Information that may be covered
| Topic | Details |
|---|---|
| Historical precise location | Permitted gallery scans can supply precise photo locations and capture times. Washington law can treat precise location that could reasonably indicate an attempt to obtain health services as consumer health data. Nevada’s definition depends on information used to identify health status or health-service attempts. Not every location is automatically classified the same way. |
| Information you submit | Voluntary profile text, support communications or a report could contain information about health or healthcare. We do not ask for medical records in a profile; avoid publishing them. A dating preference or gender field is not automatically described as statutory consumer health data. |
| Derived information | Visits or summaries derived from location records can be covered when they meet the relevant statutory definition. The source and context matter; the raw record and a derived summary are separate data categories. |
Sources and uses
Relevant information can come from the metadata your device makes available during a permitted scan, content or communications you submit, and summaries derived from those records. Paths uses permitted location history for encounter and shared-place features, submitted content for the feature or request concerned, and information needed for service security or legal obligations.
Where a consumer-health-data law requires consent, its consent conditions apply in addition to device permissions or a general privacy acknowledgment. A photo permission is not consent to sell health data. Requests to withdraw a relevant consent can be sent to the contact below. We do not use this information to provide medical advice or train an external generative-AI provider.
Recipients and sharing choices
| Topic | Details |
|---|---|
| Service providers and map services | Hosting and storage processors, including the service’s Supabase backend, can process covered location records and relevant content for the service purposes described here. Access is limited by the role and purpose of the service provider; a processor route does not itself authorize an independent health-data use. Map/place-lookup services, including Apple Maps, receive coordinates used to identify places, without your photo file, capture timestamp or account identifier. Their role depends on the service and applicable terms. |
| Other members | Covered information you put in a visible profile, or authorized encounter places/times and shared-place history, can be disclosed to the relevant members through matching and story features. These features do not give another member your full raw gallery trace. A place or statement can reveal sensitive context; review visibility, excluded areas and sharing choices. |
| Legal and safety disclosures | A valid legal obligation or an applicable basis for protecting rights and safety can require a limited disclosure. A legal request is assessed rather than automatically granted. |
| Sale and advertising | Paths does not sell consumer health data or use it for targeted advertising. Permission to use a service feature is not an authorization to sell that data. Any legally required separate authorization would be distinct from accepting a general policy. |
Exercise a covered right
Depending on the law that applies, you may ask whether covered data is collected or shared, request access and recipient information, withdraw consent or request deletion of covered data, including relevant inferences. Email paths@prodixa.app with the subject Paths consumer health privacy request and identify the account and action requested.
We may seek proportionate verification and apply the statutory conditions and periods. Rights can extend to processor and recipient deletion requirements under the applicable law. Raw location records follow the stated 180-day scheduled expiry from receipt; derived summaries are separate. A covered deletion request is distinct from waiting for routine expiry.
If the applicable law gives an appeal right, email the same address identifying the earlier request and why you challenge the result. Regulator and other statutory complaint rights remain available. These procedures do not limit mandatory protections.
Changes and other collection
The displayed update date identifies this notice’s current version. Material changes are subject to the notice or renewed consent required by applicable law before the relevant change takes effect.
The current website code does not embed third-party health-data advertising or analytics tools that track a person’s activities across other websites over time. An independent site you choose to visit has its own practices.
Controller and further information
Prodixa LLC operates Paths. Contact: paths@prodixa.app; 30 N Gould St, Sheridan, WY 82801, United States. The Privacy Policy describes the broader service context. Your Privacy Choices explains controls that can limit relevant location and sharing uses. You can ask for information about covered recipient disclosures as part of a health-data request.