Consumer Health Data Privacy Policy

• Health intake information you provide to a provider through Lueur — medical history, medications, allergies, conditions, and contraindications.
• Appointment and service information that may indicate a health condition or a treatment you are seeking.
• Before/after photos — only if you give separate consent to a provider.
• Inferences drawn from the above.

Directly from you, and from your provider where you have consented.

To operate your bookings and waitlist, deliver the appointment offers you opted into, and otherwise only for the specific purposes you have consented to. We do not use consumer health data for any purpose you have not consented to.

• Your provider, to deliver your care.
• Other participating providers — only if you opted in to cross-provider sharing.
• Processors bound by contract to equivalent protections — hosting and database (Vercel, Supabase) and email delivery (Resend).

We do not sell consumer health data, and we do not collect, use, or share it through geofencing. Our in-app assistant does not receive your intake or health information.

You may (a) confirm whether we collect, share, or sell your consumer health data and access it; (b) withdraw consent to our collection or sharing; and (c) delete your consumer health data — and we will propagate the deletion to anyone we shared it with — within 30 days. To exercise these rights, email hello@lueurapp.com. You may appeal a denial; if your appeal is denied, you may contact the Washington Attorney General.

We do not use a geofence around any health care facility to identify or track you, collect your consumer health data, or send you notifications, messages, or advertising about health services.

We protect consumer health data with encryption, least-privilege access, and audit logging, and retain it only as long as needed for the service or as the law requires. We will post changes here with a new effective date.