Consumer Health Data Privacy Policy

Effective October 31, 2026

This policy explains how Viva Proof, Inc. ("Viva") handles consumer health data under Washington's My Health My Data Act. The only consumer health data Viva collects is Voice ID data.

Consumer health data we collect. If you choose to set up Voice ID: a voice sample (about one minute of you reading aloud); a voiceprint (a numeric voice template) made from it; your interview audio when it is used to update or check that voiceprint; and the voice-match results stored with your interviews.

Where it comes from. From you, through your microphone, when you set up Voice ID and during your Viva interviews.

Why we collect it and how we use it. Only to confirm that the student taking an interview is you, and to flag possible impersonation to your instructor. We collect it only after you agree on the Voice ID screen. We never use it for grading, advertising, profiling or AI training, and we never sell it.

Consumer health data we share, and with whom. Your instructor or school sees the voice-match result for your interviews (for example, "possible impersonation"). We share no consumer health data with any other third party, and Viva has no affiliates. Two providers process it only on our behalf: Render, which computes the voiceprint and keeps nothing afterward, and Supabase, which stores it encrypted.

Your rights and how to use them.

To make a request, write to privacy@vivaproof.com from the email on your Viva account. We reply within 45 days, or tell you within that time if we need up to 45 more. Requests are free, up to twice a year. If you use Viva through your school, we may also tell your school and help it respond.

Appeals. If we decline your request, you can appeal by replying "Appeal" to our answer. We will tell you the outcome in writing within 45 days. If we deny your appeal, you can contact the Washington State Attorney General at atg.wa.gov/file-complaint.