Consumer Health Data Privacy
Effective date: July 15, 2026
This notice explains how MaxAbility collects, uses, and protects consumer health data. It applies in addition to our general Privacy Policy and is provided to comply with state consumer health data laws, including Washington’s My Health My Data Act, Nevada SB 370, and Connecticut Public Act 23-56.
Who We Are
Maximum Ability LLC (“we,” “us”) provides a caregiver companion app to support individuals with behavioral and intellectual needs.
What Consumer Health Data We Collect
We collect this information directly from you when you create an individual profile and use the app:
– Name, date of birth, gender, and photo you provide for the supported individual
– Behavioral information you record: signs of escalation, triggers, baseline behaviors, coping strategies, crisis history
– Medication, safety plan, schedule, and decision tree information you create
– Conversation history when you use the Ask Max AI chat
– Device location, when you choose to attach it to a crisis record
– Information about caregivers you authorize to share access with
How We Use This Information
– Provide caregiver support, AI-assisted strategy suggestions, and in-app tools
– Process your chat messages, conversation history, and relevant profile information through AI services running in our Google Cloud environment: Google’s Gemini model (via the Vertex AI service) and our own fine-tuned caregiver model. Under our agreement with Google Cloud, Google does not use this data to train its AI models.
– Enable sharing of an individual’s data among caregivers you authorize
– Review conversations, when needed, to improve safety and service quality
– Diagnose technical issues and improve service quality
Who We Share It With
– Co-caregivers you explicitly authorize via sharing
– Google Cloud, our infrastructure and AI provider. Services we use include Firebase Authentication, Firestore, Cloud Storage, Cloud Functions, Cloud Run, Vertex AI, and BigQuery.
– We do not sell consumer health data
– We do not share it with advertisers or for targeted advertising
How Long We Keep It
– Profile and individual data: until you delete it or your account
– Conversation history: until you delete your account
– Security audit logs: up to 6 years, to meet security and compliance obligations. These logs record account activity — who performed an action, the type of action, and the result. They do not contain your messages or profile content.
– Account credentials: until you delete your account
Your Rights
You can:
– Access — view and export a JSON copy of all consumer health data we hold about you, directly in the app
– Delete — permanently delete your account and associated data
– Withdraw consent — stop processing of your consumer health data at any time
– Confirm or correct — view and edit profile and individual data in the app
Use the privacy controls on the Account screen in app settings, or contact privacy@maxablellc.com.
Appeals
If we decline to act on a privacy request, we will tell you why. You may appeal our decision by emailing privacy@maxablellc.com with “Appeal” in the subject line. We will respond within the time required by your state’s law. If your appeal is unsuccessful, you may contact your state Attorney General.
Affirmative Consent
We will not collect consumer health data without your explicit affirmative consent during onboarding. Withdrawing consent stops further processing; you can also request data deletion separately.
Security
We use industry practices including encrypted on-device storage, TLS certificate pinning, App Check verification, and append-only audit logging. See our general Privacy Policy for details.
Changes To This Notice
When this notice changes, we will require re-acceptance through the app before continuing to use consumer health data features.
Contact
Maximum Ability LLC
1750 Prairie City Rd., Suite 130 #617
Folsom, CA 95630
privacy@maxablellc.com