Consumer Health Data Privacy Policy

Last updated: October 18, 2026.

This policy adds to our Privacy Policy. It explains how Rheos Labs LLC handles “consumer health data” under laws such as Washington’s My Health My Data Act and Nevada’s consumer health data law. THE SPACE is a non-clinical wellness app, not a health care provider, and it is not covered by HIPAA. Even so, some of what you share in it can count as health data under these laws, so we treat it that way for everyone.

1. The health data we collect

• What you share — what you type, say or upload in THE SPACE, which can include information about your mental or emotional health, your physical health, your relationships, and anything else you choose to tell it.
• What THE SPACE comes to understand — the short notes on the “What I’ve Come to Know” page, and conversation memory, which are drawn from what you share.
• What you save — saved conversations, Workshop tools, Dream Weaver answers, Content Keeper files, and the practices and readings you keep.
• Short-lived safety notes — when a message suggests possible risk, a medical emergency, intoxication, or that you may be losing touch with what is real, THE SPACE keeps a brief note with no words in it, so it can respond carefully. These notes are never shown to anyone. Each one stays in use until both a set time (24 or 72 hours, depending on the kind) and your next six messages have passed, and is deleted the next time you write after that, or when you close your account.
• Rehearsal Mode — Rehearsal Mode keeps its own recent memory of your rehearsals.
• Close Encounters — if you and your partner do an activity together and either of you keeps it, both people’s answers are saved.
• Content Keeper — the short description THE SPACE writes of each file you upload, and the result of its automatic safety check.
• Your age check — Yoti reads a photo of your government ID, which includes the photo of your face on it, to confirm the document is genuine and that you are 18 or older, and then deletes it. We keep only whether you passed and the date.

We do not collect your precise location, and we do not collect data from wearables or health devices.

2. Where it comes from

From you, when you use THE SPACE; from THE SPACE itself, when it summarizes, remembers, or makes the short-lived safety notes described above; from Yoti, which tells us whether you passed the age check; from your partner, if you do Close Encounters activities together; and from a licensed professional, if you ask one to confirm your age.

3. Why we collect and use it

To provide THE SPACE to you: to respond to you, to carry your experience across sessions, and to show you what you saved. We also use it to keep the service safe and working, and to meet our legal obligations. We do not use it for advertising, and we do not sell it.

4. Who it is shared with

We do not sell consumer health data, and we do not share it with anyone for their own purposes. It is processed for us, under contract, by these service providers, each receiving only what its job requires:

• Data hosting — Supabase (database and file storage) and Railway (the server that runs THE SPACE).
• Artificial intelligence — Anthropic, which generates THE SPACE’s replies from your messages and any relevant saved file.
• Voice — ElevenLabs, which turns THE SPACE’s spoken replies into audio when voice is on.
• Email — Resend, for account emails and the pre-written notes you choose to send to a support person.
• Error monitoring — Sentry, set up not to include your messages or personal details.
• Age verification — Yoti.
• Feedback — Typeform, only if you choose to fill out a beta evaluation.

We have no affiliates that receive this data. We may also disclose it when the law requires us to, or to emergency services or law enforcement when we believe in good faith that someone is in immediate danger of death or serious physical injury, as described under “Safety” in our Privacy Policy.

5. Your consent

Before you use THE SPACE we ask for two separate consents: one to collect this information so we can provide THE SPACE to you, and one for it to be processed by the service providers above. The second also covers sharing only what is needed with emergency services if we believe in good faith that someone is in immediate danger. THE SPACE cannot work without them. You can withdraw either consent at any time by closing your account in Settings, or by emailing us.

6. Your rights

You can ask us to confirm whether we hold your consumer health data, to give you a copy of it, to correct it, to tell you which providers it has been shared with and how to contact each of them, to withdraw your consent, and to delete it. You can do much of this yourself in Settings (clear your conversation history, edit or clear What I’ve Come to Know, close your account). For anything else, email contact@rheoslabs.com. We will respond within 45 days.

If we decline a request, you can appeal by replying to our decision and asking for a review. We will answer the appeal in writing within 45 days. If you live in Washington and your appeal is denied, you may contact the Washington State Attorney General at atg.wa.gov/file-complaint.

7. Changes and contact

We may update this policy. If we make material changes, we will tell you by email and in the app before they take effect and, where the law requires it, ask for your consent again. The date at the top shows when it was last updated.

Rheos Labs LLC · 1209 Mountain Road PL NE #11238, Albuquerque, NM 87110 · contact@rheoslabs.com · (575) 651-1854