This Consumer Health Privacy Policy explains how Calm Health (provided by Calm.com, Inc.) and our subsidiaries and affiliates (“Calm”, “Calm Health”, “we”, “our”, or “us”) collect, use, and disclose certain health information about you when you access or use our Calm Health websites, mobile applications, and other online products and services (collectively, the “Services”), and when you contact our customer service team, engage with us on social media, or otherwise interact with us regarding Calm Health. This Consumer Health Privacy Policy is a supplement to the Calm Health Privacy Policy and applies to personal information and other data that falls within the definition of “consumer health data” under applicable United States state laws including Connecticut’s Data Privacy Act, Nevada’s Consumer Health Data Privacy Act, and Washington’s My Health My Data Act (“Consumer Health Data”). We encourage you to review the Calm Health Privacy Policy to learn more about our privacy practices and our commitments to you when you use Calm Health. Capitalized terms used below have the same definitions as in the Calm Health Privacy Policy or in the applicable laws, unless otherwise noted.
We may change this Consumer Health Privacy Policy from time to time. If we make changes, we will revise the date at the top of the policy and, in some cases, we may provide you with additional notice.
This Consumer Health Privacy Policy does not apply to third-party websites or products. Please separately review their privacy policies to understand how your personal information is used and stored by those third parties.
If you are based in the United States and use our Services, we may collect or receive certain personal information and other data about you that is regulated by certain health information laws, including the Health Insurance Portability and Accountability Act (“HIPAA”). Specifically, if Calm Health is being made available to you by your health insurer, healthcare provider, or other HIPAA covered entity, the Services may be subject to that other entity’s HIPAA Notice of Privacy Practices, which describes how the covered entity uses and discloses your medical information, rather than this Consumer Health Privacy Policy. To review the covered entity’s Notice of Privacy Practices, please contact the covered entity.
We may collect certain Consumer Health Data about you depending on how you engage with our Services. This health information may fall under the following specific categories of Consumer Health Data:
information related to individual physical and mental health conditions;
your viewing of content related to certain social, psychological, behavioral, medical interventions;
your viewing of content related to certain diagnosis and treatment experiences;
your viewing of content related to certain reproductive or sexual health information;
data that identifies you seeking health care services;
persistent unique identifiers such as a cookie ID, an IP address, a device identifier, or any other form of persistent unique identifier; or
any inferences of the above categories of health data derived or extrapolated from non-health information.
We may collect Consumer Health Data in the following ways:
directly from you such as when you register for an account, participate in interactive features (like answering screening questionnaires or viewing recorded content), fill out a form or survey, communicate with us via social media, request customer support, or otherwise interact with us;
from your mobile device and web browser (e.g., through cookies or other automatic data collection technologies) when accessing our Services such as when you view content that could indicate your interest in learning about a particular health condition;
if you receive access to Calm Health through your employer, health plan, or another party that sponsors your access, we may collect your name and email address and other information, which may include Consumer Health Data, that is submitted to us to facilitate your enrollment in our Services; and
from your other third-party apps or other third-party services with which you have integrated or linked your Calm Health account.
We may use your Consumer Health Data in the following ways:
to provide our Services to you;
to communicate with you regarding our Services including updates, new features changes, or other transactional messages;
to personalize your Calm Health experience;
to provide you support when responding to your questions, concerns, complaints, or other requests;
to maintain and improve the quality of our Services, including analytics for product development;
to create anonymous or aggregated data;
to protect ourselves, you, and others such as by taking actions to prevent, detect, or respond to fraud, security incidents, harassment, or other malicious or illegal activity;
to comply with our compliance, third party contractual agreements, and other legal obligations;
to establish or exercise our legal rights or defense against legal claims; and
otherwise with your consent where requested and received.
We may disclose your Consumer Health Data to third parties to achieve the purposes and uses listed above. The categories of third parties to whom we disclose your Consumer Health Data with are:
Service providers: We have third parties that provide services on our behalf that make up parts of our Services, including email service providers, analytics providers, third parties that deliver our communications, fraud prevention vendors, security vendors, legal advisors, and other service providers.
Your integrations: You may choose to connect your Calm Health account through supported integrations with third parties, and we will share your Consumer Health Data in order to provide that functionality
Subscription sponsors: If your Calm subscription has been provided to you by someone else, like your employer or health plan.
Business partners: We may share Consumer Health Data with other businesses with which we have a service offering that is jointly operated, a bundled subscription offer, or a joint promotional relationship.
Business transfer: In connection with any merger, sale of company assets, financing or acquisition of all or a portion of our business by another company.
Affiliates: Between and among Calm and our current and future parents, affiliates, subsidiaries, and other companies under common control and ownership.
