What we do with
what you share.
Last updated
This Consumer Health Data Privacy Policy applies to "consumer health data" as defined by the Washington My Health My Data Act and Nevada Revised Statutes chapter 603A, and supplements the Calypso Privacy Policy for Washington and Nevada consumers (and anyone whose consumer health data is collected in those states).
1. What consumer health data we collect
Calypso is an AI emotional-support and conversation-decoding service. In providing it, we collect the following categories of consumer health data:
Conversation content that may identify your mental health status — the text of your conversations with Calypso voices and the screenshots and files you upload to the Decode feature, to the extent they reveal information about your emotional state, mental health, or wellbeing.
Safety-related inferences — automated signals derived from conversation content, and from your own lines in chats you upload to Decode, indicating that a user may be in crisis, or may be under 18, used to display the in-product Crisis Banner and crisis-resource referrals, restrict chat and Decode where needed, and flag a conversation for review by our team.
Use of the Service itself — the fact that you use an emotional-support service, together with associated account identifiers, can constitute consumer health data.
We do not collect biometric data, genetic data, precise location data, or data about your attempts to acquire health services from any other provider, and we do not use geofencing.
2. Why we collect and use it (purposes)
We collect and use consumer health data only as necessary to provide the products and services you have requested:
To generate Calypso's responses in your conversations and Decode reports.
To operate in-product safety features — detecting crisis-related language and showing you referrals to crisis resources.
To check how Calypso responded when our safety system detects signs of crisis, and fix what went wrong. A person on our team reads a conversation only then, when you ask us to, when it is reported, or when the law requires it; no one watches conversations as they happen (see section 5 of our Privacy Policy).
To maintain, secure, and debug the Service.
Any collection or use beyond what is necessary to provide the Service you requested happens only with your prior, separate opt-in consent, which you can withdraw at any time. We do not currently do any such collection or use; in particular, we do not use your conversations to train AI models.
3. Sources of consumer health data
You — the conversations you have and the files you upload.
Our systems — automated safety inferences derived from that content.
We do not obtain consumer health data from data brokers, advertisers, or other third parties.
4. How we process and protect it
Consumer health data is encrypted in transit and stored in an encrypted database, screenshots are deleted from our servers about 24 hours after a decode finishes, staff access is limited to the people who need it, and our service providers process it under data processing terms that limit their use to the services they provide to us.
5. Who we share it with
We do not sell consumer health data, and we will not sell it without the valid authorization the law requires (which we do not seek). We do not share it for advertising, and no third party collects consumer health data over time and across different websites through our Service.
We disclose consumer health data only to the processors we use to run the Service, listed by category (a current provider list is available on request at privacy@trycalypso.ai):
Cloud infrastructure — receives encrypted conversation content and uploads, for hosting the Service.
AI inference — receives conversation content, to generate Calypso's responses. Our primary AI provider's terms prohibit it from training on that content. Another provider, used for some features, does not make that commitment in its published terms. We have not opted in to any provider training on it.
Product analytics — receives page views, clicks and feature use, linked to an account ID when you are signed in, which can show that you use the Service; never conversation content.
Email delivery and payment processing — receive your email address (and, for payments, your billing details), which can show that you use the Service.
We have no affiliates with whom consumer health data is shared. We may also disclose consumer health data where required by law, as described in the main Privacy Policy.
6. Your rights
Washington and Nevada consumers may:
Confirm and access the consumer health data we hold, including a list of the third parties and affiliates (see section 5) to which it has been disclosed, with contact information.
Withdraw consent to any collection or sharing that was based on consent.
Delete consumer health data. Deletion extends to the processors that store it on our behalf, and to backups as backup rotations complete.
To exercise these rights, email privacy@trycalypso.ai (subject "Consumer Health Data Request"). You can also delete conversations and decodes yourself in the app, and ask to delete your whole account with Delete account on your profile. We verify requests via the email on your account, respond within the timelines the law requires (generally 45 days, extendable once), and will not discriminate against you for exercising any right. If we refuse a request, you may appeal by replying with subject "Appeal"; if your appeal is unsuccessful, you may contact the Washington Attorney General (atg.wa.gov/file-complaint) or the Nevada Attorney General (ag.nv.gov).
7. Changes to this policy
If we make material changes, we will update the date above and notify account holders by email and in-product notice before the changes take effect. We will not collect or share consumer health data in ways inconsistent with this policy without first obtaining your consent.
Contact
privacy@trycalypso.ai
Questions about your data?
Email privacy@trycalypso.ai. A real person reads it.