Consumer health data

Last updated: 27 October 2026 This policy is for consumers in Washington State, and for anyone covered by similar laws, such as those of Nevada and Connecticut. It adds to our Privacy Policy. Vala is made by Olorin Technologies LLC.

What you write in Vala, and what Vala’s AI writes about it, can reveal your past, present or future physical or mental health: journal entries, dreams and the conversations about them, inner-dialogue sessions, meditation records, your answers each morning about whether you dreamed, your bedtime intentions and what night mode did, and the readings, tags and replies the AI generates from them, including what they infer. If you connect Apple Health or Health Connect, also your sleep: when you slept and the time in each sleep stage.

Only to provide your journal and the features you ask for: keeping your entries, showing them to you, reading, illustrating and exploring a dream when you ask, keeping your meditation records and nights, and showing you your sleep and timing night mode’s alarm with it; and to keep Vala secure. We never use it for advertising, and we never sell it.

From you, as you write; from the AI services that generate readings and replies from it at your request; and, if you connect them, from Apple Health or Health Connect on your phone, which hold the sleep your watch, ring or phone recorded.

Only processors that act on our behalf to run the features you use: Supabase, which hosts our database and files; and, when you use an AI feature and have allowed it, the AI service that produces the result (Anthropic, Google, OpenAI, Together AI or xAI). Your sleep goes to Supabase alone: it never reaches an AI service. We have no affiliates that receive it. We would disclose it further only where the law requires.

• Confirm whether we collect or share your consumer health data, and see it: everything you wrote is in the app, and Export, in your settings, gives you a copy. Ask us and we will also send the list of the processors that received it. • Delete it: Privacy → Delete my account erases it from our live systems at once. Any copy in a backup is deleted within six months. • Withdraw consent: turn the AI services off under Privacy at any time, and disconnect your sleep under Tonight → Sleep, which also deletes the nights Vala synced. Keeping your journal is what Vala does, so withdrawing consent to that means deleting your account. We never treat you differently for using these rights.

Use the app, or email support@olorin.store from the address on your account. We answer within 45 days, and if we need 45 more we tell you why within the first 45. If we refuse a request, you can appeal by replying to our answer with “Appeal” in the subject. We answer an appeal within 45 days. If we turn it down, you can complain to the Washington State Attorney General at atg.wa.gov/file-complaint.