This policy is for people in Washington State (under the My Health My Data Act), Nevada and other US states with similar consumer health data laws. It explains how Ally Lama handles “consumer health data”: information that identifies your past, present or future physical or mental health. Our main Privacy Policy covers everything else.
Ally Lama is provided by Tarun Prajapat, a sole trader based in the United Kingdom (“we”, “us”). Contact: support@allylama.com, or write to Tarun Prajapat (Ally Lama), Suite RA01, 195–197 Wood Street, London E17 3NU, United Kingdom.
1. The health data we collect, and why
Ally Lama is not a health app and doesn’t ask about your health. But in your messages you may choose to tell Ally Lama about your health, feelings or mental health. That can be consumer health data. We collect it:
- To reply to you: your messages are sent to our AI providers so Ally Lama can write a reply, and our AI partner Dify keeps the conversation history, which is deleted automatically 90 days after your last message in that conversation.
- To keep you safe: our server checks each message as it passes through for signs of suicide or self-harm, so helplines can be shown. We don’t store your message for this.
- To review reports: if you report one of Ally Lama’s replies, the report includes that reply and the message it answered.
We don’t try to work out your health from other information, we don’t collect location, biometric or genetic data, and we never use health data for advertising.
2. Your consent
From app version 2.0.3, before your first chat the app asks for your clear permission for personal topics, including your health, to be processed to create Ally Lama’s replies. You can withdraw it at any time in the app’s Settings. Ally Lama then stops replying to your messages until you agree again.
3. Where it comes from
Only from you: what you type or say to Ally Lama, and any report you send.
4. Who we share it with
We don’t sell consumer health data, and we don’t share it with anyone for their own purposes. These service providers process it for us, only to provide Ally Lama, under contract:
- Dify (LangGenius, Inc.): runs Ally Lama’s conversations and stores the conversation history (for 90 days after your last message).
- Anthropic: the AI model that writes Ally Lama’s replies.
- Vercel: hosts our server, which passes messages to the AI (messages aren’t stored there).
- Google Firebase: stores reports you choose to send.
- ElevenLabs: turns Ally Lama’s replies into speech. It receives Ally Lama’s reply, which may refer to what you said.
We have no affiliates. We may disclose information if the law requires it.
5. Your rights and how to use them
You can ask us to:
- confirm whether we collect, share or sell your consumer health data, and give you access to it;
- give you a list of all the third parties and affiliates we have shared it with, with an email address or web page you can use to contact them;
- delete it, including copies held by our service providers (we tell them to delete it too); and
- stop processing it, by withdrawing your consent.
Email support@allylama.com with the subject “Health data request”, ideally from your account email, or erase your account in the app (Settings → Account → Erase My Account). We will check your identity, answer within 45 days (we’ll tell you if we need up to 45 more days), and won’t charge you or treat you differently for asking. If we turn down your request, you can ask us to look again by replying to our answer; if you’re still unhappy, you can contact the Attorney General in your state.