Consumer Health Data Privacy Policy

What consumer health data we collect

Orenna is an emotional-intelligence companion. Because of what it is for, the information you share can reveal your health — particularly your mental and emotional state. The consumer health data we may collect includes:

• The content of your conversations with Orenna, to the extent it reveals your mental or emotional condition, mood, stress, or psychological state.
• Signals you provide or that are derived from your input about mood, energy, and emotional patterns over time.
• Life areas, goals, and reflections you choose to share that relate to your wellbeing.

We do not seek clinical diagnoses, and Orenna is not a licensed therapist or medical provider. It is a self-reflection tool, not a substitute for professional care.

Why we collect it (purposes)

• To generate Orenna’s responses in your conversation.
• To let Orenna remember context across sessions and reflect your patterns back to you over time.
• To provide, maintain, secure, and support the Service.
• To keep you safe — for example, surfacing crisis resources when your messages indicate risk.

We do not sell your consumer health data, and we do not use it for cross-context behavioral advertising.

Who we share it with, and why

To run the Service, your consumer health data is processed by a small set of vendors that act on our instructions. We are direct with you about this: your conversation content does reach our AI provider so Orenna can reply. The categories of recipients are:

• AI model provider (Anthropic): receives your message content and derived context to generate Orenna’s replies. Under our commercial terms, it does not train its models on your data.
• Cloud hosting and database: stores your data at rest (United States).
• Authentication provider: signs you in (email and identity only — not your conversations).
• Payments processor: only if you subscribe (name, email, and billing — not your conversations).
• Transactional email and push delivery:to send messages you’ve asked for.
• Error monitoring and product analytics, where enabled: configured to exclude your message content.

We may also disclose data if required by law or to protect safety. We do not share consumer health data with any third party except as described here and with your consent.

Your consent

Before we collect your consumer health data, we ask for your opt-in consent to collect it. We ask for a separate consent before that data is shared with the AI provider and sub-processors described above. These are two distinct choices, and you can decline either. If you do not consent, you will not be charged and you can leave; we simply won’t be able to provide the health-data experience without the collection consent.

How to withdraw your consent

You can withdraw your consent at any time. To do so, stop using the Service and either delete your account and data from Settings (which erases your conversations, your derived memory, and your profile) or email us at privacy@orenna.ai and we will honor your request. Withdrawal is prospective: it stops further collection and sharing and, on deletion, removes what we hold.

Your rights (Washington and similar states)

Where the law gives you these rights over your consumer health data, you may:

• Confirm whether we are collecting, sharing, or selling it (we do not sell it).
• Access the consumer health data we hold about you.
• Withdraw your consent to its collection and sharing.
• Have it deleted, including by directing us to ask our processors and any third party we shared it with to delete it.
• Appeal a refusal of any of these requests.

To exercise any of these rights, contact privacy@orenna.ai. We will not discriminate against you for exercising them. If we deny a request, you may appeal by replying to our decision; if an appeal is denied, Washington residents may contact the Washington State Attorney General.

Data security and retention

We restrict access to consumer health data to what is needed to run the Service, and we require our processors to protect it under data- processing terms. We retain it while your account is active and delete it when you delete your account, subject to limited legal retention described in our Privacy Policy.

Contact

BGAI Ventures LLC — privacy@orenna.ai. For crisis support, reach a human first at /safety.