Consumer Health Data Privacy Policy

Effective date: October 25, 2026

This policy explains how FormaChest handles consumer health data, as the Washington My Health My Data Act (RCW 19.373) and Nevada's consumer health data law (NRS 603A.400 to 603A.550) require. It applies to people in Washington and Nevada and, because we treat everyone's health data the same way, to every FormaChest customer and visitor. FormaChest is a trading name of AUGUMENTUM SRL, Str. Ștefan cel Mare nr. 85, Craiova 200129, Romania (registration J2025080503009, tax code 52740885). Questions and requests: support@formachest.com.

The consumer health data we collect

• Quiz answers about your chest and health: who the quiz is for, your age group and sex, how deep and how wide the indentation in your chest is (or your height and build when you do not know its width), how your chest responds to the quiz's self-test, the symptoms you tick, what you have tried before and the approach you prefer, what bothers you most and how much, how much time a day you can give, and the bell size the quiz recommends.
• Photos of your chest, only if you choose to add one, and the AI-generated preview we make from it.
• What you tell us about your chest in calls and chat with our AI assistant, Alex (calls may be recorded and summarized), and in emails with us.
• Your orders and support requests for our products, because buying a vacuum bell can indicate a chest condition, and the progress you share in the check-ins you agree to after a purchase.

Why we collect it and how we use it

• To send you the free guide and the bell size that fits your chest.
• To make the AI preview you ask for: an AI system checks that the photo shows a bare adult chest and finds the indentation, and a second AI system edits the photo to show the chest without it. The preview is an illustration, not a diagnosis or a prediction of your result.
• To answer your questions and to call you back when you ask us to.
• To sell, ship and support the products you buy, and to send the check-ins you agree to.
• To keep our services secure and to meet our legal obligations.

We do not use consumer health data for advertising, we do not sell it, and we do not use it to train AI models.

Where it comes from

From you, when you take the quiz, add a photo, call, chat, email or order. Some of it is created from what you give us: the size recommendation, the AI preview and call summaries.

Who receives it

We do not sell consumer health data, and we do not share it with third parties or affiliates for their own purposes. These service providers process it for us, only on our instructions and under written data processing terms:

• AI providers: Anthropic (the photo check, Alex's answers and call summaries) and Google (the AI preview).
• Hosting: DigitalOcean (our server).
• Email: Brevo (the emails we send) and Google Workspace (our inbox).
• Phone and voice: Twilio (calls), Deepgram (speech to text) and ElevenLabs (Alex's voice).
• Store, payments, shipping and reviews: Shopify, our payment processors, our shipping partners and Judge.me, for orders only.

Photos of your chest go only to Anthropic and Google, and never to anyone else.

How it is processed and kept

• Chest photos and AI previews are stored encrypted on our server, and the result of the automatic photo check is kept in our database on the same server. All of it is deleted 30 days after upload, or at once when you press "Delete my photo" on your guide page; when no preview can be made, the photo is deleted at once. We keep only a resized copy of your photo, without its metadata; a face in the photo is cropped out before it reaches the AI that makes the preview. No person at FormaChest looks at your photos, and our own notice that a photo was processed carries only an internal reference number and the result, never your name, email address or photo.
• Our AI providers keep their own copies only for a limited time: Anthropic deletes what we send within 30 days (longer only if its safety systems flag it), and Google keeps it for up to 55 days only to detect abuse, where only authorized Google staff can review it for that purpose. Neither uses it to train its models.
• Other consumer health data is kept for as long as we need it for the purposes above and to meet our legal obligations, and then deleted.

Your rights

• Know whether we collect, share or sell your consumer health data, and get a copy of it, with a list of every third party and affiliate it was shared with.
• Withdraw your consent at any time. For a chest photo, "Delete my photo" on your guide page (there for as long as the photo is kept, also while the preview is being made) withdraws it and deletes the photo and the preview at once.
• Have your consumer health data deleted. We also tell our service providers to delete it. Data in backup systems is deleted as soon as those backups are overwritten, and no later than six months after we confirm your request.
• Ask us to correct data that is wrong.
• Appeal our answer to any of these requests, and not be treated differently for using these rights.

How to make a request: email support@formachest.com with the subject "Health data request" and say what you want. We may ask you to confirm that the request comes from the email address we hold. We answer within 45 days; if we need more time, we tell you why within those 45 days and answer within 45 more. If we turn down your request, you can appeal by replying with the subject "Health data appeal"; we answer appeals within 45 days. If you are in Washington and we turn down your appeal, you can contact the Washington Attorney General at www.atg.wa.gov.

Tracking by third parties

Our website uses tools from third parties (for example analytics and advertising pixels) that can collect information about your visits over time and across websites. They never receive your quiz answers, chest photos or AI previews.

Changes to this policy

When we change this policy, we post the new version here with a new effective date. If the change is material and we hold your consumer health data, we also email you before it applies.