Consumer Health Data Privacy Policy

1. Scope

This policy is provided under the Washington My Health My Data Act (MHMDA) and similar consumer-health-data laws. It applies to ClearPath AI’s consumer-facing services — principally Mirror, our AI before/after visualization tool for aesthetic treatments — and describes the categories of consumer health data we collect, why we collect them, how they are shared, and the rights you have.

2. Categories of Consumer Health Data We Collect

• Face photos you voluntarily upload to generate a cosmetic treatment preview (processed transiently, never stored — see our Biometric Data Retention & Deletion Policy).
• Treatment interest information — the cosmetic treatments you choose to preview (e.g., Botox, fillers, whitening), which could be considered information about your health interests.
• Contact details you choose to submit (name, email, phone) when you request more previews, a consultation, or information from us or a participating practice.

We do not collect medical records, diagnoses, prescriptions, insurance details, precise geolocation for health purposes, or biometric identifiers.

3. Purposes of Collection and Use

• Generating the AI treatment preview you request.
• Responding to your inquiry or routing your consultation request to the practice whose website you used.
• Operating, securing, and improving the service (aggregate, non-identifying analytics).
• Complying with legal obligations.

4. Sharing — and What We Never Do

• We do not sell consumer health data. No exceptions.
• We do not share your photos or treatment selections with advertisers.
• If you use Mirror on a participating practice’s website and submit a consultation request, your contact details and stated treatment interest are shared with that practice — that is the purpose of the form you filled in.
• Service providers (hosting, AI image generation, email delivery) process data on our documented instructions and may not use it for their own purposes.

5. Your Rights

Depending on your state of residence, you have the right to:

• Confirm whether we collect, share, or sell consumer health data about you.
• Access the consumer health data we hold about you.
• Withdraw consent to collection or sharing.
• Request deletion of your consumer health data.
• Appeal a refusal of any of these requests.

Because uploaded photos are deleted immediately after your preview is generated, deletion requests typically concern contact details you submitted through a form. We honor verified requests within the timelines required by applicable law.

6. How to Exercise Your Rights / Contact

Email hello@aiclearpath.com with the subject line “Consumer Health Data Request.” We will verify your request and respond within 45 days (with a 45-day extension where permitted). If we refuse your request, you may appeal by replying to our decision; if the appeal is denied, Washington residents may contact the Washington Attorney General.