version 1.0 · effective may 15, 2026 · for washington residents (rcw 19.373)
§ 01
This Consumer Health Data Privacy Notice applies to “consumer health data” (CHD) collected, processed, or shared through the Zentrr platform when the data subject is a Washington resident. It is required by Washington's My Health My Data Act, RCW 19.373. It is in addition to our Privacy Policy, which addresses our other privacy practices.
§ 02
Consumer health data means information that identifies the consumer's past, present, or future physical or mental health status, including but not limited to: health conditions, treatment, diagnosis, testing, medications, medical interventions, bodily functions or symptoms, reproductive or sexual health information, gender-affirming care, biometric data, genetic data, and precise location information that could reasonably indicate a consumer's attempt to acquire or receive health services or supplies.
§ 03
Zentrr processes CHD only when a customer (such as a healthcare practice or a genomics service provider) uploads or otherwise routes such data through the platform to enable an AI Specialist to draft work product. We are typically acting as a service provider to that customer; the customer is the entity that determines the purposes and means of the processing. We do not use CHD for marketing, do not sell CHD, and do not share CHD for cross-context behavioral advertising.
§ 04
If you are a Washington resident, you have the right to:
To exercise these rights, email privacy@zentrr.com with “MHMDA request” in the subject line and identify the account, provider, or context in which Zentrr may have processed CHD about you. We will respond within forty-five (45) days, as required by RCW 19.373.040, and may extend that period once by an additional forty-five (45) days where reasonably necessary.
§ 05
We obtain affirmative, opt-in consent before collecting CHD that is not strictly necessary to provide the requested service, and obtain separate consent before sharing CHD where such consent is required. We do not sell CHD and do not currently engage in any transaction that would constitute a “sale” of CHD as defined by RCW 19.373.030 — which would, in any event, require written valid authorization that meets the statute's specific requirements.
§ 06
We do not use geofencing to identify or track consumers seeking health services, to collect CHD from them, or to send notifications, messages, or advertisements related to a consumer's CHD or health-services activity.
§ 07
CHD remains in the customer's AWS tenant on AWS HIPAA-eligible services (Bedrock for inference, Aurora for storage, S3 for documents, Cognito for identity). See our full Subprocessor list for details. Anthropic does not receive customer prompts or completions when Claude is invoked through AWS Bedrock.
§ 08
Nevada (NRS 603A.480), Connecticut (Public Act No. 23-56), and a growing list of state genetic privacy laws (CA GIPA, TX, VA, FL, MD, MT, NE, AL, AZ, KY, TN, UT, WY) provide similar protections for consumer health data and genetic data. If you are a resident of one of these states, you can exercise analogous rights using the same email path above — please identify your state of residence so we can apply the correct framework.
§ 09
Privacy questions: privacy@zentrr.com. You may also lodge a complaint with the Washington Attorney General's Office.