1. Consumer Health Data covered by this Notice
Consumer Health Data includes personal information linked or reasonably linkable to a person that identifies or can be used to infer physical or mental health status. YourEMR may process Profile identity linked to conditions, allergies, medications, alerts, devices, care preferences, providers, pharmacy, hospital, insurance, advance-directive status, documents, emergency notes, health-related inferences, translation text, Profile relationships, and visibility or sharing choices.
2. Sources
Sources include the Account holder, an authorized adult managing another Profile, the Profile subject where they communicate with YourEMR, uploaded documents, requested features, devices, and processors operating those features. YourEMR does not purchase Consumer Health Data from data brokers.
3. Why YourEMR collects and uses it
YourEMR uses Consumer Health Data to provide the organizer, Profile, Emergency View, print, export, Public Link, QR, support, security, and privacy-rights features requested by the user. Collection is limited to what is reasonably necessary for those purposes or covered by affirmative consent.
4. Sharing
YourEMR shares Consumer Health Data with Supabase and other contracted processors only as necessary to operate requested authentication, database, storage, security, support, export, or deletion features, and with Public Link viewers only after the Account holder separately enables sharing and approves visible fields. Stripe, Resend, Netlify, Commit Happens, Netlify analytics, Google Analytics 4, and the United States Postal Service must not receive underlying Profile health content unless a separately reviewed feature makes the transfer necessary, disclosed, consented to where required, and contractually controlled.
The intended provider categories and purposes are: Supabase for authentication, database, storage, access control, logs, backups, export, and deletion; Netlify for website hosting, deployment, routing, security, and eligible public-page analytics only; Stripe for payment processing, fraud controls, receipts, refunds, and billing identifiers, with no Profile health content; Resend for transactional email using the minimum message data, with no health content in subject lines or ordinary notices; Commit Happens, Netlify analytics, and Google Analytics 4 for eligible public marketing-page measurement only, route-restricted and production-tested to exclude authenticated, health-data, Public Link, QR/token, emergency-view, and checkout surfaces; and Google Cloud Translation, disabled by default and not an active recipient of any information as of August 14, 2026 — if YourEMR later enables it, it receives only the specific emergency text a member affirmatively selects to translate, sent server-to-server for that purpose only, never in a URL, analytics event, or log.
Physical-product production and fulfillment are performed by YourEMR directly or through a production arrangement YourEMR has approved and confirmed may lawfully be used for that purpose. No outside printer, fulfillment vendor, or similar third party currently receives order data, artwork, shipping information, or Profile content for any approved physical product. The United States Postal Service receives only the shipping address and package needed to deliver the order, not Profile health content. If YourEMR later approves an outside fulfillment arrangement, that provider will be added to YourEMR's vendor register, and this Notice will be updated and any required consent obtained, before that arrangement receives any Consumer Health Data.
YourEMR maintains an internal Data Flow and Vendor Register identifying the legal entity, service, subprocessors, location, contract status, retention, deletion practices, and Consumer Health Data access for each production provider. If the verified production configuration differs from what's described in this Notice, YourEMR will revise this Notice before collecting data through that configuration.
5. No sale or targeted advertising
YourEMR does not sell Consumer Health Data and does not use it for targeted advertising. A future sale would require a separate, specific signed authorization containing every legally required element; general Terms acceptance would not be enough.
6. Separate consents
Consent to collect and use health information for a Profile is separate from consent to make selected information public. The person giving consent must be the Profile subject or an adult with verified lawful authority under the tiered authority process. Public sharing consent identifies the Profile, categories, purpose, audience, duration or continuity choice, and withdrawal method. Material visibility changes require a new final-view confirmation.
7. Rights
A person may confirm whether YourEMR collects, shares, or sells Consumer Health Data; access Consumer Health Data and, where required, a list of recipients; correct inaccurate information; delete Consumer Health Data, including required processor or recipient deletion; withdraw consent and stop future processing covered by it; obtain a portable copy where applicable; and appeal a denied request.
8. Request workflow
Submit through the authenticated privacy-request tool when available or support@youremr.net. A person does not need to purchase Paid Access to submit a request. YourEMR may authenticate identity and authority using minimized information and a secure channel. The nationwide operating target is acknowledgment within 5 business days and completion within 45 days, with a lawful extension and notice when necessary. A denied request will state the reason and explain the appeal method and applicable regulator route.
9. Consent withdrawal and deletion
Withdrawal stops future processing covered by the consent and may disable the related feature. It does not invalidate lawful prior processing. A deletion request may be submitted at the same time. Required deletion instructions will be sent to processors and recipients, and completion evidence will be retained. Isolated backups will be deleted, overwritten, or rendered inaccessible on a rolling cycle not exceeding 180 days unless a narrower applicable period controls; deleted data will not be restored to active use.
10. Washington supplement
For Washington consumers, this Notice is intended to serve as the consumer health data privacy policy required by chapter 19.373 RCW. Collection or sharing beyond disclosed categories and purposes requires prior affirmative consent; sale requires separate written authorization; consumers have access, recipient, withdrawal, deletion, and appeal rights.
11. Nevada supplement
Nevada consumers may confirm collection, sharing, or sale; review and revise data; obtain recipient information; withdraw consent; delete data; and appeal. Collection and sharing use separate consent unless necessary to provide a requested product or service. Processor access requires a written contract.
12. Connecticut supplement
Consumer Health Data is sensitive data under Connecticut law. YourEMR will obtain affirmative opt-in consent before processing where required and provide access, correction, deletion, portability, opt-out, consent-withdrawal, third-party or recipient information, and appeal rights as applicable.
13. Contact and changes
Contact YourEMR LLC at support@youremr.net and YourEMR LLC, 2734 Beaver Run Blvd, Suite B #421, Surfside Beach, SC 29575. Appeals may be submitted through the authenticated privacy-request tool or privacy@youremr.net. Materially new health-data categories, purposes, sharing, or sale require notice and consent before use. This Notice must be linked prominently from the homepage, every applicable collection surface, and the legal index.