Consumer Health Data Privacy Policy

Effective date: 24 November 2026

Mahina Labs, LLC operates Skies. This policy explains how we handle consumer health data under Washington’s My Health My Data Act and Nevada’s consumer health data law. Consumer health data means information linked or reasonably linkable to you that reveals physical or mental health. Our general Privacy Policy covers other information.

1. Categories and sources

Chat messages and support emails may describe symptoms, conditions, treatment, disability, grief, emotional distress or other health matters. AI answers and safety signals may include health-related information or inferences. Online Chat can include up to four recent completed exchanges from the same conversation, including when you resume a saved chat.

An IP address, requested page or recording, and related technical records may reveal a health interest when connected with health-related content. Optional usage events may reveal use of prayer or listening features; uploads exclude message text, crisis indicators and sleep-or-worry session choices.

Sources are information you provide, your device’s requests and usage events you choose to share, and AI processing of your Chat request. Pray for me and guided prayers prepare their text on your phone and do not send your prayer request to OpenAI. Prayers requested through online Chat follow the Chat rules.

2. Purposes and recipients

We use this information to provide requested answers, support and content, operate and protect the service, and meet legal duties. With your permission, optional usage records help us understand and improve the app.

Cloudflare handles Chat requests, website and audio delivery, usage records and network security. OpenAI receives online Chat content, recent exchanges, related sources, generated answers, checking material and safety signals. Google Workspace handles support emails and attachments. Providers may use subcontractors and process information for their own security or legal purposes under their terms. Hosting-account administrators may also have access to service records. When you use our app or website, Cloudflare may collect network and request information over time and across websites and services that use Cloudflare. Requests for health-related pages or recordings may reveal health interests, so this information may be consumer health data.

We do not sell consumer health data or use it for targeted advertising. We do not authorize affiliates to use it for their own purposes. We do not use the app to track health-related activity across other companies’ apps and websites.

3. Permission and retention

Before online Chat sends your message, the app asks separately for permission to process the described information and share it with Cloudflare and OpenAI. Turn off Allow online Chat in Settings > Privacy & data to stop future sends. Share usage data is a separate optional setting. Withdrawing permission does not recall information already sent.

The Privacy Policy at https://skiesbible.com/privacy/ explains retention by data type and provider, including OpenAI’s abuse-monitoring retention and exceptions, Cloudflare’s network records, saved app records and support email. Our Chat server does not keep a conversation database. Deleting local app data does not erase provider copies; use the request process below.

4. Your rights and requests

Email support@mahinalabs.com with “Health data request” to:

• Ask whether we collect, share or sell your consumer health data. We do not sell it.
• Access your data and obtain a list of every third party and affiliate that received it, with contact details.
• Ask us to correct inaccurate health data.
• Withdraw consent to collection or sharing.
• Request deletion, including required deletion by providers and other recipients.

We use only information reasonably needed to verify your request or an authorized agent’s authority. We will explain any exception or records we cannot identify because there is no account. You do not need to send your whole chat history or data export to start a request. We will not discriminate against you for exercising these rights.

We respond within 45 days after receiving your request, or sooner where the law requires. If one additional 45-day period is permitted and needed, we explain why within the first 45 days. Nevada deletion and required onward notices are handled within 30 days after authentication of the request. Where the law permits delayed deletion from backups, deletion is completed within six months of authentication. These periods do not extend a shorter deadline that applies to a particular request. Our privacy-request process is free.

If we refuse a request, reply “Appeal.” We respond in writing within 45 days after receiving your appeal, explain our decision, and provide the relevant attorney general’s complaint route if we deny it.

5. Changes and contact

We will post changes here with a new effective date. For material changes, we will display a notice in the app and on our website before the change takes effect. Before collecting, using or sharing health data in a new way that requires consent, we will explain the change and ask again.

Mahina Labs, LLC Miami, Florida Email: support@mahinalabs.com