This Notice supplements our Privacy Policy. It applies to Consumer Health Data handled in connection with Hushmi, the Rick app, where the Washington My Health My Data Act (“MHMDA”) or similar applicable consumer health data laws apply. Rick is an AI companion, not a healthcare provider, medical-record platform, therapist, or clinical service.
1. Consumer Health Data We Collect
Depending on what you choose to discuss or use through Rick, STARTORK may collect or process Consumer Health Data including:
- physical or mental health information, symptoms, conditions, diagnoses, treatments, medications, or healthcare-related information;
- reproductive or sexual health information;
- health-related information contained in text conversations or voice interactions;
- health-related information saved through Rick’s existing Memory or personalization features;
- safety-related signals, including possible suicide, self-harm and eating-disorder-related concerns, where they concern physical or mental health; and
- information inferred or derived from interactions with Rick where it qualifies as Consumer Health Data under applicable law.
We do not require you to provide Consumer Health Data merely to maintain a basic Rick account. Rick does not maintain a separate “Health Profile,” “Health Memory,” or health-record database. Consumer Health Data is not automatically classified into a separate health-data store and may exist in ordinary conversations, Messages, Memories, voice-related records, personalization, safety records, support communications, or privacy requests.
2. How We Use Consumer Health Data
Where permitted by applicable law, STARTORK may process Consumer Health Data to:
- provide Rick and generate responses you request;
- maintain conversation context and continuity;
- provide Memories and personalization where enabled or requested;
- provide voice features you request;
- operate safety, abuse-prevention, integrity, and support functions;
- protect the security and integrity of Rick; and
- comply with applicable law or protect legal rights, safety, users, STARTORK, or others where permitted by law.
AI model improvement is optional, off by default, and governed by our AI Model Improvement Notice & Consent. Only content created after valid consent may be considered, and the current eligibility controls exclude content associated with safety events and content detected as sensitive. Ordinary model-improvement consent does not override additional consent or restrictions required by applicable Consumer Health Data law.
We do not use Consumer Health Data for targeted advertising or data brokerage, and we do not sell Consumer Health Data.
3. Sources of Consumer Health Data
Consumer Health Data may come directly from information you provide in text conversations, voice interactions, support or privacy communications, or information you ask Rick to remember. It may also be derived through Rick’s existing Memory, personalization, safety, and model-derived metadata systems. We do not obtain Consumer Health Data from medical providers, electronic health records, Apple Health, wearables, or similar integrations because Rick does not currently offer those integrations.
4. Processors, Disclosures, and Sharing
STARTORK uses service providers to operate Rick. Consumer Health Data may reach AI processing providers when conversation content is processed to generate a response; voice providers when reply text is processed into requested speech; cloud hosting and database providers where Rick data is stored or transmitted; and security, email, or support infrastructure only where relevant information is necessary for the requested or operational service.
Processors may receive Consumer Health Data only where reasonably necessary to provide the applicable service and subject to applicable contractual and legal restrictions. Payment processors ordinarily receive account, transaction, and billing information—not Rick conversation content—and are not treated as Consumer Health Data processors merely because they provide billing services.
STARTORK does not currently sell Consumer Health Data. Based on Rick’s current product data flows, STARTORK does not currently share Consumer Health Data with third parties or affiliates as “sharing” is defined under the MHMDA. Service-provider processing solely on STARTORK’s behalf is treated according to the applicable statutory processor exception. If these practices materially change, we will update this Notice and obtain consent where applicable law requires it.
Automated safety screening sends the current message to OpenAI to help identify possible safety concerns, including eating-disorder-related risk. We do not separately attach your name, profile or conversation history to this screening request. Review or withdraw AI-processing consent in Privacy & memory; withdrawal stops new AI-dependent conversations. Safety classification can make mistakes and is not medical diagnosis, treatment or real-time human monitoring.
5. Your Choices and Controls
Conversations
You can delete individual conversations from Chat history.
