Consumer Health Data Privacy Policy

This policy is about health information you keep in keepr. It adds to our Privacy Policy, which covers everything else. Where the two differ, this one wins for health data.

keepr is run by KEEPR, LLC, an Oregon limited liability company, at 555 Grandover Ave SE, Salem, OR 97306. Write to us about health data at privacy@keepr.cloud.

We wrote this policy for Washington's My Health My Data Act. We apply it to everyone, wherever you live.

The short version

• keepr keeps your health information only to do what you asked: store it, show it to you and to the people you choose, and remind you about it.
• We never sell your health data, and we never share it. The only companies that handle it are the ones that run keepr's servers and mail for us.
• We ask for your consent before keepr keeps health data from a health bundle.
• keepr isn't covered by HIPAA and doesn't sign business associate agreements yet, so healthcare providers, health plans and business associates that HIPAA covers must not store patient records.
• You can see, export and delete your health data at any time.

What counts as health data

Information that is about your physical or mental health, or that could reveal it. In keepr, that can include:

• conditions, symptoms, diagnoses and treatments;
• medications, doses and vaccines;
• measurements such as weight, blood pressure, heart rate or blood sugar;
• care notes, feeding logs, sleep logs and appointments;
• files such as lab results, prescriptions or photos;
• the fact that you installed a health bundle, followed an item, or said "me too" on an item in a health reference collection such as Medications;
• locations you record that show a visit to a health provider;
• health information sent to you through a public form.

keepr doesn't decide what your items are. Any item can hold health information, whether or not it came from a health bundle. This policy applies to all of it.

Where it comes from

• You, when you add or import items or attach files.
• People you share a collection with, when they add or change items.
• Assistants and API keys you connect, when they write for you.
• People who fill in your public forms.

keepr doesn't buy health data, and doesn't collect it from other sources.

Why keepr keeps it

Only to provide what you asked for:

• storing, showing, searching, charting and exporting your items;
• sharing them with the people you choose;
• running the reminders, automations and notifications you set up;
• keeping keepr secure and investigating abuse;
• meeting legal duties.

keepr doesn't use health data for advertising, doesn't build profiles, and doesn't train AI models on it.

Your consent

• When you install a health bundle from Discover, keepr asks for your consent before it keeps health data. It says what keepr will keep and why, and links to this policy. keepr records which version of the words you agreed to, when, and what you installed.
• If the words change, keepr asks you again the next time you install a health bundle.
• You can withdraw your consent at any time by writing to privacy@keepr.cloud. Withdrawing consent doesn't delete what's already there; to delete it, see "Deleting it" below.

Who handles it

Companies that run keepr for us

These processors handle your health data only on our instructions and only to run keepr.

Processor	What it does	Its privacy notice
Amazon Web Services, Inc.	Servers, file storage, email sending, firewall, monitoring and malware scanning, in us-west-2 (Oregon)	https://aws.amazon.com/privacy/
MongoDB, Inc. (Atlas)	The database, on AWS in us-west-2	https://www.mongodb.com/legal/privacy
Google LLC (Google Workspace)	Our support, privacy and security mailboxes: what you write to us	https://policies.google.com/privacy

Google (Firebase Hosting, Google Fonts) and Cloudflare (Turnstile) see your IP address and browser when you load keepr or pass a bot check. They don't receive what you keep.

People you choose

When you share a collection, publish one, make a public link or connect an assistant, the people or assistant you chose can see the health data in it. That's you directing keepr to disclose it. You can stop it at any time.

Your assistant's company receives what the assistant reads, under its own terms. keepr itself calls no AI provider.

keepr's administrators

keepr's administrators can open any item, health data included. They do so only to support you, to deal with abuse or a security problem, or to meet a legal duty.

Nobody else

We never sell health data. We never share it with anyone else, affiliates included. If the law forces us to disclose it, we tell you first where we're allowed to.

Clinics and care providers

keepr isn't covered by HIPAA and doesn't sign business associate agreements yet, so healthcare providers, health plans and business associates that HIPAA covers must not store patient records. This does not apply to people and small care operators HIPAA doesn't cover, such as a family caring for a relative or an adult foster home that doesn't bill electronically.

The Clinic bundle is a demo. Its items are made-up demo data, not real patients and not medical advice.

Your rights

You have the right to:

1. Know whether keepr collects or shares your health data, and see it, along with a list of every company that has received it and how to reach them. (keepr shares with nobody; the processors are listed above.)
2. Withdraw your consent.
3. Delete your health data. See "Deleting it" below for what keepr deletes, when, and what it keeps.
4. Appeal if we turn down your request.

How to ask

• Most of this you can do yourself: read, export and delete items and collections in keepr, and delete your account from your profile.
• For anything else, write to privacy@keepr.cloud. Say which right you're using.
• We'll confirm it's you, usually by email to your account's address. We won't ask for more than we need.
• We answer within 45 days. If we need more time, we'll tell you why within those 45 days and answer within 45 more.
• It's free, up to twice a year.

Appeals

If we turn down your request, you can appeal by writing to privacy@keepr.cloud with "Appeal" in the subject. We'll answer within 45 days and explain our decision. If we turn down your appeal, you can complain to the Washington State Attorney General at https://www.atg.wa.gov/file-complaint.

Deleting it

What you delete can be restored for 30 days. Then keepr deletes it for good, and within 60 days of the delete it's gone from our backups too. The Privacy Policy's "Deleting your data" has the details.

• An item or file: delete it in keepr. A manager of its collection can restore it for 30 days; then it's deleted for good, with its History.
• A collection: delete it in keepr. It can be restored for 30 days; then it's deleted for good, with its items, files and History.
• Everything: delete your account. The account goes at once and can't be restored. The collections you own are deleted for good 30 days later, with their items, files and History, and the backups run out about 8 days after that. After 30 days the record of your account is cut down to what shows it existed: no name, email address or date of birth.
• Your health package consents are kept while your account is open, even after you delete the collection, and for 4 years after your account is deleted, as evidence of what you agreed to; then they're deleted. After the account is deleted they keep which health package you installed, the version of the words you agreed to and when, and a hash (SHA-256) of your email address, so we can answer a question about your consent. They no longer say which collection it was for.
• Items you added to someone else's collection stay there. Ask that collection's owner, or write to us.
• Items and collections deleted before 12 November 2026, when this schedule starts, can be restored until 12 December 2026 and are deleted for good on that day. Files removed earlier keep their own 30 days.

Write to privacy@keepr.cloud about any of it.

Security

keepr encrypts health data in transit and relies on its providers' encryption at rest. It limits who can reach it, scans uploaded files for malware, and logs sign-ins. See the Privacy Policy for more.

If there's a breach

If a breach exposes your health data, we'll tell you without unreasonable delay and within the time the law sets, including the FTC Health Breach Notification Rule (16 CFR Part 318). We'll tell the FTC and state regulators where the law requires it.

Changes to this policy

We'll update the date at the top. If a change affects how we collect or use health data, we'll ask for your consent again before it applies to you.

Contact

KEEPR, LLC
555 Grandover Ave SE, Salem, OR 97306
privacy@keepr.cloud