Consumer Health Data Privacy Notice

1. Scope

This Consumer Health Data Privacy Notice supplements the Privacy Policy for residents covered by Washington's My Health My Data Act and similar US consumer-health-data laws. It describes health-related information handled through Momentan by "OMNIA-MEDIC" d.o.o. Zenica, Bistua Nuova no. 10, 72000 Zenica, Bosnia and Herzegovina ("Momentan," "we," "us," or "our").

Momentan is a personal relationship app, not a healthcare provider, medical record, diagnostic tool, or emergency service. We do not connect to Apple HealthKit or another health-record platform. A user may nevertheless choose to type health-related details about themselves or another person in a note, moment, profile, task, reminder, transcript, or AI request. Some laws define that information broadly as consumer health data.

2. Categories of consumer health data

Depending on what a user chooses to enter or request, Momentan may process information about physical or mental health conditions, symptoms, diagnoses, treatments, medications, disability, pregnancy, reproductive or sexual health, health-related appointments and event locations, caregiving, or other information that identifies or permits an inference about health status. We may also process an AI prompt, transcript, selected or question-relevant Apple Calendar event detail, temporary Apple Maps or MapKit request, or generated output containing such information.

We do not intentionally infer a diagnosis for advertising, obtain consumer health data from data brokers, or collect biometric or genetic data through a health device. Ordinary security and account information is covered by the main Privacy Policy and is consumer health data only when applicable law treats it that way.

3. Sources

Consumer health data comes directly from the user, from a device contact the user chooses to import or refresh, from selected or question-relevant Apple Calendar event details the user asks Momentan to display or process, from other content the user asks Momentan to process, or from a service provider acting on that request. We do not buy consumer health data.

4. Purposes of collection and use

We process consumer health data only as reasonably necessary to provide and secure the features the user requests, including storing and syncing structured records, displaying relationship context, searching, rendering a temporary map preview for a selected event location through Apple Maps or MapKit, exporting, deleting, providing support, preventing abuse, complying with law, and performing an optional AI or transcription request after the Cloud Processing disclosure is accepted.

Momentan does not currently use consumer health data for targeted advertising, determine eligibility for employment, housing, credit, insurance, or healthcare, or make a medical decision. Momentan is not a medical device, healthcare provider, diagnostic or treatment service, or emergency service. AI output, transcripts, reminders, and notifications may be wrong or delayed and must not be relied on for medical decisions or urgent needs. If anyone may be in immediate danger, call local emergency services now.

5. Categories shared and recipients

The categories of consumer health data we may share are the user-entered health details, related profile or relationship context, prompts, audio, transcripts, generated output, and limited account, device, and security metadata needed for the requested feature. We share only the categories reasonably necessary for that purpose.

Recipient categories are database and authentication hosting, app and web infrastructure, transactional email and support, security, push delivery, mapping, transcription, and AI model routing or generation. Current recipients may include Supabase, Apple, RevenueCat, Expo, Resend, Cloudflare, Vercel, Deepgram, OpenRouter, OpenAI, Anthropic, and DeepSeek, depending on the feature. Apple may receive a selected event's location search text or coordinates through Apple Maps or MapKit. Google may receive sign-in, AI-processing, or public-site font request data, depending on the feature. We have no affiliate that independently receives consumer health data for its own use.

We may also disclose information at the user's direction, in a qualifying business transaction subject to applicable law, or when required to comply with law, protect a person from serious harm, secure the Service, or establish or defend legal claims.

We do not currently sell consumer health data. We will not begin a sale or a use requiring separate authorization without first providing the notice, consent or authorization, and withdrawal or opt-out rights required at that time.

6. Rights and requests

Depending on applicable law, a consumer may request confirmation of whether we collect, share, or sell consumer health data; access that data and a list of all affiliates and third parties with whom it was shared or sold, together with an active email address or other online contact mechanism where required; withdraw consent; or request deletion. A consumer may appeal our refusal of a request.

Use in-app correction, export, consent, and deletion tools where available, or email [email protected] with the subject "Consumer Health Data Request." We may verify identity and authority. When deletion is required, we will delete covered data from live production systems and notify processors or other recipients as required by applicable law. Residual encrypted backup copies may remain inaccessible to ordinary product use until they age out under the provider's applicable recovery-retention period. A restored production environment must remain isolated while post-recovery deletion risk is evaluated under the process described in the Privacy Policy. We will respond and provide an appeal method within the time required by applicable law.

If a request concerns information another user stored about the requester, we may need additional details to locate the record and authenticate the request. We will respond to and act on the request to the extent required by applicable law. Where law permits, we may also direct the requester to or notify the user who controls the private relationship record.

7. Changes and contact

We will post updates to this Notice and obtain consent before a materially different collection, use, or sale when required.

Appeals may be sent to [email protected]. If an appeal is denied, we will provide the online mechanism or other method available for the consumer to contact the Washington State Attorney General or another authority as required by applicable law.

Momentan — Privacy: [email protected] · Appeals: [email protected]