Consumer Health Data Privacy Policy
The Exposome Intelligence Company ("EXPIN")
Effective date: June 15, 2026
Last updated: June 15, 2026
About this policy
This Consumer Health Data Privacy Policy explains how EXPIN collects, uses, shares, and protects consumer health data, and the rights you have over it. It supplements our general Privacy Policy; where this policy and the general Privacy Policy differ with respect to consumer health data, this policy controls. It is linked from our homepage.
This policy applies to consumers protected by U.S. state consumer-health-data laws, including residents of Washington (My Health My Data Act), Nevada, Connecticut, and other states whose laws regulate consumer health data.
EXPIN is an investigative research tool and is not a HIPAA-covered entity; this policy governs health data that is not regulated by HIPAA. EXPIN does not provide medical advice, diagnosis, or treatment. See our Terms of Service.
1. What "consumer health data" means
"Consumer health data" means personal information that is linked or reasonably linkable to you and that identifies your past, present, or future physical or mental health status. For EXPIN, this can include your diagnoses and conditions, symptoms, medications, lab and antibody results, reproductive or other health history, your responses during the AI-guided interview to the extent they reveal health status, precise location or address information used to assess environmental exposures relevant to your health, and inferences we derive that relate to your health.
2. Consumer health data we collect
Depending on how you use the Service, we may collect:
- Health information you provide, such as diagnoses and diagnostic history, symptoms, medications, lab and antibody results, and other conditions you choose to share.
- AI-interview content that reveals health status, including life, residence, occupational, dietary, environmental, infection, reproductive, lifestyle, stress/trauma, and substance-use history.
- Location and residence information used to associate your history with environmental and public-health data relevant to your health.
- Consultation information exchanged with our team.
- Inferences we derive from the above to build your expotype (potential exposure–outcome relationships).
We do not currently ingest an individual's electronic health-record or insurance-claims data; if we offer that in the future, we will obtain it only with your authorization and update our policies first.
3. Where we get it
We collect consumer health data directly from you (through the application, the AI-guided interview, consultations, and documents you choose to upload). To build your expotype, we combine your information with external, non-personal reference data associated with the history you provide. Examples include environmental and air/water-quality databases, toxicological and regulatory resources (such as EPA and ATSDR), public-health datasets, and peer-reviewed scientific literature. These external sources are reference data about places and exposures, not health data we obtain about you from third parties.
4. How we use consumer health data
We use consumer health data to:
- create, maintain, personalize, and refine your expotype and longitudinal insights over time;
- conduct the AI-guided interview and any human review;
- provide consultations and respond to your inquiries;
- at your direction, share your expotype with a healthcare provider you designate;
- secure, troubleshoot, and operate the Service; and
- comply with legal obligations.
Separately, and only with your affirmative, opt-in consent, we may use information (wherever feasible in de-identified form) to develop or train our models or improve the Service for users generally. You can withdraw this consent at any time, as described in our Privacy Policy.
5. How we share consumer health data
We share consumer health data only as needed to provide the Service and only in these ways:
- Service providers / processors acting on our behalf under contract (for example, cloud hosting, the AI/large-language-model providers that power the interview, and communications providers). We contractually require our AI providers not to use your information to train their own models.
- Our clinical and scientific advisors who review results as part of providing the Service, under confidentiality obligations.
- Healthcare providers you designate, at your direction, when you choose to share your expotype.
- Legal, safety, and compliance recipients where disclosure is required by law or necessary to protect rights, safety, or the integrity of the Service.
- Business transfers, in connection with a merger, acquisition, financing, or sale of assets, subject to this policy or successor protections.
We never use or disclose consumer health data for advertising, and we never share it with advertising partners or networks. Our interest-based advertising uses only limited, non-health information and never your consumer health data, as described in our Privacy Policy.
6. We do not sell consumer health data
EXPIN does not sell your consumer health data, and we will not sell it. Consistent with applicable law, we would not engage in any sale of consumer health data without your separate, valid written authorization and we have no plans to seek such authorization.
7. Consent and authorization
We obtain your consent before collecting consumer health data that is not necessary to provide a product or service you have requested, and we obtain a separate authorization before any sharing or sale that would require one under applicable law. Where you use the Service on behalf of another adult, you confirm you have authority to provide their information and consents.
8. Your rights
Subject to applicable law, you have the right to:
- Confirm whether we are collecting, using, or sharing your consumer health data, and access that data, including a list of the third parties and affiliates with whom we have shared it;
- Withdraw consent to our collection and sharing of your consumer health data;
- Delete your consumer health data; and
- Appeal a denial of any of these requests.
To exercise these rights, submit a request through our customer contact portal, available on our website at https://www.expin.ai/contact and within the EXPIN app. We will verify and respond within the timeframe required by law. If we deny your request, we will explain why and tell you how to appeal; if your appeal is denied, you may contact your state attorney general. We will not discriminate against you for exercising these rights.
When you withdraw consent or request deletion, we will delete your consumer health data and direct our processors to do the same, except where we must retain certain records to meet legal obligations or where the data is held in de-identified form. Note that information already incorporated into a trained model generally cannot be removed from that model.
9. Data security and access controls
We use administrative, technical, and physical safeguards aligned to healthcare-industry standards, including encryption, logging, and vendor due diligence. We restrict access to consumer health data to the employees, contractors, and processors who need it to provide the Service, under contractual confidentiality and least-privilege access controls. No method of transmission or storage is fully secure, and we cannot guarantee absolute security.
10. No geofencing
We do not use a geofence around any healthcare facility, provider, or other location that provides health services to identify or track consumers, collect consumer health data, or send notifications or advertisements related to consumer health data.
11. Affiliates and processors
We may share consumer health data with our corporate affiliates and processors as described in Section 5, in each case bound to use it only to provide the Service to you and to protect it consistent with this policy.
12. Changes to this policy
We may update this policy from time to time. If we make material changes, we will post the updated policy with a new effective date and notify you by email and/or an in-app notice, and, where required, obtain your consent.
13. Contact us
The Exposome Intelligence Company
1111 Oakfield Dr
Ste 115 PMB 3255
Brandon, FL 33511-4948
Consumer-health-data requests and questions: our customer contact portal, available on our website at https://www.expin.ai/contact and within the EXPIN app. See also our general Privacy Policy.