Consumer Health Data

Consumer Health Data Privacy Policy

Health-related data, sources, purposes, disclosures and privacy choices for Xelora's adults-only service.

Legal, privacy, and Xelora support contact details are not yet available. They will be published here before public launch. Legal Portal

Updated October 29, 2026 5 sections Xelora legal

Section 1

Consumer health data covered by this policy

This policy describes how Xelora handles consumer health data in its adults-only, direct-to-consumer wellbeing and reflection service. It supplements our general Privacy Policy.

Top

Consumer health data can include information that identifies or can reasonably be linked to you and reveals physical or mental health status, including health-related inferences. State consumer-health laws can protect this information even when HIPAA does not apply.
Xelora provides reflection and wellbeing tools. It is not an emergency service or a substitute for a licensed healthcare professional.

Section 2

Categories collected and their sources

Top

Information you provide: health-related content in chats, journals, moods, check-ins, assessments, goals, coping or safety plans, guided modules, uploaded material, and support requests. It may include symptoms, feelings, sleep, stress, personal circumstances, and care-related information you choose to disclose.
Information generated through requested features: AI replies, summaries, memory notes, wellbeing or sentiment labels, progress records, and generated voice replies. Inferences may be inaccurate; they are not clinical diagnoses.
Information associated with those records: account identifiers and contact details, language and voice preferences, timestamps, and technical information used to associate, deliver, secure, or troubleshoot your requested features.
Sources are your submissions and settings, your use of the service, Xelora's processing of that information, and the AI or speech providers generating the features you request. Information you include about other people may also appear in your submissions.

Section 3

Why we collect and use consumer health data

Top

To provide the features you request: respond to chats, remember relevant context, store and display journals and moods, generate reflections and progress views, and produce speech when you enable voice replies.
To maintain account access and privacy controls, secure and troubleshoot those features, address abuse or serious safety risks, and comply with applicable legal obligations.
We collect or share consumer health data only with the consent required by applicable law or to the extent an applicable exception permits, including processing necessary to provide a product or service you request. Accepting general terms is not a substitute for separate consent when it is required.
We do not use consumer health data for targeted advertising, sell it, or train our own AI models on it. This statement does not establish the retention or training settings of downstream providers.

Section 4

Categories disclosed and recipients

Top

Hosting, database, storage and infrastructure processors can receive the records and associated account or technical data needed to host, store, protect and operate your requested features.
AI processing can send your message and relevant history, memory or other selected context to OpenRouter and the downstream model host serving the request. Other configured AI integrations may use OpenAI or NVIDIA. These providers can generate replies and health-related inferences.
When voice replies are enabled, ElevenLabs receives the reply text and selected voice settings to generate audio. Generated audio is associated with your account and stored by Xelora.
Support and security service providers may process relevant records when needed to resolve a request or protect the service. A disclosure required by law or otherwise permitted by applicable law is assessed for that specific purpose.
Provider handling depends on the applicable service agreement and configuration. This policy does not promise universal zero retention. Xelora does not share consumer health data with affiliates for their independent use or with advertisers for targeted advertising.
If you choose to post health-related information in a public community feature, other users and visitors may see it. Public disclosure is different from keeping content in your private chat or journal.

Section 5

Your choices and consumer health data rights

Top

Depending on applicable law, you may request confirmation of collection or sharing, access to your consumer health data and required recipient information, withdrawal of consent, and deletion. You may also have a right to appeal a denied request.
Use Export your data in the web app for a portable copy of available account records and media. Chat and memory deletion controls and account deletion are also available. An export does not include every provider-held copy or record subject to a lawful access exception.
Turning off voice replies stops new automatic voice generation. It does not erase previously generated audio or information already sent to a provider. For withdrawal of consent beyond the available controls, send a privacy request using the contact below. A feature may no longer be available if processing is necessary to deliver it.
Send an access, deletion, withdrawal, recipient-list, or appeal request to the legal contact address (pending publication). Specify the request and an account identifier; do not send your password or additional health details. We may request information needed to verify your identity or an authorized representative's authority.
Requests are handled within the time required by applicable law. Applicable deletion duties can extend to processors and backup or archived copies; lawful exceptions and permitted backup-deletion schedules may apply. We will explain a denial and available appeal options. We do not unlawfully discriminate for exercising privacy rights.

Read the rest of the legal stack.

These pages are designed to work together. Privacy explains data handling, and Terms explains product use.

Open

Privacy Policy

General account, security, retention and privacy information.