Hopli Consumer Health Data Privacy Policy

This policy explains which health data Hopli may handle, why, where it comes from, who we share it with and how to exercise your rights. It follows Washington's My Health My Data Act and similar laws in other US states, such as Nevada. It complements our Privacy Policy.

Version 1 · Effective from: [pending publication]

In short

We save health data to your profile only if you give us the sensitive data permission in the app, after reading its notice. It's optional: Hopli works without it.
If you write something about your health to Rumbo ("I'm celiac", "I'm looking for a pharmacy"), we use it only to answer you in that conversation.
We use it for one thing only: so Hopli and Rumbo suggest plans and places that work for you.
We don't sell it, we don't use it for advertising, and no one collects it to track you across apps or sites.
You can see it, correct it, delete it and withdraw the permission whenever you want.

1. What health data we handle and why

Category	Examples	Why
Health-related food needs	A diet for health reasons or restrictions (gluten-free, lactose-free)	Suggesting restaurants and food you can eat
Allergies	Tree nuts, peanuts, shellfish, fish, egg, soy, sesame	Avoiding places or dishes that could harm you
Mobility	Wheelchair, step-free	Suggesting routes and places you can reach
Accessibility	Vision, hearing	Suggesting places and explanations that work for you
Needs note	What you write about your needs	Same as above
Your companions' needs	The same categories, for people traveling with you who don't have an account	Planning for the whole group
What you write to Rumbo	Any health data you mention in the chat	Answering you in that conversation
Place searches	What you ask to search for ("pharmacy", "gluten-free restaurant")	Finding the place
Location	Your approximate point when talking to Rumbo (about 110 m) or when sharing with your group (about 11 m), which could show you're near a health care place	Searching near you and letting your group know, if you share

We don't use this data for anything else. If we ever want to use it for another purpose or collect another category, we'll ask for your permission first.

Hopli doesn't set geofences or send notifications around hospitals, clinics, pharmacies or other places that provide health care in order to identify, track or contact people seeking care. Stops on your trip that are health care places don't get arrival alerts.

2. Where it comes from

From you, when you mark it in the app (when you start, in You, or on a Rumbo card) after giving the permission.
From you, about your companions, when you add their needs to a trip. Make sure they agree.
From what you write to Rumbo and what you search for.
From your phone (location), only if you give location permission.

We never infer it from how you use the app, and we never buy it from others.

Who	What they receive	Why	Contact
Anthropic (US), provider of Rumbo's AI; acts as a processor, under contract	With your permission: your profile categories and your companions' needs. Always: what you write to Rumbo and your approximate point. On a group trip: the needs of members who gave permission, without saying whose they are	Answering you	Through us: [email protected] (or [email protected])
Google (US), Google Maps Platform	The text of place searches and the point the search is made from	Finding places and routes	https://policies.google.com/privacy
Supabase, Railway and PowerSync (US), our infrastructure; processors	What we store from your profile and trips	Storing and syncing your data	Through us: [email protected]
Your travel group, only if you give that trip's permission	Rumbo takes your food, allergies, mobility and accessibility into account when someone else in the group plans, without saying whose they are. They don't receive your note or your companions' needs, and they don't see your data	Planning for the whole group	—

Anthropic doesn't use this data to train its models. It keeps it for up to 30 days to operate the service, and for up to 2 years only if a message is flagged for violating its usage policy, in order to enforce it.
We have no affiliates that receive this data. We don't sell health data.
No third party collects health data about you over time or across different apps or sites through Hopli.

4. Your rights

You can, free of charge (up to twice a year for each right):

know whether we have health data about you, see it, and get the list of those who receive it (the table above, with their contact);
review and correct it in the app: You → How you travel;
delete it:
- from the app (You → Rumbo → Sensitive data → Remove permission, or by deleting your account) or by writing to us;
- we delete it from our systems right away and from backups within 30 days;
- at our processors it's deleted on their schedule (Anthropic: up to 30 days, or up to 2 years if a message was flagged);
withdraw your permission at any time, from the app.
- Withdrawing it deletes your profile data and your conversations with Rumbo.
- The needs you added for your companions stop being used and are deleted 31 days after the trip; if you want them gone sooner, remove them from the trip.

We won't treat you differently for exercising these rights.

How: write to [email protected] from your account's email, with the subject "Health data". We reply within 45 days. If we need more time (up to 45 more days), we'll tell you why within the first 45.

If you disagree with our answer, you can appeal by writing to the same address with the subject "Appeal". We reply in writing within 45 days. If we deny it, we'll tell you how to contact your state's attorney general (in Washington, the Attorney General's Office: https://www.atg.wa.gov/file-complaint).

5. Changes

This policy goes together with our Privacy Policy. If we change something important here, we raise the Privacy Policy's version, let you know in the app before it takes effect and, if needed, ask for a new permission.

6. Contact

Health data and privacy: [email protected]
Data controller: [pending] · [pending]