Because Customers are the Data Controllers, legal responsibility and accountability for Customer Data under data protection frameworks rests with the Customers, not Harvey AI.
Apple
· Apple App Store Review Guidelines
Data gathered from the HomeKit API, HealthKit, Clinical Health Records API, MovementDisorder APIs, ClassKit or from depth and/or facial mapping tools...may not be used for marketing, advertising or use-based data mining...
we may use information about your browsing and other activity on the Service to promote and market Hims & Hers...Depending on your activity on the Service, this may include information related to you visiting health-related pages on the Service.
Strava
· Strava Privacy Policy
This provision places explicit restrictions on how a sensitive category of data—health information from integrations—can be commercialised or transferred, offering users a defined protection.
Google
· Google Privacy Policy
When you provide health information subject to these laws, Google processes it with your consent, which you may withdraw, or as otherwise permitted by these laws.
Noom
· Noom Terms of Service
if you provide information about your health insurance to us, that will be deemed your authorization for us to submit claims and bill for services on your behalf and share necessary information with the health plan to process any payments …
This clause establishes a specific prohibition on marketing and advertising use of HealthKit data by MyFitnessPal and on its transfer to third parties for those purposes, providing a defined protection for this sensitive data category.
Apple
· Apple App Store Review Guidelines
Apps may not use or disclose to third parties data gathered in the health, fitness, and medical research context...for advertising, marketing, or other use-based data mining purposes other than improving health management...
Hinge
· Hinge Terms of Service
Because the permission explicitly covers messages and other communications, users' private in-app conversations may be accessed and used by Hinge for service development and machine learning purposes.
To help with quality and improve our products, human reviewers may read, annotate, and process your API input and output.
Identity resolution links data across devices and touchpoints into a unified profile, meaning Segment can track and associate a reader's activity across contexts.
Twilio
· Twilio Privacy Notice
Identity resolution means Twilio links data about an individual across multiple devices and interactions into a unified profile, expanding the scope of personal data aggregation.
Gemini
· Gemini Privacy Policy
We process your Personal Information to properly identify or verify your identity to fulfill our obligations under the anti-money laundering laws ("AML") or sanctions laws/regulations of numerous jurisdictions...
Our verification processes also involve electronic identification through the comparison of your 'selfie' against your provided verification information.
If you do not want your information to be used, recorded, or distributed, please do not use or access our Services.
We may collect this information to enable special video effects, for content moderation, for demographic classification, for content and ad recommendations, and for other non-personally-identifying operations.
Plaid
· Plaid Terms of Use
The restriction covers even anonymized or aggregated data and requires written Plaid approval for each permitted use case, giving Plaid direct control over how End User data is exploited.
Indeed
· Indeed Terms of Service
This data about your activities, interactions, and communications on or through the Site is used for analysis, quality control, policy enforcement, content moderation, and to improve the Site and other Indeed programs/services. To achieve these purposes, we use this data …
Indeed
· Indeed Terms of Service
we use such data about your particular activity, communication, and materials to develop, train, build, and use statistical models, including artificial intelligence and machine learning models.
Drawing inferences from any of the information we collect to create a profile about you that may reflect, for example, your credit risk profile, your preferences, characteristics, shopping habits, and other behavior...
The inference engine is the core component processing user requests; a claim that it keeps user data private is a direct statement about the privacy posture of the primary processing mechanism.
Calm
· Calm Privacy Policy
Calm derives sensitive demographic inferences—location, gender, and age—from technical data, which may be used to profile users without their direct input.
inferences (i.e., our understanding) of your age, interests and preferences based on your usage of the Spotify Service
BeReal
· BeReal Privacy Policy
Users' photos and profile text are used to generate inferences that directly drive which advertisements are displayed to them within the App.
we may use your information to detect and prevent fraud, cheating, hacking, account theft, misuse, and other unauthorized activities on the Epic Services...
Square
· Square Privacy Notice
Your information is also screened against relevant sanctions watchlists.
User information is applied to active enforcement activities, including monitoring and taking action, which means personal data is used not only for service delivery but for platform-wide conduct enforcement.
comply with applicable laws, cooperate with investigations by law enforcement or other authorities of suspected violations of law, and/or to protect our and our Affiliates' legal rights;
Anthropic
· Anthropic Privacy Policy (Retired Duplicate)
The claim establishes that AI model training from user Inputs and Outputs is Anthropic's default practice, with opt-out available only through account settings, meaning users who do not actively opt out contribute their data to model training.
Training use of Inputs and Outputs is the default; users must take an affirmative step through account settings to prevent it, meaning inaction results in data use for model improvement.