Privacy Policy

Consumer Health Data Notice

Effective Date: October 14, 2026
Last Updated: October 14, 2026

1. Scope and information

This notice is part of Kairos’s privacy disclosures and supplements our general Privacy Policy for information subject to applicable consumer-health privacy laws, including Washington's My Health My Data Act and Nevada's consumer-health privacy law. It applies where those laws cover our handling of your information.

Kairos may process voice recordings and derived speech measurements; wellness-related signals and insights; health and activity information from services you choose to connect; and related account, session, activity, and contextual information that links or helps infer physical or mental health status. Not every speech measurement is consumer health data, but linked health-related inferences may be.

2. Sources and purposes

Information comes from you, voice checks and your use of Kairos, optional connected services, and insights we derive from that information. We use it to provide the features you request, display results and patterns, manage connections, respond to requests, and maintain the service. Research and model improvement involve derived information and permitted context, subject to required consent and other applicable restrictions. Raw recordings are not used for research or model training.

3. Sharing

We disclose the categories above as needed to cloud hosting and processing, authentication, communications, and other service providers operating the Services on our behalf, including Microsoft Azure. We may also disclose information at your direction or with required consent, as permitted or required by law, or in a lawful business transfer. The Privacy Policy describes these disclosures and their purposes. We do not sell consumer health data.

Partners receive combined group-level reports about voice-derived signal changes, not individual signal histories, recordings, or transcripts. A group report is not described as anonymous merely because it omits names. Any sharing of covered consumer health data remains subject to applicable consent and other legal requirements.

4. Your rights and requests

Depending on the law that applies, you may request access to consumer health data, a list of relevant recipients, deletion, or withdrawal of consent for its collection and sharing. Email info@kair-os.com to exercise these rights or appeal a denied request. We may verify your identity and will respond within applicable legal deadlines. Deletion requests will be handled with relevant service providers and recipients as required by law, including applicable backup requirements. Exercising these rights will not result in unlawful discrimination.

If an appeal is denied, you may contact the relevant state attorney general. Washington complaints can be submitted at https://www.atg.wa.gov/file-complaint and Nevada complaints at https://ag.nv.gov/Complaints/File_Complaint/.

Kairos may retain research information only on a permitted basis, including information that meets applicable de-identification requirements. Calling information de-identified does not remove rights that still apply to it.

5. Changes and contact

We will update this notice and provide additional notice or obtain consent where required before materially different processing begins.

Questions, requests, and appeals: info@kair-os.com
Kairos OS, Inc. — New York City, United States