Clarity, care, and choice
Consumer health data privacy
Effective and last updated October 24, 2026
This separate notice covers health-related and other sensitive information that may be included in the memories you choose to store or the community messages you choose to submit. It supplements the Privacy disclosure. Where Hope Holds is managed by Blake Kennedy; use the Privacy center to contact the operator.
Categories, sources, and purposes
You may voluntarily provide descriptions of grief, emotional wellbeing, symptoms, diagnoses, treatment, or other health experiences in journals, tributes, community messages, captions, audio, or keepsakes. Family and religious information, names, and dates may accompany those experiences. We receive this information from what you deliberately type, upload, or save; an obituary preview you request may contain information from its publisher. We do not connect medical records, fitness devices, or health apps, create biometric identity templates, infer a diagnosis, or request precise location or health-facility geofencing.
Optional memory information is used to store, organize, display, export, and remove your memories and protect the service. Community information is used to moderate and display the specific submission you choose to share. We do not use this information for advertising, data sales, health profiling, AI analysis, or determining eligibility for health services.
Your separate choices
Before adding or changing private memories, enable optional storage in the Privacy center. The unchecked choice specifically describes potential health, emotional, and religious information and the purpose of processing it. You can leave storage off and use public readings or, after acknowledging the terms and adult eligibility, member community features. Turning storage off is available in the same center and immediately prevents further private-memory uploads and changes. Existing information remains available to download or delete; withdrawal alone does not erase it.
Community sharing is a separate affirmative choice on each post or reply. You choose to disclose that submission, including any sensitive information it contains, to moderators and, if approved, signed-in members. Do not post another living person’s sensitive information without appropriate permission. Private memories are not automatically shared on the board.
Recipients and disclosures
The operator uses OpenAI Sites/Cloudflare hosting and storage and Supabase authentication, with configured transactional email delivery providers where account messages are needed. These service providers process information to provide and secure the service. Private memory contents are not included in account emails. Approved community submissions are disclosed to signed-in members; pending content and reports are available to the moderator as described in the main privacy notice. We do not sell consumer health data or authorize advertising use. Applicable legal requirements may require limited disclosure. External previews and links have the separate choices described in the main notice.
Access, withdrawal, deletion, recipients, and appeal
Use the Privacy center to withdraw future memory collection, download text/metadata, request a copy of health-related information or recipient details, correct information, request sensitive-data or account deletion, or appeal a decision. You may submit a request without an account; verification can be required before disclosure or deletion. Individual item delete controls are also available. The operator aims to respond within 30 days and must meet the deadlines applicable to your request, explain any lawful extension or denial, and provide an appeal response. Washington consumers may also complain to the Washington Attorney General; residents elsewhere may contact their own state regulator.
A verified deletion request includes applicable directions to processors and handling of archives/backups under the relevant law. Where Washington’s consumer-health law applies, any permitted archive/backup deletion delay may not exceed six months after authentication of the request. Necessary, narrow legal exceptions must be assessed and explained. The current self-service export includes text, metadata, and authenticated original-file links; it does not bundle media bytes into one archive.
Important limits
Accounts are for U.S. adults age 18 or older. This memorial and peer-support service does not provide clinical care or emergency response and does not claim HIPAA certification. Whether particular health-privacy, breach-notification, or other laws apply depends on the operator’s activities and legal circumstances. Contact the operator through the request form about these practices or a concern.