← Service Diaries · Contact

Service Diaries — Consumer Health Data Privacy Policy

AIM ATTITUDE INC. · Diary and community launch notice · Version 2026-11-02.2 · Prepared November 2, 2026

Public release is being prepared. This advance notice describes relevant information in the planned diary and optional community edition. Public download and public community access are not open. Required collection, sharing and withdrawal choices must be in place before affected public processing begins. The final effective date will be identified before public participation begins. Previous edition notices are retained below.

Information, sources and purposes

AIM ATTITUDE INC. provides Service Diaries for writing and reflection. Writing or chosen feelings can reveal physical or mental health information. Not every feeling is a health condition. Service Diaries does not provide medical care, diagnose a condition, connect to HealthKit or retrieve medical records.

Relevant information comes from the person who writes, deliberately shares, reports a concern, requests review or sends correspondence. Categories can include health-related words or selected feelings, an account reference associated with that material, and a safety or moderation decision concerning the submitted copy. The purposes are the requested diary or community function, reviewing concerns, providing support and honoring privacy rights. The service does not build an emotional advertising profile, sell consumer health data, monitor employees or use healthcare-location geofences.

Private diary entries, local photos and on-device support suggestions remain on the device and are excluded from remote community screening. An optional shared copy may contain information the writer deliberately includes. Keep another person’s health records, identifying details and unnecessary personal information out of submissions and support email.

Recipients

For the planned online edition, Supabase stores online account, deliberately shared content and relevant case records. OpenAI processes the submitted text, included feelings or chosen public name for screening. Authorized reviewers may read held or reported shared material and relevant case information. Eligible community members can see an approved shared copy within the disclosed audience. The service links a shared record to the account even when the public label is Anonymous.

Resend delivers account emails and generic reviewer alerts; reviewer alerts exclude story text and member details. Zoho and the sender’s email provider handle support correspondence selected by the sender. A chosen export destination receives an encrypted diary file and associated metadata. The planned private iCloud deletion-recovery log contains minimal deletion identifiers and references, without diary writing, photos, story text or report details. A valid legal requirement may require disclosure of information actually held. See the Privacy Policy for the separate flows and provider details.

Your separate community data choices

Your private diary remains available without joining the online community. Creating a community profile or renewing participation presents separate, initially-off choices for collection, OpenAI screening and sharing within the community, alongside the Terms of Use and Community Guidelines. The screen identifies the submitted categories, recipients and purposes. A general policy acknowledgment alone does not grant these permissions.

Collection covers the public profile you choose, deliberately submitted story or comment copies, included feelings, linked account activity and reports for the requested community function, safety review and privacy rights. OpenAI screening uses the selected public name, submitted text and included feelings. Approved profile and shared copies can be seen by eligible community members. Private diary originals, local photos, unsent drafts and private reflections are excluded. External sharing remains a separate per-story writer choice.

In Profile → Account & Security → Your data choices, stop OpenAI screening or community sharing. Future community access and screening stop; shared copies become unavailable to readers and remain unpublished after a later renewal. Processing already sent to a provider cannot be recalled; a late screening result cannot publish the withdrawn copy. Separately permitted account records can remain for the disclosed service, rights or limited review purpose until removal or a relevant deletion requirement.

Withdrawing community collection uses the clearly labeled “Withdraw collection & close online account” action and confirmation. Community access ends and removal of the online account and related content is requested through the guarded deletion process. A queued request is not completed deletion. Private diary entries, local photos and user-held backups remain separate. Collection withdrawal does not require agreeing to a replacement notice. Contact servicediaries@aimattitude.com for another applicable privacy request, access, correction, removal or an appeal, including when account access is unavailable.

Minimal versioned choice receipts record the account reference, selected permissions, request reference and time. Receipts contain no diary writing or shared-text copy and are removed with the online account. Replaying a prior consent request after withdrawal does not restore permission. A new affirmative choice cannot automatically republish a removed shared copy.

Retention and rights

Private entries and photos have no automatic expiry. The approved starting limits for the public edition are 30 days for future operator recovery copies, 30 days for unreferenced reconciled finished-job metadata, and up to 90 days after closure for controlled support or moderation cases. Account deletion and applicable legal rights take precedence. Existing protected preparation backups remain isolated during historical reconciliation. Minimal deletion exclusions have a separate, reviewed anti-restoration purpose. See Account & Data Deletion for the detailed distinctions.

Depending on applicable law, request confirmation of collection or sharing, access, a copy, recipient information, correction, withdrawal, deletion or an appeal. Use the subject Consumer Health Data Privacy Request or Consumer Health Data Appeal. Include only enough information to locate the relevant records. An authorized representative may act where permitted. Verification is proportionate and never requires a private diary or recovery code. No app account is required, and exercising a right does not result in unlawful discrimination.

For requests governed by Washington’s My Health My Data Act, the ordinary response period is 45 days; a permitted extension must be explained. Appeals require a written response within 45 days. A denied appeal must explain the decision and how to contact the Washington Attorney General. Washington rights and appeals.

For a covered Nevada deletion request, the law generally requires deletion and downstream notification within 30 days after authentication, subject to the statute’s applicable exceptions. Other jurisdictions may impose different or shorter requirements; the applicable rule governs. Nevada consumer health data provisions.

New categories, purposes or recipients require updated disclosure and any required choice before processing begins. This notice does not reduce mandatory rights or authorize future unrelated uses.