Consumer health data privacy policy

1. Purpose of this consumer health data privacy policy

This Consumer Health Data Privacy Policy supplements the Xycota Biosciences, LLC Privacy Policy and provides disclosures required under state consumer health privacy laws, including the Washington My Health My Data Act (MHMDA) and Nevada Consumer Health Data Privacy Law, for visitors using our educational resources (/ptsd and /ptsd-app).

2. Categories of consumer health data we do and do not collect

• PTSD Companion Daily Readiness Log (Zero Server Collection): When you use the grounding tools, breathing exercises, or Daily Readiness Log in the Free PTSD Companion (/ptsd-app), your check-in scores and notes are stored solely on your own device in browser localStorage. Xycota does not collect, transmit, access, or store your readiness log on any server.
• Anonymous Community Reflection Poll: If you voluntarily click a poll option on /ptsd regarding barriers to care, only the selected option and an anonymous random browser hash are recorded to display aggregate community percentages.
• Movement Ambassador & Interest Preferences: If you voluntarily sign up on /ambassadors and select an advocacy track (such as Patient / Family / Brain-Health Advocate or Veteran / First Responder Advocate) or research interest topics, we collect that preference solely to send you the public educational updates you requested.

3. No sale or commercial sharing of consumer health data

Xycota Biosciences, LLC never sells, rents, or shares consumer health data with third-party advertisers, data brokers, or marketing networks. We do not use health-related tracking pixels or behavioral advertising profiles on any page of xycota.com.

4. How to exercise your consumer health privacy rights

You have the right to confirm whether Xycota holds any data linked to you, to withdraw consent at any time, and to request permanent deletion of any information you voluntarily submitted:

• To erase local PTSD Companion data on your device immediately, click "Wipe Local Data" inside /ptsd-app.
• To withdraw consent or request deletion of any email or community registration record, email community@xycota.com. We will process and confirm your request promptly and free of charge.