Consumer Consent
Anomaly Health Inc.
Effective Date: February 9, 2026
Version: 1.0.3
Company: Anomaly Health Inc. ("Anomaly," "we," "us")
Contact: hello@anomaly.health | privacy@anomaly.health
1. What This Consent Covers
This document explains what you are agreeing to when you:
- create an account or use Anomaly’s website or app (the "Services"); and/or
- upload health records, connect devices, or share health information; and/or
- request an optional virtual session with an Independent Clinician through the Services.
By clicking "I Agree" (or using the Services), you consent to and acknowledge the items below.
This Consent supplements our Terms and Privacy Policy. If there is a conflict, the Terms and Privacy Policy control for their respective topics.
2. Where the Services Are Available (Canada and United States Only)
The Services are intended for individuals located in Canada or the United States only.
By using the Services, you represent and warrant that:
- you are located in Canada or the United States; and
- you will not use the Services from any other country.
If you access the Services from outside Canada or the United States, you do so without authorization and at your own risk, and we may suspend or terminate access.
3. What Anomaly Is (and Is Not)
Anomaly is:
- a consumer-directed wellness and lifestyle platform that helps you organize health information and plan next steps;
- a software tool that can help you prepare for conversations with healthcare professionals;
- a coordination layer that may help you request or schedule optional sessions with Independent Clinicians.
Anomaly is not:
- a hospital, clinic, or healthcare provider;
- a replacement for your primary care physician (PCP) or other healthcare providers;
- an emergency service;
- a provider of medical advice, diagnosis, treatment, or prescriptions.
If you think you may have a medical emergency, call 911 (or your local emergency number) or go to the nearest emergency department.
4. Wellness Information Only - No Diagnosis or Treatment
You acknowledge and agree that:
- The Services provide wellness and lifestyle-related information for general educational and informational purposes.
- Any outputs you receive through the Services (including summaries, checklists, prompts, planning outputs, or organizational tools) are not medical advice and are not a substitute for care from a licensed healthcare professional.
- You will not rely on the Services as your sole source of medical guidance.
- You will consult your PCP or other qualified healthcare professionals before making significant health decisions, starting a new program, or changing medications.
5. Optional Independent Clinician Sessions
Anomaly may allow you to request or schedule a virtual session with an Independent Clinician.
You acknowledge and agree that:
- Independent Clinicians are independent third parties and are not employees of Anomaly.
- Any clinical services are provided by the Independent Clinician (and/or their professional practice entity), not by Anomaly.
- Anomaly does not control or supervise the Independent Clinician’s clinical judgment.
- Any clinician-patient relationship, if created, is between you and the Independent Clinician, not Anomaly.
- Independent Clinician availability may vary by location, licensure, and other requirements.
- Each Independent Clinician is responsible for their own professional conduct, clinical decisions, and professional liability insurance.
6. Your Data Is Consumer-Directed (You Control It)
You may provide health and related information to the Services, including by uploading documents, entering information, or connecting third-party sources such as wearables or lab portals.
You acknowledge and agree that:
- You choose what to upload, connect, and share.
- You decide whether and when to share a summary or records with an Independent Clinician.
- Anomaly does not integrate with your PCP’s EHR and does not send your information to your PCP unless you direct that sharing yourself outside the Services.
- You can request deletion of your data by contacting privacy@anomaly.health, subject to limited exceptions described in our Privacy Policy (for example, legal, security, and transactional requirements).
7. Authority to Share Information
You represent and warrant that:
- The information you upload, connect, or provide relates to you, or you have legal authority and all necessary permissions to provide it to Anomaly.
- You will not upload personal information of another person without proper authorization.
8. System of Record for Clinical Documentation
You acknowledge and agree that:
- Any official clinical documentation from an Independent Clinician session (if applicable) is maintained by the Independent Clinician in the clinician’s own EMR/EHR or recordkeeping system.
- Anomaly is not the system of record for the Independent Clinician’s clinical notes.
- If you want information from a session included in your PCP record, you are responsible for sharing it with your PCP.
9. Consent to Use of AI and Software Processing
The Services may use automated tools, including artificial intelligence systems, to help organize information and generate wellness-oriented outputs.
You acknowledge and agree that:
- AI-generated outputs may be incomplete, incorrect, or inappropriate for your situation.
- You will not rely on AI output as medical advice, diagnosis, or treatment.
- You will use the Services as a support tool and consult qualified professionals for medical decisions.
AI safeguards (high level)
- We monitor for quality and safety patterns.
