Consumer Health Data Privacy Policy

Review draft · September 20, 2026

Confirm the responsible legal entity, provider agreements, and applicable state requirements before publication.

Categories and purposes

The Thalos Life application asks about nicotine use, treatment for heart disease, cancer or diabetes, daily prescription medication, and hospital stays. Date of birth, sex at birth, and identifying details may be associated with these answers. We use information you submit to prepare and process the insurance request you choose to make, maintain the application record, and address related support or privacy requests.

Direct 130 may hold information an authorized agent enters in a case record. Agents must not add unnecessary medical information to a client-name, product, or other free-text field.

Sources

The sources are your application answers and information provided by an agent or representative you authorize. These websites do not request medical records from a provider, access a device’s health app, use location around a healthcare facility, or install session replay to capture health answers.

Recipients and sharing purposes

Application information is handled by authorized service personnel and the providers used to host and store the application, including Vercel and Supabase. Platform and infrastructure providers may support the service under the applicable agreements. A carrier or representative involved in a requested insurance application may receive relevant information only through the applicable application process and authorization. A carrier listing alone does not mean health information has been sent to that carrier.

We do not provide application health answers to advertising pixels, optional analytics, or session-replay services. The current application does not include a sale of health information or health-based advertising. A separate authorization is required for a health-data sale where applicable law requires it; agreement to general website terms is not that authorization.

Your requests

To request access to or deletion of health information, ask about recipients, withdraw an applicable consent, or appeal a request decision, email privacy@thaloslife.com. Identify Thalos LifeDirect 130 and the request type. Do not send health details, your Social Security number, or identity documents in the initial email.

We may need to verify your identity using a proportionate process. We will explain applicable rights, any exception affecting your request, and the relevant appeal or complaint route. Withdrawing information needed to process an application may prevent that application from continuing. Existing insurance and legally required records may be subject to separate retention duties.