Privacy Policy

What this policy covers

This policy applies to the ANSO Health website, the waitlist signup, and the early-access research questionnaire. ANSO is a product-discovery and educational effort: it is not therapy, medical care, diagnosis, treatment, or crisis support, and using this site does not create a clinician–patient relationship.

Information we collect

We collect only what we need for MVP research, and only with your consent:

• Questionnaire responses. Your answers about how stress shows up for you (thoughts, emotions, physical signals), habits and behaviors, current tools and practices, familiarity with nervous-system concepts, comfort with AI-supported features, pricing perspectives, and any optional free-text comments you choose to write.
• Contact information — only if you choose to share it. First name, email address, which communications you want to receive, and whether you are open to a short research conversation.
• Waitlist information. Email address, an optional name, and your language preference.
• Technical basics. A cookie that remembers your language choice (anso-lang), and draft answers kept in your browser’s session storage until you submit. Our infrastructure providers process technical data such as IP addresses to operate and secure the service. We do not use advertising trackers, session recording, or behavioral profiling.

How we treat health-related information

Questionnaire responses can describe stress responses, physical signals, emotional patterns, and behaviors. Even where no specific health-privacy law applies to us, we treat these responses as sensitive consumer health data.

That means we collect them only with your affirmative consent, we use them only for the purposes listed below, we do not sell them, and we do not share identifiable responses with anyone other than the service providers that host and secure our systems.

Why we collect this information

We use questionnaire and waitlist information for:

• ANSO product discovery — understanding who ANSO should serve first and when support matters most
• Defining MVP requirements and prioritizing features
• User-experience research
• Aggregated and de-identified analysis
• Identifying potential beta or early-access participants
• Sending the communications you explicitly opted into

We do not use your information for advertising, and we do not sell it.

Consent, and how to withdraw it

Consent is separated so that each choice is genuinely yours:

• Participation. Before starting the questionnaire, you acknowledge that it is product research — not therapy, medical care, diagnosis, treatment, or crisis support.
• Data use. Before any answer is stored, you expressly agree that Core Systems Method, LLC may collect and use your responses for the purposes described above.
• Communications. Receiving email updates is a separate, optional choice. Completing the questionnaire never subscribes you to anything by itself, and every email we send includes a way to unsubscribe.
• Research conversations. Being contacted for a short interview is its own separate, optional choice.

You can withdraw any consent at any time by writing to hello@ansohealth.com. Withdrawing consent also lets you ask us to delete your responses — see “Your rights” below.

Who processes your information

Your responses are stored in a managed database service (Supabase) and the website is hosted on Vercel. Email we send you is delivered through SMTP2GO. These providers process information on our behalf, under their data-processing terms, and only to operate and secure the service.

SMTP2GO only ever receives what an email needs: your name, your email address, and the communication choices you made. Your questionnaire answers are never sent to it — they are stored in a separate record that carries no name or email address.

We do not share identifiable questionnaire responses with advertisers, data brokers, or any other third party. We may share aggregated, de-identified insights — for example, the percentage of respondents who report a pattern — that cannot reasonably identify anyone.

If we are ever required by law to disclose information, we will disclose only what is legally required.

Cookies and analytics

We use one functional cookie (anso-lang) to remember your language. Draft questionnaire answers stay in your browser’s session storage until you submit. We do not use advertising cookies, so no cookie-consent banner is currently required.

Our analytics is privacy-preserving and cookie-free (Vercel Web Analytics plus our own first-party event counts): it measures aggregate page views and funnel events only — for example, how many people start or complete the questionnaire. Questionnaire answers, names, email addresses, and free-text responses are never sent to analytics. We do not use session recording, keystroke capture, or heatmaps.

How long we keep information

• Identifiable questionnaire responses: up to 12 months from collection. After that, they are deleted or converted into genuinely de-identified research data.
• Contact information for people who opted into communications: until you unsubscribe or ask us to delete it.
• Waitlist information: until launch-related communications conclude or you ask us to remove you.

How we protect information

• Encryption in transit and at rest.
• Database access controls with row-level security — the public site has no way to read stored responses.
• Access limited by role and legitimate business need.
• Credentials and database keys kept out of the source code.
• Questionnaire answers and contact details kept out of application logs and analytics.
• Abuse controls on our forms: a hidden field that only automated senders fill in, and a limit on how many submissions one sender can make in a short period. To count submissions we store a salted, irreversible fingerprint of the sending network address — never the address itself — and delete it within hours. It is not used to recognise you, to build a profile, or for any other purpose.

No method of transmission or storage is 100% secure, but we deliberately collect the minimum needed so there is less to protect. If a security incident affects your information, we will notify you and the relevant authorities as required by applicable law.

Your rights

You can ask us at any time to:

• Access a copy of the information we hold about you
• Correct it
• Delete it
• Withdraw any consent you previously gave

Write to hello@ansohealth.com from the email address you used (or describe your submission so we can locate it). We will verify the request and respond within the time required by applicable law. Where state consumer-health privacy laws — such as the Washington My Health My Data Act — apply, we honor the rights they provide.

Children

The site and questionnaire are intended for adults 18 and older. We do not knowingly collect information from anyone under 18. If you believe a minor has submitted responses, contact us and we will delete them.

Where information is processed

ANSO Health is operated from the United States, and information is processed and stored in the United States.

Changes to this policy

If we change this policy, we will update the date at the top of this page. For material changes that affect information already collected, we will ask for consent again where the law requires it.

Contact

Core Systems Method, LLC — ANSO Health. Email: hello@ansohealth.com.