MIMI CONSUMER HEALTH DATA PRIVACY POLICY
This Consumer Health Data Privacy Policy supplements the mimi Privacy Policy and applies to "consumer health data" of consumers in Washington and in other states with similar consumer health data laws, meaning personal information that is linked or reasonably linkable to a consumer and that identifies the consumer's past, present, or future physical or mental health status.
1. CONSUMER HEALTH DATA WE COLLECT
We collect consumer health data only to the extent you choose to include it in your chats with mimi or in content you submit through the "Teach mimi" feature. Depending on what you share, it may include information about skin conditions and diagnoses; symptoms; allergies and sensitivities; medications, treatments, and procedures; pregnancy or nursing status; images of your skin or face that you choose to attach; and inferences about these matters reflected in the recommendations generated for you. We do not use images to identify you, and we do not collect genetic data or precise location information.
2. SOURCES
We collect consumer health data directly from you, through the messages you type, the options you select, and the content you submit through "Teach mimi."
3. PURPOSES OF COLLECTION AND USE
We collect and use consumer health data, with your consent, to provide the services you request (including generating recommendations and displaying your chat history), to maintain the security of those services, and to comply with law. With your separate opt-in consent, we also use chat content and Teach mimi content that has been stripped of identifiers to develop and improve our own models.
4. SHARING
We do not sell consumer health data. We do not share consumer health data with third parties, other than with governmental authorities or other parties where required by law or legal process. We do not share consumer health data with any affiliate. Our processors, Render Services, Inc. (hosting) and OpenAI OpCo, LLC (AI processing), process consumer health data on our behalf under contracts that require them to process it only on our instructions.
5. YOUR RIGHTS
You have the right to (a) confirm whether we are collecting, sharing, or selling your consumer health data; (b) access your consumer health data, including a list of all third parties and affiliates with whom we have shared or to whom we have sold it and an email address or other online mechanism for contacting them; (c) withdraw your consent to our collection or sharing of your consumer health data; and (d) have your consumer health data deleted.
To exercise these rights, use the settings in the mimi service or email mimi@askmimi.io. We will respond within 45 days and may extend that period once by up to 45 days where reasonably necessary. If we decline your request, you may appeal by emailing mimi@askmimi.io with the subject line "Privacy Appeal," and we will respond in writing within 45 days. If your appeal is denied, Washington residents may file a complaint with the Washington State Attorney General at www.atg.wa.gov/file-complaint, and residents of other states may contact the attorney general of their state.
6. CONTACT
Withly, 701-dong, 7th Floor, No. 14, 23 Gukhoe-daero 62-gil, Yeongdeungpo-gu, Seoul, Republic of Korea. Email: mimi@askmimi.io.