Consumer Health Data

Health information in Ambera

Ambera’s features can involve information about pregnancy, birth, postpartum experiences, and care relationships. This page supplements the Privacy Policy with a focus on consumer health data. The rights that apply depend on your location and the relevant law.

Health information does not become subject to HIPAA simply because it appears in a health app. A professional’s separate care and recordkeeping practices may have additional legal requirements.

• Read the Privacy Policy

Categories and sources

Depending on what you enter or share, information can include pregnancy and birth dates, symptoms, mood, check-ins, weight, hydration, rest, movement and contraction records, birth preferences, appointments, journal entries, and care notes.

Messages and attachments can contain health information. Care-team relationships and professional information can identify the support you receive. Optional location features can reveal where you are or where care may occur.

Information can come from you, connected professionals or other permitted participants, device features you enable, and services used to operate Ambera. Account and technical information can be linked with the records in your account.

Why information is used

Information supports the features you choose: saving and displaying records, organizing preparation, communication, care coordination, and responding to your requests. Account, purchase, and technical information also support access, capacity, operation, troubleshooting, and security.

Entering optional health information and enabling optional device access are your choices. Device permission and consent to share with another person are separate decisions.

Recipients and sharing

Connected care professionals and other permitted participants can receive information according to the relationship and feature permissions. Personal journal entries and daily check-ins do not have identical sharing behavior.

Service providers support hosting, database and authentication, notifications, payments, and support. Current product services include Supabase, Vercel, Apple, and Stripe; website inquiry delivery uses Resend when configured. A provider receives information relevant to its function, not necessarily every health-data category. See the Privacy Policy for these providers’ roles.

Ambera does not sell personal or health information or use it for targeted advertising, as described in the Privacy Policy. Disclosures required by law or necessary to protect rights and safety are handled subject to applicable law.

• Service providers and their roles

Access, deletion, and withdrawal

You can ask about access, correction, deletion, the recipients of health data, withdrawal of consent where applicable, or an appeal of a request decision. Email support@amberahealth.com with the type of request. We may need to confirm your identity or authority.

Use account controls to manage available information, relationships, and device features. Withdrawing permission or stopping future sharing does not automatically remove information already shared, downloaded, or retained under an applicable obligation.

Deletion scheduling, actual erasure, retention exceptions, and copies held by recipients are different matters. See the account-deletion information and ask us about the scope of your request.

If we decline a request, you can reply to ask for an appeal and explain why you disagree. Where applicable, you may also complain to your state attorney general or other privacy regulator. We do not reduce your statutory rights because you request privacy assistance. Applicable law determines required response times and any limits or exceptions; an account restoration window does not extend a statutory response deadline.

• Your information and choices
• Account deletion information
• Ask about consumer health data

Consent and authorization

Ambera supports account holders aged 13 and older. Eligibility to use Ambera does not establish authority to consent to medical care, share another person’s health information, or access a minor’s confidential records. Parent or guardian involvement depends on applicable law and the context.

Where applicable law requires consent for collection or sharing of consumer health data, that consent must cover the relevant purpose and recipients. Acceptance of general terms or a device permission alone is not a substitute. Processing necessary to provide a service you request may be permitted without a separate consent under applicable law. Optional sharing is a separate choice from using a personal feature.

You can ask to withdraw consent and stop future optional sharing through available controls or support@amberahealth.com. Withdrawal can affect features that depend on the information. It does not change the lawfulness of earlier processing or erase copies already lawfully received. Applicable deletion rights and duties still apply.