That HRV Guy™
We are That HRV Guy LLC, a Nevada limited liability company. We are the company responsible for this data. Our service providers handle it on our instructions.
Contents
The HRV Coach invites you to talk about your body. About your stress, your sleep, your anxiety, how a hard week is landing in your chest. That is the whole point of it.
Under the laws of several states, including Washington's My Health My Data Act and Nevada's SB370, that kind of information is consumer health data, and it gets stronger protections than ordinary personal information. It does not matter that the information came from you typing it rather than from a device reading it. What matters is what it reveals.
So we are telling you exactly what we do with it.
The consumer health data we collect is:
We do not collect:
Only from you. You type it in.
That includes messages. If you message us about your health on Instagram or by email, that counts too, and the same protections apply.
We do not buy health data. We do not receive it from data brokers, advertisers, or third-party sources. We do not infer it from your browsing behavior. There is exactly one source, and it is you choosing to write something.
To give you coaching that has continuity. That is the entire purpose.
The coach remembers what you told it so that it does not start from zero every time, and so it can reflect your own patterns back to you. Your quiz answers decide which guide you receive and which version of the course you are placed in.
That is it. There is no secondary use.
We do not use your health data to:
We share your consumer health data with service providers, and only so they can do the job we hired them to do. They handle it on our instructions and may not use it for their own purposes.
| Who | Why |
|---|---|
| Origins (theorigins.one) | Runs the coach and the courses. Stores your account, your conversations, your journal entries, your course progress. |
| A third-party AI provider (engaged through Origins) | Generates the coach's responses. Your message is sent to it, and it sends a response back. |
| GoHighLevel | Our CRM and email platform. Holds your quiz segment so we send you the right guide and the right emails. |
| Anthropic (an AI provider we engage directly) | Helps us read and sort inbound messages and draft replies for human review. |
That is the complete list.
We may also disclose it where the law requires, to respond to valid legal process, or where we have a good-faith belief it is necessary to address a credible threat to someone's safety. We disclose only what is reasonably necessary.
Logs, told to you straight. The AI provider keeps short-term safety and abuse-monitoring logs, typically for around 30 days (up to 55 for some models). Those logs then expire on their own schedule. This matters when you ask us to delete your data, and we explain it honestly in Section 7.
We do not sell it. We will not sell it.
Under Washington law, selling consumer health data requires a specific, signed authorization from you. We do not do it at all, so we will never ask you for one. If anyone ever presents you with such a form claiming to be us, it is not us.
We also do not share your health data with advertisers, ad networks, or data brokers, and we do not place advertising tags on the coach.
You can ask us to:
How to ask: email [email protected]. We may need to verify your identity first, which protects you. We will respond within 45 days, and will tell you if we need one 45-day extension.
If we deny your request, you can appeal by emailing [email protected], deliberately a different inbox. We will give you a written answer. If we deny the appeal, you may contact the Washington Attorney General or your state's Attorney General.
We will not treat you differently for exercising any of these rights.
We would rather be precise than reassuring.
When you ask us to delete your health data, we delete it from our active systems, and we direct our service providers to delete it from theirs.
What we cannot do is reach into short-term safety logs and erase them the same day. As described in Section 5, the AI provider holds those for roughly 30 days, and our systems keep backups for a limited period for disaster recovery. Those copies expire on their own schedules and are then gone. We are not going to tell you we can delete something we cannot.
Everything you can see, everything the coach can remember, and everything we can act on is gone when you ask.
We ask for your consent before you use the HRV Coach, on a screen you have to accept before you type anything. That consent covers our collecting your health data for the purpose described in Section 4.
You can withdraw it at any time by emailing [email protected]. If you do, we will stop collecting your health data and delete what we hold, as described in Section 7. The coach will no longer be able to function for you, because remembering you is what it does.
We will ask for separate consent before we ever share your health data for any purpose other than the ones listed in Section 5. We have no plans to.
Access to your health data is restricted to people and service providers who need it to run the Services, and that access is logged. Data is encrypted in transit. Nobody at That HRV Guy reads your coach conversations as a matter of routine.
The one exception, and it exists to protect you: if the coach detects that you may be in crisis, it will show you emergency resources immediately and alert Salim so that a human being knows it happened. The alert does not contain your conversation. It tells him a flag was raised. He can then choose to open it in order to follow up with care. Please see our Privacy Policy (Section 6) for the full picture, and understand that the coach is not an emergency service. If you are in danger, call 911, or call or text 988.
We keep it while your account is active, and for 24 months after it goes inactive, so you can return and the coach still knows you. After that we delete or de-identify it.
You can ask us to delete it sooner, at any time, for any reason or none.
The Services are for adults, 18 and over. We do not knowingly collect health data from anyone under 18.
If we change this policy we will post the new version here with a new effective date, and where the change is significant we will ask for your consent again.