Consumer Health Data Privacy Policy

We collect health data only when you type it in. Each category below is tied to the one job it does.

To decide which planning tasks apply to you

Whether the person being planned for is receiving hospice or home care; whether they live in a care facility; whether they live with a disability; whether they have stored reproductive material such as embryos, eggs, sperm, or banked tissue; whether they are a registered organ donor; whether an advance directive exists; and whether they receive government assistance such as Medicaid, SSI, or SNAP. These answers add, remove, and reorder items on your checklist. We use them only for this purpose.

To route you to the right kind of help

The situation you select when you start a plan: that you are planning ahead, that a serious illness or health situation may be leading to a loss, or that a loss has already occurred. This selects which version of the product you see. It is not sent to Providers (section 4).

To print an emergency card, if you make one

Allergies, medications, medical conditions, implanted devices, whether a POLST or DNR exists and where it is kept, and any short note you add. This is optional, off until you turn it on, and deleted entirely when you withdraw consent. It is encrypted before it is stored, so it is not readable in our database, and our support staff cannot read it.

To respond safely if you write to our assistant about self-harm

Messages you send to Pax, our in-app assistant, are screened before they reach the model, and a message identified as describing a crisis is flagged so the assistant responds with crisis resources instead of ordinary planning help. That flag is stored with the conversation. We are telling you this because an automated inference about your mental health is health data even though you never filled in a form.

Directly from you, and only from you. We do not sync with health apps, wearables, patient portals, pharmacies, or insurers. We do not import records. We do not read the contents of documents you upload to your vault. We do not buy health data, and we do not infer health status from your browsing or your purchases.

Where a plan is for someone else, the answers are the ones you provide about that person.

Health data is stored in our database in the United States and processed by our hosting and database provider on our behalf. Emergency card entries are additionally encrypted with per-entry keys before storage.

We do not use health data to train artificial intelligence models, to build advertising profiles, to set prices, or to rank or order the Providers you see. We do not make automated decisions about you that produce legal or similarly significant effects.

Access inside Passings is limited by the same permissions that protect the rest of your plan, with one addition: emergency card medical entries are hidden from everyone on your plan except you, until you turn on access for a specific person who is involved in that person’s care.

We do not publish your health data, and we do not disclose it to Providers as part of your plan.

Quote requests do not carry health data.

If you send a quote request to Providers, it states only whether you are planning ahead or a death has occurred. It never includes the situation you selected, so it does not tell a Provider that a serious illness is involved, and it never includes your checklist health answers in section 1. You choose whether to send a quote request; nothing is sent unless you do.

Emergency card details go where you send them.

The card is generated for you to print and carry. If you turn on access for a collaborator involved in the person’s care, that person can see those details in the app. Nobody else can.

Our service providers process health data only on our instructions and only to run the Service, such as our database and hosting providers, the provider of the AI model behind our in-app assistant, and our error-monitoring provider. You may ask us for the current list at privacy@passings.io.

We may disclose health data if we are legally compelled to, or to protect someone from imminent harm. We may tell you first where the law allows.

Passings may show advertising on some pages.

No third party collects health data through our Service, and no third party is permitted to collect consumer health data over time and across different websites or applications through Passings. Our product-analytics tool does not record your screen, does not capture page text or form contents, is off until you consent, and honors Global Privacy Control. You can change these choices at any time on our Your Privacy Choices page.

You have the right to:

• Confirm and access the health data we hold about you, including a list of every third party and affiliate with whom we have shared or sold it, together with a way to contact each one.
• Review and correct it. Most of it you can change yourself, at any time, on the plan it belongs to.
• Withdraw consent to our collection and sharing of it. Withdrawing consent for the emergency card deletes those entries.
• Delete it, including from archives and backups. Backup copies are removed on our regular backup cycle, which does not exceed six months. We notify every service provider and third party that received it, and they are required to honor the deletion.
• Appeal if we deny a request. If we deny your appeal, we will give you a way to complain to your state Attorney General. Washington residents may contact the Washington State Attorney General at www.atg.wa.gov/file-complaint.

Email privacy@passings.io with the word “health data” in the subject line, or use our Your Privacy Choices page. We will ask you to verify that you control the account, and we may ask for more detail if a request is unclear.

We respond within 30 days for Nevada residents and within 45 days for Washington residents. A Washington response may be extended once by a further 45 days where a request is complex; we will tell you within the first 45 days if that happens. Requests are free up to twice a year.

An authorized agent may act for you if you give them written permission and we can verify it.

If we change the categories of health data we collect, or the purposes we collect them for, we will update this policy and obtain your consent before the new collection or use begins. For other material changes we will notify you by email or in the product before they take effect, and the effective date at the top of this page will change.

Passings LLC, 2501 Chatham Rd, Suite R, Springfield, IL 62704, USA.
Privacy inquiries: privacy@passings.io

Effective date: October 6, 2026.