Consumer Health Data Privacy Policy

1. What This Policy Covers

This policy applies to "consumer health data" as defined by the Washington My Health My Data Act (MHMDA). StellarTies is operated by Invents.US, LLC. Birth date, time, and location data processed by StellarTies may qualify as consumer health data because it is used to infer psychological and emotional characteristics through astrological analysis.

This policy supplements our general Privacy Policy.

2. Categories of Health Data Collected

• Birth data: Date, time, and geographic coordinates of birth
• Derived astrological data: Planetary positions, aspect geometry, composite charts, transit events — all computed from birth data
• Language-model-generated interpretations: Relationship narratives synthesized from astrological data (never from raw birth data directly)

3. Purposes of Collection & Use

• Computing natal charts and synastry aspects between two individuals
• Generating compatibility scores across four relationship dimensions
• Producing monthly transit forecasts and connection bid suggestions
• Generating personalized relationship narratives via language model

We do not use consumer health data for advertising, marketing targeting, profiling beyond the stated astrological purposes, or any purpose not disclosed here.

4. Sources of Health Data

All consumer health data is provided directly by the user through the StellarTies interface. We do not collect health data from third-party sources, data brokers, or public records.

5. Third-Party Sharing

We do not sell, share, or disclose consumer health data to any third parties. Relationship narratives and forecasts are generated using a language model within our secure private infrastructure. The model receives only derived astronomical data (planetary positions and aspects) and privacy aliases — not raw birth data or personally identifiable information. This processing is covered under our infrastructure provider's data processing agreement.

6. Your Rights Under MHMDA

Washington consumers have the right to:

• Know what consumer health data we collect and how it is used
• Access a copy of your health data (GET /v1/account/export)
• Delete your health data (POST /v1/account/delete-request)
• Withdraw consent to health data processing at any time

We will respond to verified requests within 30 days. Deletion is immediate and irreversible — all birth data, charts, reports, and forecasts are permanently purged.

7. Data Security

Birth data is encrypted at rest using AES-256-GCM encryption. Passwords are hashed using PBKDF2-SHA256. Access to consumer health data is limited to authenticated users viewing their own records, with ownership verification on every request.

8. Contact

For questions about this Consumer Health Data Privacy Policy or to exercise your rights:
privacy@stellarties.com