This notice is separate from and supplements the MystiCall Privacy Policy.
Consumer Health Data Privacy Notice
Last updated: September 9, 2026
This notice supplements the MystiCall Privacy Policy for consumer health data governed by Washington State’s My Health My Data Act where applicable.
MystiCall is not a medical or healthcare service. However, users may voluntarily discuss personal matters in open-ended conversations that could constitute “consumer health data” under Washington law.
Categories that may be collected
Depending on what a user chooses to discuss, data may include information relating to:
- mental or emotional state;
- sexual or reproductive matters;
- symptoms or health experiences voluntarily mentioned by the user;
- other information Washington law defines as consumer health data;
- inferences generated from such information when necessary to provide the requested conversation.
MystiCall does not require this information to create an account.
Sources
Consumer health data may come directly from:
- the user’s text input;
- the user’s voice input/transcript;
- contextual information the user asks MystiCall to remember.
Purposes
We may use this information only as necessary to:
- provide the interaction requested by the user;
- maintain user-selected personalization/continuity;
- secure/troubleshoot the Service;
- comply with law.
MystiCall does not use this data to provide medical diagnosis or treatment.
Sharing / processors
To provide requested AI features, data may be processed by contracted service providers such as:
- OpenAI;
- ElevenLabs;
- Supabase — account authentication and account records; Railway and its infrastructure providers — application hosting and database;
- email and support providers, if a user chooses to include health-related information in a support request. RevenueCat, Sentry and Expo are not intended to receive the substance of user conversations.
We do not sell consumer health data.
Rights
Where Washington law applies, a consumer may have rights to:
- confirm whether consumer health data is collected/shared/sold;
- access the data;
- withdraw consent where consent is the legal basis;
- request deletion;
- receive information regarding relevant third parties/affiliates;
- appeal a refusal.
Submit requests to:
hello@mysticall.ai
or through the account-deletion/privacy controls available in MystiCall.
We may verify identity as permitted by law.
Changes in collection/use
We will not collect, use or share additional categories of consumer health data for a materially new purpose requiring consent without providing the required disclosure/consent first.
Contact
Callsy SAS 58 rue de Monceau 75008 Paris, France hello@mysticall.ai