lighthouse ("we," "us," or "our") is committed to protecting user privacy, ensuring compliance with applicable health data privacy laws and regulations, and maintaining the highest security standards. while lighthouse does not collect, process, or analyze health-related data as part of its platform, we acknowledge that users may voluntarily share such information through their interactions, including messages, posts, and profile details.

this health data compliance policy outlines our approach to handling user-generated content that may contain health-related information, our commitment to data security, and our adherence to u.s. privacy laws, including the california consumer privacy act (ccpa). it also details the measures we take to prevent the unintentional collection of sensitive data and how users can control their privacy settings.

by using lighthouse, users acknowledge and agree to the terms outlined in this policy.

lighthouse does not require or intentionally collect any personal health data from users. specifically:

• we do not request or process data related to mental health, emotional well-being, medical conditions, physical disabilities, treatments, genetic information, or biometric data as part of the user profile, account setup, or platform services.
• lighthouse's ai-driven post curation and recommendation system does not analyze user interactions for health-related insights, behavioral profiling, or medical status assessment.
• users may, however, voluntarily share personal health-related experiences, such as discussions on mental wellness, fitness routines, dietary habits, or medical history, in private messages, posts, or profile prompts.
• lighthouse does not classify or use such information for targeted advertising, profiling, commercial exploitation, or data monetization.
• if users suspect that any health-related data is being stored unintentionally, they have the right to request its removal.

lighthouse provides multiple privacy safeguards, but users must exercise caution when sharing sensitive personal information.

• users are strongly discouraged from sharing personal health data in public posts, profile descriptions, or within prompts visible to others.
• if a user voluntarily discloses health-related information in personal communications, it is their responsibility to ensure they are comfortable with the level of exposure.
• lighthouse provides privacy settings that allow users to control data visibility, restrict access to sensitive content, and limit exposure.
• lighthouse does not verify, authenticate, or validate any user-generated health-related claims or statements. users should be aware that no health-related advice, recommendations, or claims made on the platform are endorsed by lighthouse.

lighthouse follows u.s. data protection regulations to ensure compliance with health-related privacy standards, proactively safeguarding user information.

4.1 ccpa compliance (for california users)

under ccpa, "consumer health data" is subject to enhanced protections.

• lighthouse does not sell, share, or disclose any user-generated health-related data to third-party entities, advertisers, affiliates, or research organizations.
• california users have the right to:
  • request access to any personal data they have provided, including health-related data.
  • request deletion of voluntarily shared health-related information and restrict its processing.
  • opt-out of data collection practices beyond essential platform functionalities.
  • request information on how their data is processed, stored, and secured.

to protect user-generated content that may include health-related information, lighthouse implements industry-leading security measures, including:

• end-to-end encryption to prevent unauthorized interception or access to user data.
• secure cloud storage utilizing secure encryption and multi-layer security protocols.
• access control measures, including two-factor authentication (2fa) and session monitoring to prevent unauthorized access.
• automated and manual content moderation systems to detect, review, and mitigate risks associated with sensitive data sharing.
• user-controlled privacy options, allowing individuals to edit, delete, or restrict any content they have shared on lighthouse.
• right to erasure: users can request complete account deletion if they believe personal data has been inadvertently shared, ensuring full removal of any stored information.
• regular security audits and compliance checks to ensure continuous data protection.

lighthouse does not currently process health-related data; however, we recognize that future platform developments may require additional compliance safeguards. if lighthouse:

• introduces health and wellness-related features, such as community discussion forums, wellness tracking, or mental health support groups, additional compliance measures will be implemented.
• expands into regions with stricter health data regulations, lighthouse will ensure full compliance with all applicable laws before launching relevant features.

all future changes to health data policies will be clearly communicated to users, with explicit opt-in choices where required.