Rinno Consumer Health Data Privacy Policy
Effective date: August 21, 2026 Last updated: August 21, 2026
This is a separate policy that applies only to consumer health data. It is required by the Washington My Health My Data Act and similar state laws, which give residents of those states specific rights; we extend the core protections and rights in this policy to all of our users. Our general practices are in our Privacy Policy. If anything here conflicts with the general Privacy Policy about consumer health data, this policy controls.
1. What This Covers
"Consumer health data" is personal information that identifies your past, present, or future physical or mental health. Based on Rinno's current direct-to-consumer model, Rinno generally does not act as a HIPAA covered entity or business associate, is not a healthcare provider, and does not provide medical services; different rules could apply if Rinno ever provides services on behalf of a healthcare provider or health plan. If you ask Rinno to call a doctor's office, clinic, pharmacy, or other health-related business, some consumer health data can appear in your task or in the call transcript. This policy explains how we handle it.
2. The Consumer Health Data We Collect
We collect consumer health data only when it is part of a task you ask us to handle. It can include:
- That you have, or want, an appointment with a health-related business.
- The identity of a health-related business you asked us to call.
- A reason for a visit, a prescription, or a similar detail, if you include it in your task or if it comes up during the call.
We do not record call audio. We keep a written transcript only when consent is given on the call. We do not ask for, and you should not provide, more health information than the task needs. Rinno handles tasks for your own account; if a task would involve another person's health information, your authorization does not by itself authorize us to collect it, and the assistant is instructed not to solicit unnecessary health details about anyone.
3. Where It Comes From
From you, when you type a task or provide details for it, and from the call itself, as a written transcript.
4. Why We Collect It and How We Use It
We use consumer health data to complete the specific task you asked us to handle (for example, to schedule, confirm, or ask about an appointment), and for the limited operational purposes needed to run and secure the Service (such as short-term security and abuse monitoring, diagnostics, and complying with law). We do not use it to advertise to you, we do not use it to train AI models, and we do not use it to infer anything about your health beyond the task.
5. How We Share It
We do not sell consumer health data. We share it only with the service providers that help us place your call and produce your transcript and summary, and only so they can perform that service for us. Those providers are listed in the sub-processor table in our Privacy Policy. We may also disclose it if the law requires.
- Categories of consumer health data shared: appointment and health-business details that are necessary to complete your task, as described above.
- Categories of third parties we share with: our call-infrastructure, speech-to-text, AI, telephony, hosting, and database service providers (named in the Privacy Policy).
- Specific affiliates we share with: none at this time. Rinno Inc. has no affiliated entities with which it shares consumer health data; we will update this policy and notify you if that changes.
6. Consent
Before a task involves consumer health data, we tell you and ask for your clear, affirmative consent to collect it, and we ask for a separate consent to share it beyond what is needed to provide the Service you requested. Consent is not bundled with other terms, you can decline (in which case we do not proceed with that health-related task), and you can withdraw it at any time (Section 8). We record when you gave consent and to what. We do not collect or share consumer health data for any purpose beyond providing the Service you requested without your consent.
7. How We Protect and Keep It
We minimize the consumer health data we keep, we protect it with the safeguards described in our Privacy Policy, and, like all transcripts and summaries, any consumer health data in a transcript or summary automatically deletes after 90 days, or sooner if you delete the call.
8. Your Rights
You have the right to:
- Access the consumer health data we have about you.
- Delete it. When you ask, we will delete it from our records and direct our service providers to delete it.
- Withdraw your consent to our collection or sharing of it at any time.
To make a request, email contact@rinnoapp.com or use the tools in the app. We will verify your request and respond within the time the law requires, and we will not discriminate against you for exercising these rights. If you are a person Rinno called (not an account holder) and health data about you appears in a transcript, you have these same rights; contact us with the date of the call and the number that was called so we can locate and act on your request.
9. Contact Us
contact@rinnoapp.com, or Rinno Inc., 169 Madison Ave, STE 67666, New York, NY 10016.