Consumer Health Data Privacy Policy

DRAFT — pending health-tech attorney review.

This policy applies specifically to consumer health data and supplements our general Privacy Policy. It describes how Echelon Seven LLC, operating Temple Protocol, collects, uses, and protects health-related information you choose to share with us. We provide it because such information may be treated as “consumer health data” under state law, including Washington’s My Health My Data Act.

What consumer health data we collect

There are two places on this site where health-related information can reach us, and a third that has been retired. Both live ones are optional — nothing on this site requires you to tell us anything about your health.

• The waitlist interest question. “What would you put to the evidence test first?” You may leave it blank, or choose exactly one of six values: Sleep, Sauna & heat, Zone 2 & training, Fasting, Supplements, or Something else. There is no free-text box, and anything other than those six is rejected before it is stored or sent, so the answer can only ever be one of them. It tells us which protocols to rate first. It records no condition, medication, diagnosis, symptom or measurement, because it structurally cannot.
• Anything you choose to write to us. The contact form and our email address accept free text, so you may write whatever you wish — including, if you choose, something about your health. We do not ask you to, and we do not need you to. Where you do, we treat what you have written under this policy, and we keep it in the correspondence it arrived in rather than moving it into any record about you.
• The concierge intake — retired. For a brief period in June 2026, a concierge request form accepted free-text notes about what you were working toward, and any considerations you chose to mention — including, if you wrote them, medications or conditions. It served a single purpose: to hand-prepare a considered protocol in response to your request and to write back to you, and it was routed only to our own operator inbox. That form has been retired: it is gone from the site, and the address it submitted to no longer exists. Anything received through it while it was open remains covered by this policy and by every right described below.

We ask for nothing else. We request no biometric data, no lab results, and no data from wearables or connected health accounts, and we connect to no such account. We do not derive or infer health data about you: nothing you do on this site is used to draw conclusions about your health, and we run no advertising or cross-site tracking. Our analytics count page views, including views of a protocol page, so that we know which writing is read; a few events also carry a plain label, such as which subject you chose on the contact form. None of it is tied to your name or your address — and your answer to the interest question is never among it.

Why we collect it, and the legal basis

We use the interest answer for a single purpose: to decide which protocols to rate first, and to understand what the people waiting for the library want read. It is never used to target you, to price anything, or to build a profile of you.

Where you write something health-related to us instead — in the contact form, or by email — we use it for one purpose only: to understand your message well enough to answer it. We do not move it into any record about you, we do not use it to decide what to send you, and we answer on method rather than on anything personal you have described. The retired concierge intake worked differently, and its own purpose is stated above: there, what you wrote was read precisely in order to prepare the reply you had asked for.

We collect it only with your consent, given by a clear affirmative act: the question is optional, it is answered by choosing a value that is blank by default, and what happens to your answer is stated beside the question before you send it. You are never asked to consent through a pre-checked box, and consent is not bundled into any other agreement. Leaving the question blank changes nothing else — your place on the list is the same either way.

Where your answer goes, and where it does not

Your answer is sent to our own operator inbox as a notification we read. We send it to no other recipient. Delivering it means it passes through our email provider, which acts on our behalf under contract and, as any mail service does, retains a copy of the message it carried.

In particular, it is not written to the mailing-list record we keep against your email address, and it is not attached to any analytics event — our analytics record that a signup happened, never what was chosen.

We do not sell consumer health data, and we do not share it with advertisers, data brokers, or analytics providers. Should any of this ever need to change, we would seek your separate, explicit consent first, and this page would change before the practice did.

Your rights

You may, at any time, request to access the consumer health data we hold about you, withdraw your consent, or have your data deleted — including a request that we direct any processor acting on our behalf to delete it. If we decline a request, you may appeal. To exercise any of these rights, or to appeal, email hello@templeprotocol.ai. We will respond within the timeframes required by applicable law.

No geofencing

We do not use geofencing around any healthcare facility to collect data or to target advertising or messages.

Contact

Questions about this policy, or about how we handle consumer health data, may be sent to hello@templeprotocol.ai.