Consumer Health Data Privacy Notice
Effective date: July 29, 2026
Your health data is the most personal data there is, so it gets its own notice, separate from our general Privacy Policy and Terms of Use. This notice explains how Blijewell LLC (“we,” “us,” “our”) collects, uses, shares, and protects consumer health data, and the rights you have over it.
We provide this notice under the Washington My Health My Data Act and similar state laws that protect consumer health data and other sensitive data, including Nevada's consumer health data law and the health-data protections in state privacy laws such as Virginia's and Connecticut's. Wherever you live, we hold ourselves to the same standard described here.
The consumer health data we collect
- Oura health data: sleep, readiness, heart rate, heart rate variability (HRV), body temperature, blood oxygen (SpO2), daily stress, and workouts, read from your Oura account.
- Health-related logs you add yourself: notes about meals, medications, supplements, skin, and activity.
- Wellness inferences: the patterns Blijewell finds by connecting the data above with everyday context like weather and your calendar.
Where it comes from
Only from you: from your Oura account after you connect it, and from the things you choose to log. We do not buy health data, we do not collect it from data brokers, and we do not infer it from your browsing.
Why we collect it
For one purpose: to give you the personalized, plain-language wellness insights you asked Blijewell for. We do not use your health data for advertising, we do not sell it, and our service providers do not use it to train AI models.
Your consent comes first, specifically
We collect your Oura health data only after you give a separate, explicit, opt-in consent to health-data collection. Accepting our Terms of Use or Privacy Policy is never treated as consent for health data. The health-data consent is its own clear yes, it is never pre-checked, and the Service works politely without it (you simply will not get health insights).
You can withdraw your consent anytime by disconnecting Oura or emailing privacy@blijewell.com. Withdrawal stops collection from that moment, and you can also ask us to delete what was already collected.
Who can see your health data
No one but us and the service providers that run Blijewell, each bound to process your data only for us:
- Oura is the source of your ring data, shared at your direction when you connect your account.
- Vercel hosts the Service.
- Upstash handles short-lived processing state.
- Supabase stores your data.
- Anthropic processes your data to produce your plain-language insights, and does not train models on it.
We never sell consumer health data. We never share it for advertising. We do not provide it to the venues that host our experiences. We disclose it beyond the providers above only if the law requires it.
Your rights over your health data
- Access: ask what consumer health data we have about you, and who we have shared it with.
- Withdraw consent: stop collection anytime, as described above.
- Delete: have your consumer health data deleted, using the steps below.
- No retaliation: we will never treat you differently for exercising any of these rights.
- Appeal: if we decline a request, you may appeal by replying to our decision, and we will answer your appeal within the time your state's law requires. Washington residents who are unsatisfied with the outcome may contact the Washington State Attorney General at atg.wa.gov.
How to delete your health data
- Disconnect Oura: sign in at cloud.ouraring.com, open the connected apps settings, and remove Blijewell. Collection stops immediately.
- Delete everything: email privacy@blijewell.com from your account email with the subject “Delete my data.” We delete any Oura data we hold within 72 hours, and everything else within 30 days.
- Anything else: email privacy@blijewell.com and a human will help.
Security
Access to consumer health data is restricted to what the Service needs to function, and we use reasonable technical and organizational safeguards to protect it in transit and at rest.
Changes
We may update this notice. We will post the new version here and update the effective date, and material changes to how we handle health data will ask for your consent again.
Contact
Blijewell LLC
21819 Baldwin Square, Sterling, VA 20164
privacy@blijewell.com