Consumer health data

Heirleaf is not a health product. We measure nothing, we diagnose nothing, and we never ask anyone about their health.

But when a person tells their life, health turns up on its own. The difficult birth turns up, the father's illness, the year spent in bed, the mother's mind at the end. That is family memory, and to Washington law it is also consumer health data.

That law has no size threshold and does not stop at the border, so it reaches us. And we think it should: if somebody is going to tell us that, they deserve to know exactly what we do with it.

Only what the person writes or says when answering their questions, and the recording if they answer by speaking. Nothing else.

There is no health form, no tick-box list of conditions and no question in the bank that asks for a diagnosis. If health data is in a book, it is because the person writing it chose to tell it.

One thing only: to make that person's book and give it to them as a PDF.

We do not sell it and we do not share it with anyone. There is no advertising, no analytics, no profiling and no data brokers. If that ever changed it would need each person's prior consent, and this page would say so first.

The person who wrote it, with their link. Nobody else.

Not whoever gave them the book, who sees not one word. Not us for curiosity's sake: we only look if somebody writes asking for help with something specific, and then we tell them so.

Three providers handle a piece of it along the way, none with permission to do anything more: Supabase stores the data, Vercel serves the website and AssemblyAI turns speech into text. All three are named in the privacy policy, with where they are and what they delete.

You can ask us for a copy of what we hold, for it to be deleted entirely, or to withdraw your consent to our keeping sensitive data. All three are asked for the same way: by writing to hello@heirleaf.com.

A person answers, not a form, and within two days. We ask for no proof and no reasons.

If you withdraw consent, we delete what you have told us. We cannot do it halfway: the book is made of that.

If you think we have got it wrong and you live in Washington, you can complain to the state Attorney General.

We do not train models on what people tell us, and we do not let anyone else do it either. The provider that transcribes speech has that option switched off on our account, and deletes its copy after three days.

We do not rewrite what people tell us. A machine writes it down and suggests a short title taken from their own words; the rest is printed exactly as written.

There are no trackers on this website. Not one.