Government agencies: If we believe disclosure is in accordance with, or required by, applicable law or legal process, including court order, subpoena, or other lawful requests by public authorities to meet national security or law enforcement requirements.
Legal obligations: To respond to legal processes or legal proceedings, as well as for regulatory reporting requirements and recordkeeping purposes.
Other third parties: We may share your Consumer Health Data with other third parties with your consent (e.g., you may choose to share actions you’ve taken through the Services using “share” or similar features or by linking your Calm account with third-party services) such as an authorized legal representative, family member, or caregiver; or, if necessary, we may share your Consumer Health Data in certain circumstances to protect our rights, our customers, or your safety.
As provided for in the Privacy Rights section of the Calm Health Privacy Policy, you may make requests about your personal information. Applicable privacy laws provide you certain specific rights with respect to your Consumer Health Data law subject to exceptions.
Connecticut residents have the following rights in relation to your Consumer Health Data, subject to certain exceptions:
The right to know what Consumer Health Data we collect, use, disclose, and/or sell or share as those terms are defined under applicable law. You may ask us to provide you a portable copy of this information up to two times in a rolling twelve-month period. You also have the right to access your Consumer Health Data that we collect, share, or sell.
The right to have us, as well as our affiliates, service providers, and contractors, delete the Consumer Health Data we have about you.
The right to opt-out of targeted advertising, the sale of your Consumer Health Data, and profiling decisions that could produce legal or similarly significant effects concerning the consumer. You may designate an authorized agent to exercise your opt-out right.
The right to have us correct inaccurate Consumer Health Data.
The right not to receive discriminatory treatment for the exercise of the privacy rights described above.
Rights concerning sensitive personal data. We cannot process your Consumer Health Data, or use your Consumer Health Data for certain purposes without your affirmative consent.
Nevada and Washington residents have the following rights in relation to their Consumer Health Data, subject to certain exceptions:
The right to know what categories of Consumer Health Data we collect, share, or sell. You also have the right to obtain a list of all third parties and affiliates with whom we have shared or sold your Consumer Health Data, and an active email address or other mechanism that you may use to contact these third parties. If you are a Washington resident or otherwise subject to Washington law, you also have the right to access your Consumer Health Data that we collect, share, or sell.
The right to have us, as well as our affiliates, service providers, and contractors, delete the Consumer Health Data we have about you.
The right to withdraw consent related to your Consumer Health Data where we rely upon consent to collect, use, or share your Consumer Health Data.
The right not to receive discriminatory treatment for the exercise of the privacy rights described above.
You may exercise your rights by contacting support@calmhealth.com with your request. As further stated in the Calm Health Privacy Policy, your request may be denied where an exception applies, including but not limited to, where we are legally required to maintain your Consumer Health Data or if we are unable to authenticate the request using commercially reasonable efforts.
You may exercise your rights by contacting support@calmhealth.com. with your request. As further stated in the Calm Health Privacy Policy, your request may be denied where an exception applies, including but not limited to, where we are legally required to maintain your Consumer Health Data or if we are unable to authenticate the request using commercially reasonable efforts. We will respond to your request to exercise your right(s) within forty-five (45) days after receipt, and we reserve the right to extend the response time by an additional forty-five (45) days when reasonably necessary and provided consumer notification of the extension is made within the first forty-five (45) days. An authorized agent may submit a request to exercise the opt-out right on your behalf.
How to appeal decisions about your rights.
Connecticut: If you are a Connecticut resident and your request is denied, you may appeal our decision and we will provide the steps to appeal as part of responding to your request. Within sixty (60) days of receipt of an appeal, we will inform you in writing of any action taken or not taken, including an explanation of our reasons in reaching the decision. If the appeal is denied, you may submit a complaint with the Connecticut Attorney General at https://www.dir.ct.gov/ag/complaint/.
Nevada: If you are a Nevada resident and your request is denied, you may appeal our decision and we will provide the steps to appeal as part of responding to your request. Within forty-five (45) days of receipt of an appeal, we will inform you in writing of any action taken or not taken, including an explanation of our reasons in reaching the decision. If your appeal is not successful, you may submit a complaint with the Nevada Attorney General at https://ag.nv.gov/Complaints/File_Complaint/.
Washington: If you are a Washington resident or located in Washington and your request is denied, you may appeal our decision and we will provide the steps to appeal as part of responding to your request. Within forty-five (45) days of receipt of an appeal, we will inform you in writing of any action taken or not taken, including an explanation of our reasons in reaching the decision. If your appeal is not successful, you may submit a complaint with the Washington State Attorney General at https://www.atg.wa.gov/file-complaint.
Calm uses cookies to understand the way you use our website and help us to improve it, as well as to personalize content and target ads, including by working with third party analytics partners. By clicking "Accept All", you consent to our use of cookies. You can withdraw your consent or learn more information in our Cookie Notice.
