Consumer Health Data Privacy Policy

Categories of consumer health data we collect

Categories of consumer health data collected

Awaiting counsel. TODO(counsel): Describe each category of consumer health data collected, in plain language. Placeholder text — not legal disclosure, must be replaced before launch.

• Injury, condition or diagnosis described during intake
• Medications, devices and treatments described during intake
• Provider and treatment-facility identifiers supplied by the individual
• Medical records retrieved with the individual’s authorization
• Inferences drawn from the above for case qualification

Purpose of collection and use

Purpose of collection

Awaiting counsel. TODO(counsel): State each purpose for which consumer health data is collected and used, and the lawful basis for each. Placeholder text — not legal disclosure, must be replaced before launch.

• Determining whether an individual may qualify for a legal matter
• Retrieving medical records the individual has authorized us to retrieve
• Making the resulting file available to the individual’s authorized attorney(s)
• Service communications about the individual’s own matter

Categories of third parties who receive consumer health data

Categories of third parties receiving consumer health data

Awaiting counsel. TODO(counsel): Describe each category of recipient and the circumstances of each disclosure. Placeholder text — not legal disclosure, must be replaced before launch.

• The law firm(s) the individual has named and authorized
• Record-retrieval and health information network vendors acting on the individual’s authorization
• Infrastructure and storage providers processing on our behalf
• Recipients compelled by legal process, subject to the notice commitment in our security notice

Named affiliates and vendors

Specific affiliates and third parties, by name

Awaiting counsel. TODO(counsel): Confirm this list is complete and current, and describe each relationship. Placeholder text — not legal disclosure, must be replaced before launch.

• Supabase, Inc. — Primary database, authentication and document storage. (United States; BAA + DPA, status: pending)
• Fasten Health, Inc. — Medical record retrieval from connected provider networks. (United States; BAA, status: pending)
• Anthropic PBC — Assistive summarisation for intake staff. (United States; DPA (zero-retention terms required), status: pending; zero-retention terms)

Source: in-repo configuration stub · 7 vendors tracked, 3 of which may receive consumer health data.

How to withdraw your consent

How to withdraw consent

Awaiting counsel. TODO(counsel): Describe the withdrawal mechanism, the effect of withdrawal, and the response timeline. Placeholder text — not legal disclosure, must be replaced before launch.

• Signed in: Settings → Privacy → Revoke, on any screen of the client portal
• Site tracking: change any choice at any time in the consent manager on this site
• By email: privacy@tortos.ai (identity verification is required before we act)
• Withdrawal stops future processing in the withdrawn scope; it does not undo disclosures that already occurred

Universal opt-out signals

We honour the Global Privacy Control signal. When your browser sends it, we record an opt-out for you and no non-essential technology runs on this site.

States requiring a universal opt-out mechanism as configured in this application: CA, CO, CT, DE, MD, MN, MT, NE, NH, NJ, OR, TX.

Change log

- **2026-09-03** — Initial standalone Consumer Health Data Privacy Policy published as a separate document with its own homepage link. Material change: yes.
- TODO(counsel): maintain one dated, plain-language line per change, with a material-change flag.