Legal · Health data
Consumer Health Data Privacy Policy.
Effective September 16, 2026 · Version 2026-09-16
This policy applies to “consumer health data” as defined by the Washington My Health My Data Act and similar laws, that Marczell Klein Corp (“Marczell AI”) collects from you. It supplements our Privacy Policy. Where the two differ about health data, this one governs.
Marczell AI is not a healthcare provider and the service is not medical or psychological treatment. The health data described here is not a medical record and HIPAA does not apply to it.
1. The consumer health data we collect, and why
We collect health data only if you choose to connect a device, and only after you consent.
| Data | Collected from | Used for |
|---|---|---|
| Heart rate and heart-rate variability (daily averages and resting values) | Oura, WHOOP, Apple Health | A daily digest the coach reads to time and shape your sessions |
| Sleep: start and end, total, REM, deep, light and awake minutes, efficiency | Oura, WHOOP, Apple Health | Same |
| Recovery or readiness score, strain or activity score, stress proxy | Oura, WHOOP | Same |
| Respiratory rate, skin temperature deviation, blood-oxygen average | Oura, WHOOP, Apple Health | Same |
| Steps, active calories, workout count and timing | Oura, WHOOP, Apple Health | Same |
| Heart-rate readings around a hypnosis audio (before, during, after) | Your connected device | To show you whether a session settled you |
| Inferences we draw from the above (a short daily digest; patterns we notice) | Our software | Personalising coaching and hypnosis |
| Your answers about how you feel before and after a memory-release (MER) session, on a 0–10 scale | You | Showing you your own progress; opening a support conversation if the number rises |
We also process, as part of your coaching, whatever you choose to tell the coach about your health, and the memory-release intake you write. That text is used only to write your sessions. It is never used for advertising and never shared with advertisers.
2. Sources
- Oura and WHOOP, through their APIs, after you authorise the connection on their site.
- Apple Health, read on your iPhone with the permission iOS asks you for, and sent to us by the app.
- You, in what you write to the coach and in the MER intake and check-ins.
- Our own software, which derives digests and patterns from the above.
3. Consent
Before the first connection you are shown a separate consent box naming the data, the purpose, where it goes and how long it is kept, and you must tick it. We record the exact wording, its version, the time, a one-way hashed form of your IP address and your browser. Connecting a device is never a condition of using Marczell AI. If the wording ever changes materially, you are asked again.
4. Who receives consumer health data
We do not sell consumer health data and we do not share it for advertising. It reaches:
| Recipient | What they receive | Why |
|---|---|---|
| Supabase (database and file storage, United States) | The readings and inferences | Storing your data |
| Vercel | Passes the data between your device, our database and our providers | Running the application |
| Anthropic | A short daily digest (for example readiness, HRV, resting heart rate, hours slept), inside your coaching and hypnosis prompts; never raw readings | The AI coach and the hypnosis writer |
| Inngest | Job records for the daily sync and analysis | Running background jobs reliably |
| Oura, WHOOP, Apple | They are the source; we send them nothing about you beyond the connection itself | — |
Affiliates: we share consumer health data with no affiliate. Third parties other than the processors above: none. Processors act under contracts that limit them to our instructions.
5. How long we keep it
- Daily readings and inferences: until you disconnect the device, or until your account is deleted.
- Readings around a hypnosis audio and MER check-in numbers: until your account is deleted.
- The consent record itself: five years after you withdraw consent or close your account, so we can show what you agreed to.
6. Your rights
- Withdraw consent and delete: disconnect the device in Settings → Connected Devices. That deletes the device’s readings and what we inferred from them and stops the coach seeing them. Apple Health can also be revoked in the iPhone’s Health app.
- Access: see your digest on the Today page and in Settings → Connected Devices; download everything from Settings → Your data, or ask at Privacy request.
- Know who received it: the list in section 4 is complete; ask if you want it confirmed for your account.
- Delete everything: Delete account removes all of it within 30 days, including from our processors.
- Appeal: if we decline a request, you may appeal through the same form; if we still decline, you may contact the Washington Attorney General or your state’s Attorney General.
We answer requests within 45 days. Contact: [email protected], 818-230-6474, or Marczell Klein Corp, 3400 Cottage Way, STE G2-6406, Sacramento, CA 95825.