Consumer Health Data Privacy Policy

MedSense Labs, LLC d/b/a Brux Aware Last Updated: August 20, 2026

This policy describes how we collect, use, share, and delete consumer health data as that term is defined by the Washington My Health My Data Act, Nevada SB 370, and comparable state laws. It applies in addition to our Privacy Policy. Where the two differ about consumer health data, this policy controls.

Brux Aware is a general wellness product. It is not a medical device and does not diagnose, treat, cure, mitigate, or prevent any disease or condition. Some of what it records is nonetheless treated as consumer health data by these laws, and we handle it accordingly.

The Short Version

Your guard records your nights on your phone. That happens whether or not you ever share anything with us.
Sharing health data with us is off by default. Nothing leaves your phone until you turn it on.
You choose whether what you share is linked to you or anonymous.
We never sell consumer health data and never use it for advertising.
You can delete it, all of it, from inside the app, without contacting us.

1. What Consumer Health Data We Collect

Nightly summaries	For each night: hours the guard was worn, number of recognized clenching episodes, total seconds of recognized jaw activity, episodes per hour, average episode length, a relative intensity figure, and your Brux Score.
Linking identifiers	Only when you have chosen linked sharing. See Section 4.

What stays on your phone and never reaches us. Raw, moment-by-moment force readings. Your reference bite, the deliberate clench used as your personal scale. Your resting baseline. The temperature the guard records while you wear it. All of these are used by the app on your own device to work out your score, and none of them is transmitted to us.

What we do not collect at all. We do not collect biometric identifiers such as fingerprints, faceprints, voiceprints, or retina or iris scans. We do not collect precise location. We do not use geofences around health-care facilities.

2. How We Collect It

Only from you, and only through the Brux Aware guard and the Brux Aware app on your own phone. We do not buy consumer health data, and we do not receive it from data brokers, advertising partners, or any other third party.

3. Why We Collect It

To show you your own nights, trends, streaks, and score.
To keep a backup of your nights, if you have chosen linked sharing, so a lost or replaced phone does not lose your history.
To let our support team help you when you ask, if you have separately allowed that.
To understand, in aggregate, whether the product works, and to improve it and develop new features and products.

4. Your Choice: Linked or Anonymous

Collection of consumer health data is off by default. It begins only when you turn it on, and turning it on is a separate, affirmative act. It is never pre-selected, never bundled with your purchase, and never a condition of buying or using the guard.

When you turn it on, you choose how it is stored:

The anonymous option is being rolled out through app updates. If your version of the app shows a single sharing switch rather than a choice, turning it on stores your nights linked to your account, as described immediately below. Updating the app gives you the choice.

Linked. Your nights are stored against your account, which means your email address and the serial number of your guard. One account may have more than one guard. Linked storage is what makes backup, restore on a new phone, and support able to see your nights possible.

Anonymous. Your nights are stored under a random identifier generated on your phone. Your email address and your guard serial number are not sent and are not stored with the data. There is no lookup table, anywhere, that connects that random identifier back to you. We are not able to tell you which records are yours, because we genuinely do not know.

What anonymous costs you, stated plainly. Because we cannot tell which records are yours, we cannot restore them to a new phone, we cannot show them to support to help you, and we cannot delete them on request, because we cannot find them. Everything you have recorded still lives on your phone and is still deletable there. If you lose the phone, anonymously shared data is unrecoverable. We think that is the right trade for people who want to contribute without being identifiable, and we would rather say it than let you discover it later.

You may change your choice or turn sharing off at any time in the app. Withdrawal is prospective. It stops future collection, and for linked data it deletes what we hold. It does not reach into aggregate figures already computed, which are described in Section 8.

We do not sell consumer health data. We do not share it for targeted advertising. We do not disclose it to advertising, analytics, or marketing partners in any form that identifies you.

We share it only with service providers who process it on our instructions and for no purpose of their own:

Vercel Inc.	Application hosting, United States
Neon Inc.	Managed database, United States

We may also disclose consumer health data at your direction, with your consent, to comply with a legal obligation, or in connection with a merger, acquisition, or sale of assets, in which case we will give notice as required by law.

6. Who Inside Brux Aware Can See It

Access is limited to the people who need it to run the service or to answer a support request you have made.

Today Brux Aware is a very small company and there is one administrator account, used by a company officer. We are building a second, limited role for support staff that can see your device, its settings, its battery and connection health, and whether it has been syncing, but cannot open your individual nights unless you have turned on support access, a setting arriving in the same app update. Until both exist, nobody else is given access. We will update this policy when it ships.

Every read is logged. Each time anyone at Brux Aware opens individual health data, our system records who, when, whose guard, and how much was returned. You may request that record by emailing us.

Anonymous data cannot be viewed by anyone at Brux Aware as belonging to a person, because it is not connected to one.

7. Your Rights

You may confirm whether we hold consumer health data about you, access it and receive a copy, delete it including directing our processors to delete it, and withdraw consent at any time.

Two ways to exercise them:

In the app. Turn sharing off, or use Delete my account and all data. Both act immediately and neither requires contacting us.
By email. hello@bruxaware.com with the subject line “Consumer Health Data Request.”

We respond within 45 days, and may extend once by a further 45 days where the law allows, telling you why. There is no charge. If we decline a request we will say why, and you may appeal by replying to our response. If we deny the appeal, you may contact the Washington State Attorney General or your own state’s Attorney General.

We will not deny you goods or services, charge you a different price, or give you a lesser experience because you exercised these rights.

One limit, stated honestly. We cannot access, correct, or delete data you chose to share anonymously, because we cannot identify it as yours. That is the point of the setting, and it is why the app tells you so before you choose it.

8. Deletion, and What Survives It

When you delete your consumer health data, we delete the individual records we hold for you and direct our service providers to do the same.

What survives, and why. Figures already calculated across many people, for example the median night across all Brux Aware guards in a given month, are not reversed. We have not yet published or licensed any such figure. Our rule, before we do, is that identifiers are removed and any figure derived from fewer than five people is suppressed, so that no remaining number can be traced to an individual. We do not attempt to re-identify de-identified data, and we require by contract that anyone who receives it does not either.

How we use aggregate data. We use de-identified and aggregated information to improve Brux Aware, develop new features and new products, publish general findings about jaw activity, and, where it is lawful to do so, to license de-identified datasets to third parties such as researchers. Nothing licensed or published identifies you, and no individual record is ever included.

Operational information about the guard itself, its serial number, firmware version, battery and connection history, is not consumer health data and is retained as inventory and product-safety history after the guard stops being associated with you.

9. How Long We Keep It

We keep linked consumer health data for as long as your account holds it, and delete it when you delete it or close your account. Copies may persist for a short period in our hosting provider’s routine backups before those are overwritten in the ordinary course. De-identified aggregates are kept indefinitely as described in Section 8.

10. How It Is Protected

Health data travels over encrypted connections and is stored separately from the operational records of your device, in its own table that the operational parts of the service do not read. Sign-in credentials are never stored in readable form. Access is limited as described in Section 6, every access to individual health data is logged, and the servers that accept health data reject any submission that does not carry a record of the consent that permitted it.

11. Changes

If we materially change how we handle consumer health data, we will post an updated policy and, where the law requires, obtain your consent before the change applies to data already collected.

12. Contact

MedSense Labs, LLC, doing business as Brux Aware
Email: hello@bruxaware.com, subject line “Consumer Health Data Request”
Mailing address: 2 N. Lake Ave., Suite 520, Pasadena, CA 91101
Website: www.bruxaware.com

Consumer Health Data Privacy Policy