Consumer Health Data Privacy Policy
Effective November 3, 2026 · Version 2026-11-03.1
This policy describes Relay Care’s handling of consumer health data, including health data protected by Washington’s My Health My Data Act. It is separate from the general Privacy Notice and Terms of Use.
Categories, sources and purposes
With the required permission or legal authority, we collect care-recipient identifiers and profile details; conditions, allergies, medications and dosing instructions; appointments, providers and pharmacies; routines and care tasks; insurance and document details; test results, photos and other uploaded files; and health information in updates, replies or messages. Summaries and extracted record details can create health-related inferences from the content you provide.
Sources are you, the care recipient, authorized circle members, people you message, and documents or messages submitted through a feature you choose. Public medication directories supply general medication descriptions in response to search terms. We do not automatically obtain clinical records from healthcare providers, insurers or device health stores.
We use this data to organize the requested care record, enable sharing with chosen members, retrieve source information, display schedules and reminders, process selected documents, answer questions using accessible records, and support the safety and operation of those features, all on Relay Care’s own servers; we do not send health data to artificial intelligence services. We do not collect device precise location or use health data for targeted advertising; uploaded content may itself contain location or other sensitive details.
Categories of recipients and sharing purposes
Chosen circle members receive shared health data to coordinate care. Private-message recipients receive the content sent to them. Authorized operational personnel and service providers may handle the minimum information needed for hosting, storage, requested communications, processing, support, security or a reported abuse investigation. Providers include Amazon Web Services for hosted data, Postmark for requested email, Twilio only for enabled SMS. Billing providers receive payment and account linkage information, not the content of your care records.
We do not sell consumer health data. We do not share consumer health data with affiliates for their own purposes; there are no affiliates authorized to receive it for such a purpose. Legal disclosures are limited to those allowed or required by applicable law. If a future use or disclosure requires new consent or authorization, we will obtain it before that use.
Permission, withdrawal and rights
Creating a care circle requires the creator to state that they have the required permission or legal authority. Relay records that statement without independently verifying the declared permission or authority.
Permission to collect and organize health data and permission to share it with members and operational providers are recorded separately. A family relationship alone does not establish authority over another adult’s health information. You can withdraw applicable permissions through circle settings or a verified privacy request; withdrawal stops the affected future processing and sharing but does not retrieve copies already lawfully held by others.
You can request confirmation of collection, access to health data and sharing information, correction where applicable, deletion, or withdrawal of consent. Submit a privacy request or email support@relaycare.app. We verify identity and authority, respond within applicable legal deadlines and explain any lawful exception. To appeal, use the same form’s appeal option or put “Privacy appeal” in the email subject. If a Washington appeal is denied, you can submit a complaint to the Washington Attorney General. These choices remain available without accepting revised Terms.
Contact and operator
Relay Care is operated by BKMT Studios LLC. Contact support@relaycare.app.
Mailing address: 1401 21st St, Ste R, Sacramento, CA 95811