Legal
Consumer Health Data Privacy Policy
The short version
- Verkle is a file organiser, not a health app. But the files you choose may contain health information (for example, a prescription or a medical bill), and Verkle reads them to sort them.
- We use that information only to provide the Service you asked for. We don't sell it, don't use it for advertising, and don't use it to learn anything about your health.
- You can see, delete and control it at any time.
1. Scope
This policy is provided by One Matter Inc., doing business as Verkle ("we", "us"), under Washington's My Health My Data Act (RCW 19.373) and similar laws in other states, such as Nevada (SB 370) and Connecticut. It applies to all Verkle users, wherever they live. It applies to "consumer health data", meaning personal information that is linked or reasonably linkable to you and that identifies your past, present or future physical or mental health status, as those laws define it. It supplements our Privacy Policy, which applies to all personal information.
2. Consumer health data we may collect
Verkle does not ask for health information. We may collect consumer health data only if it is contained in, or can be derived from, files and photos you choose to have Verkle read, such as:
- medical records, test results, prescriptions, vaccination records, doctors' letters, health-insurance documents and medical bills;
- photos or documents showing health conditions, treatments, medications or fitness and body measurements;
- the AI's results about those files, such as the category "Healthcare & Medical", tags and a short summary;
- questions you ask in Ask Verkle that relate to such files.
Photos you upload may contain embedded location details (metadata) recorded by your camera. Verkle keeps them as part of the stored file, but does not extract, use or show them. We don't collect biometric or genetic data, and we don't use geofencing. No third party collects consumer health data about your activities over time or across websites through Verkle.
3. Sources
We collect it directly from you (files you upload or questions you ask) and from services you connect and choose files from, such as Google Drive, Google Photos or Microsoft OneDrive. The AI results are generated by the Service from those files.
4. Why we collect and use it
Only to provide the Service you requested: to read and sort the files you choose, find duplicates and clutter, answer your questions about them, show them to you, and carry out cleanups you approve; and to keep the Service secure. We do not use consumer health data to infer your health status, for advertising or marketing, or to make decisions about you.
5. Who we share it with
We share consumer health data only with processors that handle it on our behalf, under contracts that limit their use to providing their services to us:
| Processor | Purpose |
|---|---|
| Google LLC (Gemini API) | Reading the files you choose and answering your questions, on terms that don't allow Google to train its models on the content |
| Render Services, Inc. | Hosting the Service |
| Neon (Databricks, Inc.) | Database storing file details and AI results |
| Cloudflare, Inc. | Private storage of files you upload and Google Photos you pick |
| Functional Software, Inc. (Sentry), if used | Error reports, designed to refer to files by an internal identifier, not by name or contents |
| Google LLC (Google Workspace) | Our support mailbox, if you send us health information in a message |
Categories shared with these processors: the health information in files you choose, file names, the AI's labels and summaries of those files, and, for our support mailbox, anything you write to us.
We may also disclose it when required by law, or as part of a merger or acquisition with notice to you. We do not sell consumer health data, and we will not do so.
6. Consent
We collect and use consumer health data only to the extent necessary to provide the Service you requested by choosing the files. In addition, when you create your account or first open Verkle, we ask for your explicit consent to the processing of sensitive information (including health information) in the files you choose. You can withdraw it at any time in Account → Your consent: Verkle then stops reading your files straight away, and you can delete them and your account at any time. If we ever want to collect or share consumer health data for any other purpose, we will ask for your separate, express consent first.
7. Your rights
You have the right to:
- confirm whether we collect, share or sell your consumer health data, and to access it, including a list of all third parties and affiliates with which we have shared it and an active email address or other online way to contact them;
- withdraw consent to its collection and sharing;
- delete it, including from our archives and backups and from processors we have shared it with;
- appeal our decision on your request.
We will not discriminate against you for exercising these rights.
8. How to exercise your rights
- Delete files from Verkle at any time, or delete your account in Account → Delete account, which deletes all your files' details, AI results and stored copies.
- Or email support@verkle.ai with the subject "Health data request" from the email address on your account.
We will verify the request comes from your account's email address, and respond within 45 days (extendable once by 45 more days when reasonably necessary, in which case we will tell you why). Deletion requests are carried out in our live systems straight away; copies in backups are overwritten on a rolling basis within our database provider's backup window (no more than 30 days). We will tell our processors to delete the data too. Google may keep content sent to its Gemini API for a limited period for abuse monitoring under its terms, and that copy cannot be deleted on request. These requests are free of charge, up to twice a year.
9. Appeals
If we decline your request, you may appeal within a reasonable time by emailing support@verkle.ai with the subject "Health data appeal". We will respond in writing within 45 days, explaining our decision. If your appeal is denied, you may contact the Washington State Attorney General at atg.wa.gov/file-complaint, or the Attorney General of the state where you live.
10. Other commitments
- Access to consumer health data is limited to people and systems that need it to provide the Service. No person at One Matter Inc. reads your files unless you ask us to, or it is needed for security or to comply with the law.
- We protect it with the safeguards described in our Privacy Policy, including encryption in transit and private storage.
- Verkle is not a health-care provider, and nothing in the Service is medical advice.
11. Changes to this policy
We will post any changes here with a new effective date, and notify you by email or in Verkle before material changes take effect. We will get your consent before any new purpose for collecting, or any sharing of, consumer health data.
12. Contact
One Matter Inc. (doing business as Verkle)
3733 160th PL SE, Bothell, WA, 98012
support@verkle.ai