Vet Hub

Consumer Health Data Privacy Policy

Last updated: 2026-10-13 · Version 1.2.0

How Vet Hub handles information about your health and disability status, and the choices you have. This policy adds to our Privacy Policy and does not replace it.

Operated by KAVOD AI LLC, 3049 Getty Way Apt 306, Orlando, FL 32835.

Who this policy covers and why it exists

Vet Hub is a free, bilingual service for U.S. veterans, active-duty service members, their families and caregivers. To match you to benefits, you may tell us things about your health and disability status, such as a VA disability rating.

Some state laws give special protection to "consumer health data": information that identifies a person's past, present or future physical or mental health status. Washington's My Health My Data Act (RCW 19.373) defines the term this way, and Nevada and Connecticut have similar rules. This policy explains how we handle that kind of information. It adds to our Privacy Policy and does not replace it.

We apply this policy to the categories listed in Section 2 for every person who uses Vet Hub, wherever you live, and whether or not a particular law requires it.

We do not sell your information, and we do not share your profile with sponsors.

What consumer health data we collect, and why

You choose what to enter. The profile answers in categories 1 to 3 are optional: the database accepts a blank value for every one of those fields. We ask for your agreement before you can enter the answers in categories 1 and 2 or choose "Health and wellness" as an interest (Section 8). Categories 4 to 7 describe what is recorded when you use the service.

Categories of consumer health data
CategoryWhat it includesWhy we collect it
1. Disability and VA-benefit statusVA disability rating (0 to 100 percent); whether your disability is service-connected; individual unemployability (TDIU); permanent and total; aid and attendance; housebound; VA health-care priority group (1 to 8).To work out which benefits may fit you and to rank them.
2. Service-related health designationsToxic exposure (PACT Act); Camp Lejeune service; medical retirement (including Chapter 61); military sexual trauma (MST) survivor status.The same: some benefits depend on these. An MST answer can only raise a match score, never lower it.
3. Health and wellness interests and the benefits you follow"Health and wellness" as an area of interest; benefits you save (bookmark) or follow, including any benefit in the "Mental health" category.To show your saved list, tailor suggestions, and alert you when a benefit you follow changes.
4. What you search for and viewThe words you type in the benefits search (first 120 characters), the category and state filters, and the pages you open, including benefit pages. When you are signed in these events are attached to your account. Nothing is recorded if you turn analytics off or your browser sends Do Not Track or Global Privacy Control.To understand what veterans need and improve the service. This data stays with Vet Hub and is not sold or shared with advertisers.
5. What you write or attachMessages to the AI assistant, and any image or PDF you attach to one (we keep the file's name, type and size, not its contents); community posts and replies; direct messages; support messages and reports; contact-form messages. If you write about your health in any of these, that text is health information.To provide the feature you used.
6. Crisis-related eventsWhen the assistant shows the Veterans Crisis Line card, your conversation records that this happened (a flag on the message) together with a short note the assistant writes about why. The safety check that runs on your own device when you type a crisis phrase shows the card but does not itself record or send anything.To keep a record that the safety feature worked, so the team can spot-check safety behavior over time.
7. Results we calculate from the aboveA match score or band ("strong match", "possible match", "less likely") for each benefit. When the assistant retrieves matches, those results are saved in your conversation.To show which programs may be relevant to you.

We do not collect precise device location, camera or microphone data, or biometric data.

Where the data comes from

  • From you: the profile and onboarding forms, the assistant, community and support features, and the contact form.
  • From our own calculations: match scores (category 7).
  • Not from VA or any health-care provider. Vet Hub does not connect to VA, to a health-care provider or to an insurer to retrieve your records. The assistant cannot see your VA records.

Who we share it with

We use these providers to run Vet Hub. Each acts on our behalf.

