How NurtureCanvas handles consumer health data.

This separate Consumer Health Data Privacy Policy describes how Anchor & Sail Psychological Services LLC, operator of NurtureCanvas, collects, uses, processes, and shares consumer health data. It also explains the rights available to consumers and authorized representatives.

Categories of consumer health data we collect

At your direction, NurtureCanvas may collect information linked or reasonably linkable to a person that identifies or relates to past, present, or future physical or mental health. Categories include health conditions, symptoms, observations, behaviors, treatments and interventions, medication and pharmacy information, appointments and providers, accessibility needs, allergies and sensitivities, social or family context, questions, care instructions, and health-related content within uploaded documents. Account identifiers, dates of birth, care-profile identifiers, and technical records may be consumer health data when linked to a person’s use of care services.

Sources of consumer health data

We collect consumer health data directly from the adult account owner through information they type, select, or upload. The account owner may enter information received from the person receiving care, an authorized caregiver, a provider, a school, an agency, or a document, but NurtureCanvas does not independently connect to those sources. We do not obtain consumer health data from data brokers, advertising networks, precise geolocation, device sensors, or unrelated applications.

Why and how we process it

We collect and process consumer health data only to provide and secure the service the account owner requests: storing and retrieving private care profiles; organizing timelines, medications, appointments, contacts, and documents; producing user-directed, user-reviewed briefs and handoffs; synchronizing records; honoring export, correction, and deletion requests; preventing abuse; troubleshooting; and providing support. We do not process it for advertising, sale, health inferences beyond the information the user supplies, diagnosis, treatment recommendations, risk scoring, insurance or employment eligibility, or automated decision-making.

Categories we share and recipients

We share account identifiers, care content, uploaded documents, and necessary technical information with processors only to deliver and secure NurtureCanvas. Current processor categories and recipients are: authentication and application-delivery services provided through OpenAI’s ChatGPT sign-in and Sites services; cloud network, database, and object-storage services provided through Cloudflare infrastructure; and support professionals who require access to resolve a user-requested or security issue. Stripe receives account and transaction information needed for billing but does not receive the contents of care profiles or uploaded care documents from NurtureCanvas. We have no affiliate with which we share consumer health data.

We may also disclose specific information when you direct us to do so, when needed to protect users or the service, in a corporate transaction where the recipient assumes applicable obligations, or when required by law. NurtureCanvas does not automatically disclose care content to care-circle contacts.

No sale or advertising use

We do not sell consumer health data or exchange it for money or other valuable consideration. We do not share it for targeted advertising. A third party may not collect consumer health data through NurtureCanvas over time and across unrelated websites or online services.

Your consumer health data rights

Subject to applicable law and appropriate identity or authority verification, you may ask us to:

• confirm whether we collect, share, or sell consumer health data and provide access to it;
• provide a list of processors, third parties, or affiliates that received it;
• correct consumer health data you control in the service;
• withdraw consent and ask us to stop future collection or sharing; or
• delete consumer health data from our active systems and direct applicable processors to delete it.

You can review and correct care information, export a structured copy, and delete saved records and documents in NurtureCanvas Settings. You may also submit a request to info@sailpsych.com with “Consumer health data request” in the subject line. We may authenticate you through the signed-in account and request evidence of authority to act for another person. If we deny a request, you may appeal by replying with “Consumer health data appeal.” We will not unlawfully discriminate against you for exercising a right.

Withdrawal and deletion

Withdrawing consent does not affect processing that occurred before withdrawal. Because consumer health data is necessary to provide NurtureCanvas’s core care-record features, asking us to stop future collection may require deletion or closure of the care account. Deletion removes data from active product systems; limited copies may remain temporarily in protected backups or logs where reasonably necessary for security, fraud prevention, legal compliance, or restoration integrity, and will not be used for a new purpose.

Policy changes

We will post this policy’s updated effective date and provide an additional notice in the service or by email for material changes. Before collecting, using, or sharing a new category of consumer health data, or using existing data for a new purpose not described here, we will provide the disclosure and obtain affirmative consent when required.

Contact

Submit a request or ask a question by contacting Anchor & Sail Psychological Services LLC at info@sailpsych.com. Effective August 12, 2026.