health data we collect, and what we use it for

• Health information you share: information about your physical or mental health that you choose to tell MAX in a chat (on the website, in the app or in Telegram), or to write in your profile text, your Dating Profile Blueprint answers, your weekly tracking notes or a message to our support (for example a condition or treatment you mention). We use it only to give you the coaching and results you ask for and to answer your messages. MAX's safety checks also read what you write in a chat, to show you crisis lines when a conversation suggests a risk of suicide or self-harm.
• Safety records: when MAX's safety protocol acts because a conversation suggests that you, or someone you talk about, may be at risk of suicide or self-harm, or because MAX held back a reply as unsafe, a record on your account of the date and time, the kind of response, which check set it off and whether it was on ProfileMax (the website or the app) or in Telegram, at most once a day for each kind and never the text. We use it only to count how often the protocol acts, for its review and for the numbers-only yearly report California law asks for.

2. Where it comes from

From you, in what you write. Safety records come from MAX's safety checks of your conversation.

3. Consumer health data we share

What you write that may hold health information: your chats with MAX, the profile text, Blueprint answers and weekly tracking notes the features you use work from, and your messages to our support. We don't share safety records.

4. Who we share it with

Only our processors, who act for us under contract:

• Google (Gemini API), to generate MAX's replies and the results of the features you use;
• Render, which hosts ProfileMax and delivers it through Cloudflare's network;
• Supabase, our database and storage;
• our email provider, and Google, which hosts our support mailbox, for your messages to support.

If you connect MAX to Telegram, your messages there pass through Telegram. We have no affiliates that receive consumer health data, and we never sell it.

5. Your rights and how to use them

You can confirm whether we collect, share or sell your consumer health data and get a copy of it; ask for a list of the third parties and affiliates we shared it with and how to contact them (we have no affiliates, and apart from Telegram, if you connected MAX to it, no third party receives it); withdraw your consent; and have it deleted. Deleting a chat deletes what is in it. Deleting your account deletes all of it, including your safety records: only an anonymous count of each safety response's day, kind and channel stays, which can't be traced back to you.

To use these rights, email info@getprofilemax.com from your account's email address, or use Download my data and Delete account in Account settings. We answer within 45 days; when necessary we can extend that once by another 45 days, and we tell you why. If we refuse, you can appeal by replying to our answer: we answer the appeal within 45 days and, if we still refuse, tell you how to contact the Washington or Nevada Attorney General.