Consumer Health Data Privacy Policy

Effective Date / Last Modified: May 15, 2026

This Consumer Health Data Privacy Policy ("CHD Policy") supplements the Liby Health, Inc. Privacy Policy and applies to personal information that falls within the definition of "consumer health data" under applicable state laws, including Washington's My Health My Data Act (RCW 19.373) ("MHMDA"), Nevada's Consumer Health Data Privacy Act (SB 370) ("NHDPA"), and the consumer health data provisions of the Connecticut Data Privacy Act (as amended by Public Act No. 23-56) ("CTDPA").

This CHD Policy applies to (a) residents of Washington State; (b) individuals whose consumer health data is collected in Washington; (c) residents of Nevada or individuals whose consumer health data is collected in Nevada; and (d) residents of Connecticut, in each case as those terms are defined under the applicable law.

This CHD Policy does not apply to information excluded from the scope of these laws, including protected health information governed by HIPAA and data that has been de-identified in accordance with HIPAA standards. As described in the "HIPAA and Health Information Disclaimer" section of the Privacy Policy, Liby Health, Inc. is not a covered entity under HIPAA.

Categories of Consumer Health Data Collected

Because Liby Health, Inc. provides educational courses and support services for ICU survivors and their families, the information we collect as described in the "Information We Collect" section of the Privacy Policy may include consumer health data. The categories of consumer health data we collect or may collect include:

  • Individual health conditions, diseases, or diagnoses, including information about your ICU stay, critical illness, and related conditions that you voluntarily provide through Course surveys and support group participation.
  • Social, psychological, and behavioral information, including self-reported symptom patterns, emotional and cognitive recovery experiences, and reflective responses provided through self-assessment check-ins.
  • Bodily functions, vital signs, symptoms, or measurements of health information, to the extent you voluntarily report physical symptoms or functional status through Course surveys.
  • Data that identifies you as seeking health care services or health-related educational services, including the fact of your enrollment in a course about Post Intensive Care Syndrome (PICS).
  • Inferences about your health status derived or extrapolated from non-health information.

Sources of Consumer Health Data

We collect consumer health data from the sources described in the "How We Collect Information" section of the Privacy Policy, including directly from you (via Tally surveys, support group participation, and other voluntary submissions), from the Teachable platform (course enrollment and progress data).

Purpose of Collection and Use

We collect and use consumer health data for the purposes described in the "How We Use Your Information" section of the Privacy Policy. We will not collect or use consumer health data for materially different, unrelated, or incompatible purposes without first disclosing such additional purposes and obtaining your consent.

Sharing of Consumer Health Data

We may share consumer health data with the categories of recipients described in the "How We Share and Disclose Your Information" section of the Privacy Policy. The service providers who process consumer health data on our behalf pursuant to written agreements include Teachable, Inc. (course hosting, account management, and progress tracking); Tally (survey data collection and processing); Google LLC / Google Workspace (de-identified data analysis); and video conferencing providers (facilitation of support group sessions). Liby Health, Inc. does not currently have any affiliates or subsidiaries.

We do not sell consumer health data. Liby Health, Inc. does not sell, offer to sell, or receive any monetary or other valuable consideration in exchange for consumer health data. We do not share consumer health data for advertising purposes.

Your Consumer Health Data Rights

Applicable consumer health data laws provide you with certain rights, subject to applicable exceptions.

Rights of Washington and Nevada Residents

  • Right to Know. You may request confirmation of whether we collect, share, or sell your consumer health data. You may also request a list of all third parties and affiliates with whom we have shared your consumer health data, including an active email address or other contact mechanism for each such entity.
  • Right to Access. Washington residents may request access to specific consumer health data we have collected about you.
  • Right to Delete. You may request that we delete consumer health data we have collected from or about you. Upon receiving a verified deletion request, we will delete your consumer health data and direct our processors and contractors to do the same, subject to applicable exceptions.
  • Right to Withdraw Consent. You may withdraw your consent to our collection and sharing of consumer health data at any time.
  • Right to Non-Discrimination. We will not discriminate against you for exercising any of these rights.

Rights of Connecticut Residents

In addition to the rights described above, Connecticut residents have the following rights with respect to consumer health data:

  • Right to Opt-Out. You may opt out of targeted advertising, the sale of your consumer health data, and profiling decisions that could produce legal or similarly significant effects. Because Liby Health, Inc. does not currently engage in any of these activities, these opt-out rights do not presently apply.
  • Right to Correct. You may request correction of inaccurate consumer health data.
  • Affirmative Consent for Sensitive Data. We cannot process your consumer health data, or use your consumer health data for certain purposes, without your affirmative consent.

How to Exercise Your Rights

To exercise any of the rights described in this CHD Policy, contact us at privacy@libyhealth.com with the subject line "Consumer Health Data Request." Please include (1) your first and last name; (2) your email address; (3) your state of residence; and (4) a description of the right you wish to exercise. We will verify your identity before processing your request. We will respond within forty-five (45) days. If we require additional time (up to an additional forty-five days), we will notify you in writing within the initial period. You may designate an authorized agent to submit a request on your behalf.

How to Appeal

If your request is denied, you may appeal by contacting us at privacy@libyhealth.com with the subject line "Consumer Health Data Appeal."

Changes to This CHD Policy

We may update this Consumer Health Data Privacy Policy from time to time. If we make material changes to the categories of consumer health data we collect, the purposes for which we use it, or the third parties with whom we share it, we will notify you before those changes take effect and obtain any required consents. We will update the Effective Date accordingly.