POLICIES & PUBLIC USE TERMS
Policies & Public Use Terms
A consolidated entry point for the privacy, accessibility, youth protection, educational, research, responsible-innovation, and commerce boundaries that govern the public RTH ecosystem.
RTH uses a layered governance structure so visitors can tell the difference between current public-site rules, future product controls, health-data requirements, AI/model governance, youth safeguards, research, security, and commerce.
Current public website
Privacy Policy
Public-site collection, use, disclosure, security, and product-data separation.
Data Rights & Privacy Requests
Access, correction, deletion, portability, verification, agents, and appeals where applicable.
Data Retention & Deletion
Purpose-based retention, backups, legal holds, deletion evidence, and future product schedules.
Cookie & Tracking Notice
Necessary, functional, analytics, consent, and targeting controls.
Terms of Use
Website rules, intellectual property, responsible AI boundaries, entity separation, and public-content limitations.
Accessibility Statement
WCAG 2.2 AA target, release testing, alternative formats, and future independent assurance.
Medical, Educational & Research Disclaimer
Boundaries for testimony, research, AI, SuperstarIQ, and the Neurocardiac Model™.
Vulnerability Disclosure Policy
Security reporting, current testing limits, triage, sensitive-data handling, and future coordinated disclosure.
SuperstarIQ, health data, and AI
SuperstarIQ Privacy & Data Use
Prelaunch product privacy, data categories, user controls, AI processing, sharing, and HIPAA/clinical separation.
Consumer Health Data Privacy
Prelaunch sensitive-health categories, consent, rights, advertising limits, and health-breach response.
Connected Health Data & Permissions
Wearable/source permissions, provenance, source-specific restrictions, disconnection, and model-training limits.
AI & Model Governance
Third-party models and RTH-owned LLM governance, training provenance, evaluations, agents, model cards, and rollback.
Service Providers & Subprocessors
Vendor categories, due diligence, contracts, AI-provider controls, and a named product register before launch.
Research & Pilot Governance
Beta/research separation, informed consent, IRB triggers, vulnerable populations, model-development research, and claims.
Youth and safeguarding
Youth Privacy Policy
Child-facing content, adult-facing collection, no child scoring, and COPPA controls.
Youth Safeguarding & Child Protection
Adult-youth boundaries, communications, media, programs, reporting, schools, and minor-facing AI restrictions.
Commerce
Terms of Sale
Rules that apply when the RTH store accepts purchases.
Shipping Policy
Physical-goods processing, carrier delivery, and shipment issues.
Returns & Exchanges
Physical-product return, damage, refund, and third-party purchase rules.
Digital Download Policy
Delivery, licensing, redistribution, refunds, and accessibility.
Prelaunch means governed, not live. Product- and health-data-specific notices describe controls required before the relevant capability is enabled. They do not represent that external health-data ingestion, proprietary-model training on user data, clinical services, or institutional research are currently active.
Privacy and data requests: email privacy@restartingtheheart.com. Do not send medical records, government identifiers, passwords, authentication codes, or other unnecessary sensitive information by ordinary email.
Security and vulnerability reports: email security@restartingtheheart.com. This reporting channel does not grant authorization to test, access, disrupt, retain, or disclose RTH systems or data.
General questions about these terms or policies may be sent through the RTH contact page or to superstar@restartingtheheart.com.