Consumer Health Data Privacy Policy

This Consumer Health Data Privacy Policy is part of the PetHour Privacy Policy and covers personal data that is “consumer health data” under the Washington My Health My Data Act (RCW 19.373), Nevada’s consumer health data law (Senate Bill 370, 2023), and similar state laws. The PetHour™ platform is operated by ITPro Solutions LLC (“PetHour”, “we”, “us”), which is responsible for this data. Words defined in the Privacy Policy mean the same here. PetHour is a pet care marketplace, not a health care provider; this Policy exists because those laws define consumer health data broadly.

• Biometric data from identity verification. Every member verifies their identity with Stripe Identity: Stripe compares the geometry of your face in a selfie with the photo on your government ID. That face data is biometric data. Stripe processes it for us; PetHour never receives or keeps your ID images, your selfie, or any face data — we receive the outcome and the details Stripe confirms from your ID (Privacy Policy, Section 2.2).
• Health information you choose to share about yourself — for example in a message or voice message to another member, or on your profile: an injury, a condition, or an accessibility need that affects how a visit should go.

We do not try to infer anything about your health, and we do not collect information about your attempts to seek health care. Your pets’ health information is about animals, not you, and is covered by the Privacy Policy, Section 2.3. Visit GPS routes record a Caregiver’s walk with your pet; we do not use location to identify health care visits, and we do not set up geofences around places where health care is provided.

• Biometric data: only to verify your identity and to keep duplicate, fake, and fraudulent accounts off PetHour — a safety requirement before booking features unlock.
• Health information you share: only to provide the service you asked for — for example, so the Caregiver you message knows to accommodate you — and, where needed, to handle a dispute, a report of misconduct, or a legal obligation.

We never use consumer health data for advertising, and we never sell it.

From you, when you verify your identity or write to another member; from Stripe, which tells us the result of your verification; and from other members, when they write to you.

• Stripe, Inc. (stripe.com/privacy) — runs identity verification and holds the biometric data, as our service provider. It is the only company that receives your biometric data.
• The members you choose to write to — a message goes to the person you send it to, and a support request to PetHour’s support staff.
• Service providers that process what you write on our behalf — our hosting provider, which runs PetHour’s servers in the United States; IONOS, if the information is in an email we send you; and our AI provider Anthropic, if the information is in a message or visit note that a chat reply idea or a visit summary is written from, unless you or the other person has switched AI off (Privacy Policy, Section 2.18). They may use it only to provide their services to PetHour; Anthropic does not use it to train models.
• Authorities, where the law requires it or to protect someone’s safety (Privacy Policy, Section 4).
• A buyer or successor, if PetHour’s business is transferred, under the same protections (Privacy Policy, Section 4).

PetHour has no affiliates that receive consumer health data. You can ask us for the list of the third parties we have shared your consumer health data with, and how to contact them (Section 7).

We collect biometric data only after you give a separate written consent on the verification page, which names the data, why it is used, who receives it, how long it is kept, and how to withdraw. We record that consent (Privacy Policy, Section 2.2). Health information you choose to share is used only to provide the service you asked for. We would need your separate signed authorization to sell consumer health data; we do not sell it.

Whether or not you live in Washington or Nevada, you can:

• Confirm and access — ask whether we collect, share, or sell your consumer health data, get a copy of it, and get a list of the third parties and affiliates we have shared it with, with their contact details.
• Delete — ask us to delete it. We delete it from our systems and tell our service providers to delete it from theirs. For biometric data that means having Stripe redact every identity verification you started; for health details in your messages, we erase the content of every message you sent (other members see “Message removed”), and we edit your profile with you. You don’t need to delete your account to ask.
• Withdraw consent — withdraw your biometric consent at any time. Your verification then ends, Stripe deletes the biometric data, and booking features stay locked until you verify again.
• Ask us to stop collecting or sharing it (Nevada).

How to make a request. Email support@pethour.app with the subject “Consumer health data request”, or write to the address in Section 9. You can also download your data or delete your account yourself in the app (Privacy Policy, Section 7). We verify that a request comes from you, and we respond within 45 days; if we need more time and the law allows it, we tell you why within those 45 days and respond within 45 more. Requests are free.

Appeals. If we decline your request, we tell you why. You can appeal by replying, or by emailing support@pethour.app with the subject “Consumer health data appeal”; we answer within 45 days and explain the outcome. If you are not satisfied, Washington residents can contact the Washington State Attorney General at www.atg.wa.gov/file-complaint, and Nevada residents the Nevada Attorney General at ag.nv.gov.

We will not treat you differently for exercising these rights, except that withdrawing the biometric consent ends the identity verification that booking features need.

Stripe deletes biometric data when you delete your account, when you withdraw your consent, or 12 months after your last interaction with PetHour, whichever comes first. Health information inside messages follows the message retention period (24 months after the booking or conversation ends) unless you ask us to erase it sooner or delete your account, which erases the messages you sent; inside visit notes it follows the visit media period (12 months after the visit) — see the Privacy Policy, Section 6.

Questions or requests about this Policy: support@pethour.app

By mail: ITPro Solutions LLC, 1639 Sunstone Dr, Tysons, VA 22102, United States.