Last updated: July 2026

Consumer Health Data Policy

This Consumer Health Data Policy explains how Brady Salcido, doing business as JourneySpark ("JourneySpark," "we," "us") collects, uses, shares, and protects consumer health data through the JourneySpark platform (the "Service"), and the rights you have regarding that data. This Policy is separate from, and controls over, our general Privacy Policy on matters of consumer health data.

1. Purpose and scope

"Consumer health data" means personal information that is linked or reasonably linkable to a person and that identifies their past, present, or future physical or mental health status. Because JourneySpark captures self-reported wellness information (such as how a person rates their energy, sleep, mood, and habits), some information we handle may be treated as consumer health data under applicable law, and we apply the protections in this Policy to it.

JourneySpark is a wellness coaching and client-engagement platform. By design, the Service never solicits, structures, or surfaces clinical information. It captures self-reported subjective experience only — not diagnoses, symptoms, medications, lab values, or treatment records — and is not a medical, clinical, or HIPAA-covered service.

2. Categories of consumer health data we collect

Subjective experience ratings — self-entered ratings such as energy, sleep quality, mood, mental clarity, and comfort.
Self-reported reflections and notes — free-text entries a person writes about their own wellness journey, in their own words.
Program and habit participation — self-reported completion of wellness habits and non-clinical program items.
Wellness program context — the general program focus a Coach configures.

We do not intentionally collect precise health diagnoses, medications, lab results, biometric identifiers, precise geolocation used to infer health status, or data from health facilities.

3. How we collect it and from whom

Consumer health data is collected directly from the individual (the Client) who enters their own self-reported ratings, reflections, and habit participation, and from the Coach who configures the wellness program context within the Service's wellness scope. We do not purchase consumer health data, and we do not collect it from data brokers.

4. How we use consumer health data

We use consumer health data to:

provide the Service to the Client and their Coach;
generate SparkMoments, case-study narratives, and other AI-assisted content for the Coach's review, from the individual's self-reported data;
where the individual has consented, produce and serve Published Assets (case studies, testimonials, and the Outcomes Widget) at the identification level the individual chose;
maintain, secure, and improve the Service; and
comply with legal obligations.

We do not use consumer health data to serve targeted advertising, and we do not use it to make automated clinical or medical determinations.

5.1 We do not sell consumer health data.

5.2 Sharing requires your consent. We share consumer health data only with the inviting Coach (as necessary to provide the Service), as you direct through consent (for example, publishing a story you have consented to publish), with the service providers listed below, and as required by law. Where applicable law requires consent to collect or share consumer health data beyond what is necessary to provide the Service you requested, we obtain that consent, and it is specific, informed, and revocable.

5.3 Categories of recipients. Consumer health data may be shared with: your Coach; our processors — Supabase (hosting and database), Vercel (hosting), Anthropic (AI content generation), and Resend (transactional email) — under contracts restricting their use to providing services to us; and, only with your consent, the public (for Published Assets). Our payment processor, Stripe, receives non-health billing metadata only and does not receive consumer health data. We do not share consumer health data with affiliates or third parties for their own purposes.

Your self-reported content is private by default. Nothing is published without your affirmative, specific, and informed consent. You may withdraw or change your consent at any time. When you withdraw consent to publish, the associated content is automatically unpublished from JourneySpark-controlled surfaces, and your Coach is notified. Because content may have been exported or displayed off-platform, we cannot guarantee removal from locations outside our control. Consent choices are always visible and editable in your account settings.

7. Your rights regarding consumer health data

You have the right to:

confirm and access whether we are processing your consumer health data, and access that data;
withdraw consent to our collection and sharing of your consumer health data;
delete your consumer health data; and
not be discriminated against for exercising these rights.

How to exercise these rights. Email us at healthdata@journeyspark.io. We will verify your request and respond within the timeframe required by law. If we deny a request, you may appeal by replying to our response. If your appeal is denied, you may contact your state Attorney General (for example, the Washington State Attorney General) to submit a complaint.

When you request deletion of consumer health data, we delete it from our active systems and direct our processors to do the same, subject to limited legal retention and to backups that are overwritten on a rolling basis.

8. No geofencing

We do not implement any geofence around health facilities to identify, track, collect data from, or send notifications to consumers based on their proximity to such facilities.

9. How we protect consumer health data

We restrict access to consumer health data to personnel and processors who need it to provide the Service, and we apply access controls, row-level security, and other reasonable safeguards. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

10. Coaches' responsibilities

Coaches are responsible for using the Service within its wellness scope, for their own relationships with and obligations to their Clients, for obtaining any consents their own practice requires, and for complying with laws applicable to them. Coaches must not enter or solicit clinical information through the Service.