Providers that can receive consumer health data
ProviderWhat it doesWhich of the categories above it can receive
SupabaseDatabase and sign-inEverything stored in your account: categories 1 to 7.
NetlifyHosting and serversYour requests and messages while they travel to our servers, including your IP address, and your device and browser type. Our servers also read your profile answers to work out the matches the assistant shows you.
AnthropicThe AI assistantThe messages you send and the files you attach, and the recent messages in that chat. What the assistant's tools return, for example a list of programs that Vet Hub's rule-based list shows as possibly relevant (a title, summary and link for each), calculated from your profile including your health-related answers. A snapshot of your display name, full name, account email, preferred language, service branch, era, state, veteran status and interests. The "Health and wellness" interest is left out unless you agreed in Section 8. We do not send your disability rating or other category 1 and 2 fields as such, but a match result is calculated from them. Anthropic also receives the text of a post, thread or direct message that someone reports, so an automated reviewer can make a first-pass moderation check.
ResendEmail deliveryYour email address, display name and the text of the emails we send you. An update email about a benefit you follow names that benefit.
Apple Push Notification service and Google Firebase Cloud MessagingMobile alerts, only if you turn them onYour device's push token, a generic notification text, and the in-app link the alert opens, which includes the name of the benefit's page.
Vet Hub staff and contractors who run the serviceOperating and repairing Vet Hub, and handling reports and requestsWhat they need for that task, through the systems above.

Other services we use (bot defense, error monitoring, and sign-in with Google or Apple) do not receive these categories. The Privacy Policy lists them and what each one receives.

What we do not do

  • We do not sell consumer health data or share it for advertising.
  • We do not share your individual profile with sponsors. When you open a sponsor link you leave Vet Hub and that sponsor's practices apply.

How long we keep it

  • Profile health answers (categories 1 and 2), the "Health and wellness" interest, and saved and followed benefits (3): while your account is active; deleted when you delete your account. You can erase the health answers at any time without deleting your account (Profile, Privacy).
  • AI conversations, including crisis events and match results (5, 6, 7): kept in your account until you delete a chat or delete your account. We run no automatic deletion schedule for them.
  • Usage data attached to your account (4): kept for up to 13 months, and deleted with your account.
  • Direct messages: until either person deletes their account, which removes the conversation for both.
  • Community threads and replies: they are deleted when you delete your account. A thread other members replied to stays so their replies are not lost, with its title and text replaced by "[Removed by its author]" and your name removed. You can also delete your own replies in the app at any time.
  • Support tickets and moderation records: support tickets you filed while signed in are deleted when you delete your account, with the email and message in them. Moderation records are kept as trust and safety history, unlinked from your account when you delete it.
  • Record of your health-data consent: a short security record of when you gave or withdrew the separate health-data consent, and which version of it (never your answers), is kept under your account ID for 24 months, including after you delete your account.
  • Encrypted database backups: up to 35 days after the backup is taken. Our other providers keep their own logs and copies for their own periods; deleting your account does not reach into them, and they age out on the providers' schedules.

Your rights

You can:

  1. Confirm and see what consumer health data we hold about you, and get a list of the third parties and affiliates it was shared with. You can see and edit your profile in the app, and you can download a copy of the information in your account from Profile, Privacy. The providers that can receive it are named in Section 4; for their contact details, use the contact page and choose "Privacy request".
  2. Withdraw consent for collection or sharing. You can withdraw your agreement to the health and disability answers, and your agreement to use the AI assistant, in your profile (Profile, Privacy). Withdrawing the assistant stops further messages from being sent to Anthropic; it does not delete earlier chats, which you delete yourself or by deleting your account.
  3. Delete your data. You can erase your health and disability answers in your profile, delete a saved AI chat from your dashboard, delete your account in the app, or ask for deletion without signing in at /legal/delete-account. Deleting your account removes your profile, saved benefits, AI conversations, direct messages and documents.
  4. Appeal. If we refuse a request you may appeal (Section 7).

We do not charge for these requests.

How to make a request

  • In the app: edit your profile; erase your health answers; download your data; delete a chat; withdraw your agreement to the AI assistant; delete your account (Profile, Privacy).
  • Without signing in: request account deletion at /legal/delete-account. We email a link to the address you give; the request goes to our team after you open the link and confirm.
  • For anything else: use the contact page and choose "Privacy request".

We will check that the request is from you. If we cannot confirm it with reasonable effort we may ask for more information.

Timing. We respond without undue delay and within 45 days of receiving the request. If we need more time we may extend once by 45 days and will tell you why within the first 45 days.

Appeal. If we refuse, you can appeal by replying to our decision or by sending a new message through the contact page that begins "Privacy appeal". We answer in writing within 45 days with what we did and why. If we deny the appeal, we will tell you how to contact your state attorney general to file a complaint.

Changes and contact

We may update this policy. The version and date at the top of this page show which text applies.

Questions: use the contact page and choose "Privacy request".

The Veterans Crisis Line is free and confidential. Dial 988 then Press 1, chat online at VeteransCrisisLine.net/Chat, or text 838255.

↑ Back to top