Consumer Health Data Privacy Policy

This Consumer Health Data Privacy Policy (“CHD Privacy Policy”) supplements the general Ommpo Privacy Policy and applies strictly to the collection, use, and protection of "Consumer Health Data" collected through Ommpo Health and Hey Hiro! by Ommpo in compliance with applicable state privacy legislation (including Washington's My Health My Data Act, Nevada's SB 370, and related state health data frameworks).

Definition of Consumer Health Data

For the purposes of this policy, Consumer Health Data means any personal information that is linked or reasonably linkable to a consumer and that identifies the consumer’s past, present, or future physical or mental health status, health conditions, clinical diagnoses, treatment history, or diagnostic requests.

Categories of Consumer Health Data We Collect

When you utilize Ommpo Health or interact with Hey Hiro! health navigation tools, we may collect the following categories of Consumer Health Data:

Health Navigation & Self-Pay Inquiries: Records of requested urgent care pricing research, clinic choices, and appointment navigation notes;
Medical Bills & Invoices Uploaded for Audit/Advocacy: Itemized charges, hospital names, treatment descriptions, and diagnostic codes included on uploaded medical bills;
Symptom & Triage Interactions: Information you voluntarily provide during 24/7 virtual triage chats, nursing consults, or intake health profile questionnaires;
Pet Parent Health Inquiries: Health notes provided when coordinating family healthcare safety nets alongside pet care memberships.

Sources of Consumer Health Data

We collect Consumer Health Data directly from you when you:

Complete registration or health profiles on Ommpo Health or Hey Hiro!;
Upload medical or veterinary bills and receipts for audit, advocacy, or cash reimbursement;
Chat with 24/7 telehealth nurses or human Care Navigators;
Complete interactive wellness guides or triage assessments.

Purpose of Collection and Use

We collect and process Consumer Health Data exclusively to deliver direct-to-consumer health navigation, bill advocacy, and cash reimbursement services, specifically:

Researching self-pay pricing and directing members to affordable urgent care clinics;
Auditing medical bills for line-item inflation and negotiating cash-pay discounts;
Processing discretionary cash reimbursements under enrolled membership tier limits;
Providing 24/7 virtual triage guidance.

WE DO NOT SELL, RENT, OR TRADE CONSUMER HEALTH DATA, NOR DO WE SHARE IT WITH THIRD-PARTY ADVERTISERS OR DATA BROKERS FOR DATA MONETIZATION.

Third Parties with Whom We Share Health Data

Consumer Health Data is shared strictly on a need-to-know basis to fulfill member-requested services:

Attending Medical Clinics & Hospitals: To confirm bill authenticity, negotiate self-pay rates, and verify payment settlements on your behalf;
HIPAA-Compliant / Encrypted Infrastructure Partners: Secure cloud storage and encrypted messaging platforms supporting our Care Navigators and telehealth nurses.

Your Rights Regarding Consumer Health Data

Under applicable state health privacy laws, you possess specific rights:

Right to Confirm & Access: You have the right to confirm whether we are processing your Consumer Health Data and request access to such data, including a list of third parties with whom data was shared.
Right to Delete: You have the right to request the permanent deletion of your Consumer Health Data from our active systems.
Right to Withdraw Consent: Where processing relies on your consent, you may withdraw consent at any time without affecting prior lawful processing.