Last Updated: August 11, 2026
This policy supplements the BEHCA Privacy Policy (behca.com/privacy) and applies to “consumer health data” as defined by the Washington My Health My Data Act and Nevada consumer health data law: health-related information we collect about individuals acting in a personal or household capacity — principally individuals and families who subscribe to BEHCA directly (our family plans) and the family members whose wellbeing they track. It does not apply to protected health information governed by HIPAA, which we process as a business associate for our covered-entity organizational customers under Business Associate Agreements, or to data we process solely on behalf of an organizational customer.
Consumer Health Data We Collect
- Behavioral and wellness observations recorded in a family account, including behavior type, intensity, duration, frequency, and environmental and health-related factors;
- health information recorded in a family account, including medication lists, medication administration records (MAR) and related alerts and notes;
- incident and daily-note records, messages, and schedules associated with a tracked family member;
- profile details for tracked individuals, such as name, date of birth, photo, and care context.
Sources and Purposes
We collect consumer health data only when you or an authorized member of your family account enters it into BEHCA. We collect and use it solely to provide the services you request: recording and displaying your entries, generating charts, patterns, alerts, and summaries for your care purposes, synchronizing across your devices and invited collaborators, and securing, backing up, and supporting the service. We do not collect consumer health data from other sources, and we do not use it for advertising or any purpose unrelated to the services you request.
Sharing
We do not sell consumer health data, and we will not sell it without the valid authorization the law requires. We do not share it with affiliates or third parties for their own purposes. It is disclosed only to: (a) the collaborators you invite to your account; (b) service providers that process it on our behalf to run BEHCA — hosting and infrastructure operations (Amazon Web Services; Germinate LLC, our affiliated infrastructure operator) and, where support requires, our support tooling — under contracts restricting their use of the data; and (c) recipients required by law, as described in our Privacy Policy.
Your Rights
- Right to know: you may confirm whether we collect, share, or sell consumer health data about you and obtain a list of third parties with whom it has been shared.
- Right to withdraw consent: you may withdraw consent to our collection or sharing of your consumer health data.
- Right to delete: you may request deletion of your consumer health data. We will delete it from our systems and instruct our service providers to do the same, with backup copies deleted in our ordinary backup cycle.
- No retaliation: we will not deny services or discriminate against you for exercising these rights.
To exercise these rights, email privacy@behca.com from the email address on your account, or contact us as described below. We will verify your request and respond within the time required by law (generally 45 days, extendable once where permitted). If we decline a request, you may appeal by replying to our decision; if your appeal is unsuccessful, you may contact the Washington Attorney General (atg.wa.gov) or the Nevada Attorney General (ag.nv.gov).
A parent or legal guardian may exercise these rights on behalf of a minor child; the account holder may exercise them for a tracked family member consistent with applicable law.
Consent
We collect consumer health data only as necessary to provide the services you request when you create and use your account. If we ever seek to collect or share consumer health data for any other purpose, we will ask for your separate, prior consent, and for any sale, a signed authorization as the law requires.
Contact
BEHCA, LLC, 8835 SW Canyon Ln Ste 404A, Portland, Oregon 97225. Email: privacy@behca.com