Consumer Health Data Privacy Policy
Python Consumer Health Data Privacy Policy
Effective Date: July 27, 2025
This Policy applies only to “Consumer Health Data” (CHD) as defined by the Washington My Health My Data Act (MHMDA), Nevada Health Data Privacy Act (NHDPA), and any comparable state law. It supplements—but does not replace—Python’s general Privacy Policy.
1. Scope
CHD means any personal information that identifies, relates to, describes, or could reasonably be linked to your past, present, or future physical or mental health status, including—but not limited to—sleep metrics, heart-rate data, weight, medical diagnoses, medications, or reproductive/sexual health. De-identified or aggregate data that cannot reasonably be associated with you is excluded.
2. Categories of CHD We Collect
• Biological identifiers (height, weight, sex)
• Health conditions (sleep disorders, symptoms, diagnoses, medications)
• Bodily-function measurements (heart rate, hydration levels)
• Reproductive or sexual health information
• Precise geolocation when tied to health services
3. Sources of CHD
• You directly (onboarding questionnaires, device inputs, optional surveys)
• Connected devices (smart bottles, wearables)
• Third-party integrations (Apple Health, Google Health Connect)
4. Purposes of Collection, Use & Disclosure
We process CHD solely to:
• Provide and personalize hydration and health optimization services
• Ensure product safety and security
• Conduct research and development (aggregate, non-identifiable form)
• Communicate with you or comply with legal obligations
• Market additional features only after obtaining your separate consent
5. Recipients
We may share CHD with:
• Service providers bound by confidentiality agreements (hosting, analytics, payment processing)
• Health-integration partners (Apple, Google) only with your explicit authorization
• Regulators or law-enforcement agencies when required by law or to prevent harm
• Successors-in-interest in the event of a merger, acquisition, or asset sale
6. Your Rights
Subject to applicable law, you may:
• Confirm whether we collect or disclose your CHD and request a copy
• Request deletion of your CHD
• Withdraw consent for future collection or marketing use
• Appeal any denial of a rights request
To exercise these rights, email hydrate@pythownater.com with subject line “CHD Rights Request.” We will authenticate your identity and respond within 45 days. If your appeal is unsuccessful, you may file a complaint with:
Washington State Attorney General — https://www.atg.wa.gov/file-complaint
Nevada State Attorney General — https://ag.nv.gov/Complaints/CSU_Complaints___FAQ/
7. Security
We apply industry-standard administrative, technical, and physical safeguards to protect CHD. In the event of a data breach, we will notify affected individuals in accordance with applicable law.
8. Retention
CHD is retained only for as long as necessary to fulfill the purposes described above or as required by law, after which it is securely deleted or irreversibly de-identified.
9. Policy Updates
Material changes will be communicated at least 30 days in advance via email or prominent notice on our website.
10. Contact
Python, Inc.
402 West Broadway, Suite 400
San Diego, CA 92101
Email: hydrate@pythownater.com