- We apply content filters to reduce inappropriate or harmful outputs.
- We may use limited human review for safety evaluation and quality assurance.
- We limit AI-assisted features to wellness and organizational functions and do not design them to provide diagnosis or treatment recommendations.
10. Consent to Third-Party Service Providers (Subprocessors)
To operate the Services, Anomaly uses third-party vendors for infrastructure and functionality such as hosting, databases, security tooling, analytics, communications, customer support, payment processing, and AI processing ("Service Providers").
You consent to Anomaly disclosing and processing your information with these Service Providers as needed to deliver the Services.
Our vendor management approach
- We use written agreements requiring appropriate data protection measures.
- We conduct diligence on Service Providers that handle sensitive data.
- We limit vendor access to what is necessary to provide their specific service.
- We maintain a current list of subprocessors (available upon request to privacy@anomaly.health).
11. Cross-Border Processing (Canada and United States)
You acknowledge and agree that your information may be processed and stored in Canada and the United States, and may be accessed by Service Providers operating in those countries (and, in limited cases, other countries) for the purpose of providing the Services. More detail is provided in our Privacy Policy.
12. Our Privacy and Security Commitments (Serious Safeguards)
We treat your information with discretion and take privacy seriously. We design our systems with safeguards commonly used for sensitive financial and healthcare data.
Our security program includes:
- Encryption: data encrypted in transit (TLS 1.2+) and at rest (AES-256 or equivalent).
- Access controls: least-privilege access model with role-based permissions and multi-factor authentication for staff.
- Monitoring: logging and monitoring to detect and respond to unusual access patterns.
- Vendor oversight: due diligence, contractual protections, and periodic review of Service Providers.
- Internal controls: staff training and data handling policies; background checks for certain roles.
- Incident response: documented procedures to investigate, contain, and remediate security incidents.
No system can guarantee absolute security. You acknowledge and accept this risk when using the Services.
13. What Happens if Something Goes Wrong
Security incident notification
If we become aware of a security incident that involves unauthorized access to your personal information, we will investigate and take steps to contain it and provide notices as required by applicable law and without unreasonable delay.
Service Provider failures
If a Service Provider experiences a breach or failure, we will work with the provider to investigate and remediate and provide notices as required by applicable law and consistent with our contractual rights.
You can report security concerns to: security@anomaly.health
14. No Sale of Your Health Data - No Advertising Use
- Anomaly does not sell your personal information or consumer health data.
- We do not share your consumer health data with:
- advertising platforms for targeted advertising,
- data brokers or information resellers, or
- other third parties for their own marketing purposes.
We may use your information to provide and improve the Services (including reliability, safety, and user experience), consistent with our Privacy Policy.
15. Legal Process and Limited Disclosures
We do not voluntarily disclose your personal information to government agencies. However, we may be required to disclose information if we receive a valid legal demand (for example, a court order) or as otherwise required by applicable law.
Where legally permitted, we will:
- limit disclosures to what is legally required,
- challenge overbroad requests where feasible, and
- notify you unless legally prohibited.
16. Communications Consent
You consent to receive service-related communications from Anomaly, such as account notices, security alerts, onboarding messages, and updates needed to provide the Services.
If you opt in, you may also receive marketing communications. You can opt out of marketing emails using the unsubscribe link or by contacting privacy@anomaly.health. You may still receive non-marketing, service-related messages.
17. Eligibility and Restricted Uses
You acknowledge and agree that:
- You are at least 18 years old.
- The Services are intended for wellness use and non-emergency situations only.
- You are located in Canada or the United States.
Do not use the Services for emergencies or urgent situations, including:
- chest pain, difficulty breathing, suspected stroke,
- severe allergic reactions,
- severe injuries or uncontrolled bleeding,
- thoughts of self-harm or harm to others.
If you experience any of the above, seek immediate emergency help.
18. Your Acknowledgements
By clicking "I Agree" or using the Services, you confirm that:
- You understand Anomaly provides wellness and lifestyle planning tools and is not medical care.
- You understand AI-assisted output may be wrong and is not medical advice.
- You understand Independent Clinicians are independent third parties, and any official clinical notes are kept in the clinician’s EMR/EHR, not in Anomaly.
- You understand Anomaly is not a replacement for your PCP and you will follow up with licensed professionals as needed.
- You consent to the collection, use, and disclosure of your information as described above and in the Privacy Policy.
19. Questions and Feedback
General questions: hello@anomaly.health
Privacy questions: privacy@anomaly.health
Security concerns: security@anomaly.health