Memories
You can view and delete Memories in Settings. Health-related information may be contained in an ordinary Memory. Deleting a conversation starts deletion of the conversation and associated derived information within the verified deletion scope. A Memory independently supported by another conversation you have not deleted may remain. If source relationships or required external cleanup cannot yet be verified, the deletion request may require further review and is not reported as fully completed. Deleting a Memory alone does not delete its original conversation. You can also request broader deletion through the privacy-request process described below.
Account
You can delete your Rick account from Settings.
Privacy requests
Signed-in users can request access to or deletion of personal data or Consumer Health Data through your privacy settings (“Privacy & memory” in the app; “Privacy & Data” on the website). You may withdraw an applicable consent using the relevant Settings control or by contacting us. People without an account are not required to create one and may contact contact@startork.ai.
6. Your Rights
Where the MHMDA applies, you may have the right to:
- confirm whether STARTORK collects, shares, or sells Consumer Health Data concerning you and access applicable data;
- obtain applicable information about third parties or affiliates with whom Consumer Health Data has been shared or sold;
- withdraw consent where processing is based on consent;
- request deletion of Consumer Health Data concerning you; and
- appeal certain refusals concerning your request.
These rights may be subject to authentication, applicable exceptions, and other limitations permitted by law.
7. How to Exercise Your Rights
Submit a Consumer Health Data access or deletion request through your privacy settings (“Privacy & memory” in the app; “Privacy & Data” on the website), or email contact@startork.ai. Please identify your Rick account where reasonably possible and state that your request concerns Washington Consumer Health Data. We may take reasonable steps to authenticate your identity. An authorized agent may submit a request where permitted by law, subject to appropriate verification of authority and identity.
For qualifying MHMDA requests, we count the 45-day response period from the date we receive your request. We promptly verify the requester's identity; verification does not restart or pause this period. When the law permits an additional 45 days because of the complexity or number of requests, we notify you before the initial period expires and explain the reason. Our shorter internal operational target does not replace the statutory deadline.
8. Deletion Requests
For a valid deletion request, STARTORK deletes applicable Consumer Health Data from live systems within the request’s verified scope and directs relevant processors, contractors, or other recipients to delete data where required by applicable law. A request is not marked fully completed while a required processor deletion task remains incomplete.
Section 15 of our Privacy Policy states the shorter limits for STARTORK-controlled app records and backups; those limits continue to apply within that stated scope. Section 16 explains service-provider processing without promising an unverified provider-wide physical-erasure deadline. This does not reduce Washington deletion rights or the duties of STARTORK and relevant recipients. Where archived or backup deletion may lawfully be delayed for restoration, the delay cannot exceed six months from authentication, and the data must not return to ordinary use before applicable deletion or suppression is reapplied. We track required processor actions and do not report full completion while they remain unresolved. Specific legal preservation requirements are assessed under the law applicable to the particular records and request.
Because Rick does not maintain a separate health-data store or automatically classify every health-related statement, Consumer Health Data deletion requests are handled as scoped privacy requests across relevant systems rather than reported as a potentially misleading count of “health records.”
9. Appeals
If STARTORK denies a qualifying Consumer Health Data request, you may submit an appeal through the linked request workflow in Settings or by emailing contact@startork.ai. Please include the original Request ID and the reason for your appeal. We will provide a written appeal decision within 45 days. If an appeal is denied, the response will explain the reason and provide information about how to contact the Washington State Attorney General.
10. Security
STARTORK uses administrative, technical, and organizational safeguards designed to protect information based on its sensitivity and use. Access to privacy and safety records is restricted through server-side authorization, least-privilege administrative controls, reauthentication for sensitive actions, and audit logging where appropriate. No security system can guarantee absolute security.
11. Updates to This Notice
We may update this Notice as Rick, applicable law, or our data practices change. The effective date above identifies the current version. For material changes, we may provide notice by email, in-product notice, or another appropriate method. Where collection of a new category of Consumer Health Data or a new purpose requires consent, a policy update alone will not replace that consent.
12. Contact
STARTORK PTE. LTD. 60 Paya Lebar Road, #05-09, Paya Lebar Square, Singapore 409051 Singapore
Privacy: contact@startork.ai