Consumer Health Data Privacy Policy

This Consumer Health Data Privacy Policy explains how Record System, Inc., doing business as Quilia ("Quilia", "we", "us"), handles consumer health data. It applies to residents of Washington under the My Health My Data Act and to residents of Nevada under Chapter 603A of the Nevada Revised Statutes, and we apply it to everyone who uses the Quilia App.

This policy is specific to consumer health data. Everything else about how we handle your information is in our Privacy Policy, which this policy supplements rather than replaces.

We have never sold consumer health data, and we do not sell it.

Who this policy is about

Quilia is used by law firms to work with their clients. If you are a client of a law firm that uses Quilia, your law firm decides what goes in your case file and how your case is handled. We provide the software. This policy describes what we do with your consumer health data as the operator of that software.

What consumer health data we collect

Consumer health data is information that identifies your past, present, or future physical or mental health status. In the Quilia App, that can include:

• Health and treatment information you enter. Injuries and symptoms, pain levels, body areas affected, treatment updates, medications, appointments with medical providers, and how your recovery is progressing.
• Documents and images you upload. Medical records, bills, and photographs of injuries, along with information extracted from them.
• The identity of your medical providers. Which doctors, clinics, hospitals, or therapists are treating you in connection with your case.
• Location information, only if you turn it on. If you enable provider visit recognition, location information used to determine that you arrived at a medical provider listed on your case. This feature is off unless you turn it on, and it is described in full below.

Why we collect it

We collect consumer health data for one reason: so that your legal team can document your treatment and your injuries as part of your legal case. That is what the Quilia App is for. We do not use consumer health data for advertising or marketing, we do not use it to build profiles, we do not use it to train artificial intelligence models, and we do not use it for any purpose unrelated to your case.

Where it comes from

We collect consumer health data from you directly through the App, from your device where you have turned on a feature that uses it, from your law firm and the case management system your law firm uses, and from documents provided to us by you or your legal team.

Provider visit recognition and location

The Quilia App can recognize when you arrive at a medical provider listed on your case, so that the visit is recorded without you having to remember to enter it. This feature is off until you turn it on.

Before any location information is collected, the App explains what it would do and asks for your agreement in two separate steps: once for collecting location information to recognize your provider visits, and separately for adding the resulting visit records to the case file your legal team can see. Neither agreement is bundled into our Terms of Service, our End User License Agreement, or any other document. You then also grant location permission through your device. If you decline any of these steps, no location information is collected.

Your location is compared only against the medical providers already listed on your case. What we keep is the visit itself, meaning that you arrived at a named provider on a given date and time. We do not keep a trail of your movements between appointments, and location that does not match a provider on your case is not recorded.

You may withdraw either agreement at any time in the App, and you may withdraw location permission at any time in your device settings. Withdrawing is as straightforward as granting. Withdrawal stops further collection immediately, though it does not by itself remove visits already recorded on your case file.

Who we share it with

Your legal team. Consumer health data in your case file is visible to the law firm representing you and the staff at that firm who are assigned to your case. This is the purpose of the App, and it happens because you and your law firm have chosen to use Quilia to work on your case together.

Service providers acting on our behalf. We use a small number of vendors to operate the platform, including cloud hosting and database providers, artificial intelligence services used to read and classify documents uploaded to your case, and messaging and notification delivery providers. These vendors are contractually restricted to processing data on our instructions and for no purpose of their own.

When the law requires it. We may disclose consumer health data where we are legally compelled to do so, as described in our Privacy Policy.

We do not share consumer health data with advertisers, advertising networks, data brokers, or analytics providers, and we do not share it with affiliates.

Your rights

If you are a Washington or Nevada resident, you have the right to:

• Confirm and access. Confirm whether we collect, share, or sell your consumer health data, and access that data, including a list of the third parties with whom we have shared it.
• Withdraw consent. Withdraw your agreement to our collection of your consumer health data, and separately to our sharing of it.
• Delete. Request that we delete your consumer health data.

To exercise any of these rights, contact us. We will respond within the time the law allows. We may need to verify your identity before acting on a request, and we will not treat you differently for exercising these rights.

One thing to understand about deletion: your case file belongs to the legal matter between you and your law firm, and your firm may have professional and legal obligations to retain it. If you ask us to delete consumer health data that is part of an active case file, we will tell you what we can delete, what your firm controls, and who to speak to about the rest.

If we deny your request, you may appeal by contacting us again and saying that you are appealing. Washington residents may also file a complaint with the Washington State Attorney General. Nevada residents may file a complaint with the Nevada Attorney General.

How we protect it

Consumer health data is stored with the same technical and organizational safeguards as the rest of your case data, including access controls that limit it to your own legal team, encryption, and restrictions on employee access. Our general security practices are described in our Privacy Policy.

Changes to this policy

If we change the categories of consumer health data we collect, why we collect it, or who we share it with, we will update this policy before the change takes effect, and we will obtain your agreement again where the law requires it.

Contact us

If you have questions about this policy or want to exercise a right described in it, contact us, or write to:
Record System, Inc.
DBA Quilia
817 S Main St,
Las Vegas, NV 89101
United States