Consumer Health Data Privacy Policy

CouthActs is a transport marketplace. We don’t ask for medical records or diagnoses. We may receive consumer health data only when you choose to give it, mainly when you book a medical transport (non-emergency medical transport, such as a ride to an appointment):

• the fact that you booked a medical transport, and its pickup and drop-off places (which may be a clinic or hospital);
• mobility and care needs you describe so the Provider can serve you, such as a wheelchair, stretcher, oxygen or an escort;
• anything health-related you choose to write in a job description, special instructions, chat messages, reviews, disputes or support requests.

We collect it from you directly, and from the Provider you book (for example, through chat or a dispute).

• To arrange and complete the transport you request, including matching you with a suitable Provider.
• For safety, support, disputes, Protection Plan claims, fraud prevention and to meet legal obligations.

We don’t use consumer health data for advertising, profiling or to train AI models, and we don’t sell it.

• The Provider you book. Providers bidding on your job see only that it is a medical transport, its city or region, dates and budget. Care details, exact addresses and your name are shared only with the Provider whose bid you accept.
• Our service providers (processors), who host, store, transmit and secure data for us under contract, listed in our Subprocessor list: cloud hosting and database, email delivery, push notifications, real-time messaging, error monitoring (with personal data removed), and Stripe for payments.
• Others only with your consent, or where required by law or valid legal process (see our Law Enforcement Guidelines), or to protect someone’s life or safety.

We have no affiliates that receive consumer health data.

• Medical jobs never appear on the public load board or the public activity feed, and bidders see a generic description.
• Care notes are limited in length, and cargo fields aren’t collected for medical jobs.
• Thirty (30) days after a medical transport ends (or a medical job expires or is cancelled), we delete its description, care notes and bid messages. The Booking’s financial and custody records are kept as described in the Privacy Policy, without those details.
• Public tracking links show only an approximate location and stop working when the trip ends.

Wherever you live, you can:

• confirm and access whether we collect, share or sell your consumer health data, and get a list of the third parties and affiliates we shared it with and how to contact them;
• withdraw consent to our collection and sharing of it;
• delete it, including from our service providers’ systems and backups as they cycle;
• appeal our decision on your request.

Download your data or delete your account in Settings, then Data (web), or Account (apps), or email privacy@couthacts.com with the subject “Consumer health data request”. We verify requests by confirming control of your account email. We respond within forty-five (45) days, which we may extend once by forty-five (45) days where reasonably necessary, and we tell you if we do. We don’t charge for requests and won’t treat you differently for making one.

To appeal, email privacy@couthacts.com with the subject “Consumer health data appeal” within sixty (60) days of our response. We respond within forty-five (45) days. If we deny your appeal, you may contact the Washington State Attorney General (atg.wa.gov) or your state’s Attorney General.

Access to consumer health data is limited to the people who need it to provide the service. It is encrypted in transit and at rest by our hosting and database providers, and covered by the measures in the Privacy Policy.

We will post changes here and update the effective date. If we want to use consumer health data in a new way or share it with new categories of recipients, we will ask for your consent first.