SX Consent Health Data Handling Policy

Effective Date: July 10, 2026
Last Updated: July 10, 2026

This Health Data Handling Policy (“Policy”) applies to the SX Consent Application (“SX Consent,” “we,” “us,” or “our”), operated by Beniquez Sanchez and Company LLC and created by BS and Co AI Labs.

SX Consent is a private invitation, confidentiality, privacy, reputation-preservation, and protected recordkeeping platform for verified adults. SX Consent may allow limited optional personal health-related information or health document status information to be used inside a protected private-invitation workflow.

SX Consent is not a healthcare provider, telemedicine provider, medical practice, clinic, laboratory, pharmacy, health insurer, medical device, diagnostic tool, treatment platform, public health authority, emergency medical service, or substitute for professional medical advice.

This Policy explains how SX Consent may collect, process, display, store, restrict, share, retain, delete, protect, or otherwise handle health-related information if health-related features are enabled or used.

This Policy supplements and is incorporated into our Privacy Policy, Terms and Conditions, Sensitive Data Consent, SMS Terms, Account Deletion Policy, Data Deletion Policy, in-app health-related disclosures, identity and eligibility disclosures, agreement acknowledgments, invitation-specific disclosures, Evidence Vault notices, and provider-specific notices.

If you do not agree to this Policy, you must not use SX Consent features that request, display, process, or rely on health-related information.

1. Important Health Disclaimer

SX Consent does not provide medical advice. SX Consent does not diagnose, treat, cure, prevent, test for, monitor, or manage any disease, infection, condition, exposure, pregnancy, fertility issue, mental health condition, physical condition, or medical risk.

SX Consent does not interpret laboratory results and does not verify the clinical validity, authenticity, completeness, accuracy, freshness, or medical meaning of any test result, health declaration, vaccination record, optional personal health document, user statement, provider document, uploaded file, or metadata unless we expressly state otherwise in writing.

Any health-related feature in SX Consent is intended only to support private documentation, user-directed disclosure, compatibility review, invitation readiness, agreement context, privacy expectations, and protected record metadata between verified adult app users.

You should consult a qualified healthcare professional for medical testing, medical advice, diagnosis, treatment, prevention, counseling, risk assessment, vaccination guidance, test interpretation, reproductive health guidance, medication guidance, or any health-related decision.

If you believe you may have a medical emergency, call 911 or your local emergency number immediately.

2. Adults-Only Health Data Processing

SX Consent is strictly limited to adults who are at least 18 years old. Health-related features are intended only for verified adults. Minors must not use SX Consent and must not submit health-related information.

By using any health-related feature, you represent and warrant that:

you are at least 18 years old;
you are legally permitted to provide the information;
the information you provide is your own information or information you are legally authorized to submit;
you are not submitting false, altered, forged, misleading, stolen, fabricated, or unauthorized health-related information;
you are not using health-related features to pressure, shame, threaten, extort, blackmail, discriminate against, harass, retaliate against, or mislead another person.

We may suspend, restrict, disable, preserve, or terminate accounts, features, records, or access if we believe health-related features are being misused or present legal, privacy, security, operational, or reputational risk.

3. Scope of This Policy

This Policy applies when SX Consent processes health-related information through:

account onboarding;
private requirement profiles;
health-readiness settings;
optional personal health document upload status workflows;
optional last-tested-date fields;
vaccination-readiness selections;
health-readiness selections;
private invitation requirement workflows;
Cross-Intake compatibility review;
one-time private invitation agreement generation;
protected record package metadata;
active invitation readiness;
post-invitation closure workflows;
support requests;
data deletion requests;
account deletion requests;
privacy, legal, security, or compliance requests.

This Policy applies to SX Consent websites, PWA, mobile apps, APIs, backend systems, storage systems, provider integrations, and protected-record workflows.

4. Categories of Health-Related Information SX Consent May Handle

Depending on available features, user choices, legal requirements, account readiness, and invitation workflow configuration, SX Consent may collect or process limited health-related information.

4.1 Health-Readiness Requirement Status

SX Consent may allow a user to indicate whether a health-readiness item is required, optional, or not required for a specific private invitation workflow. If a user requires a health-readiness item from another user, SX Consent may require the requesting user to provide an equivalent readiness item first, where applicable, to support fairness and reduce misuse.

4.2 Last-Tested-Date Field

SX Consent may collect or display an optional last-tested-date field for health-readiness workflows. This field is user-provided or document-associated information. SX Consent does not guarantee that the date is truthful, complete, medically sufficient, clinically meaningful, or current.

4.3 Health-Related Status Values

SX Consent may process health-related status values such as required, optional, not required, provided, not provided, current, expired, pending, rejected, unavailable, self-declared only, user-confirmed, or provider-verified if a qualified provider integration exists in the future.

5. Optional Personal Health Document Upload

SX Consent may collect or process information related to optional personal health document upload status workflows. Unless expressly stated otherwise, SX Consent does not clinically verify test results, does not validate medical truth, and does not guarantee authenticity.

SX Consent may process metadata related to a document, such as:

upload timestamp;
document status;
expiration or recency status;
user acknowledgment;
file name or file reference;
document hash;
protected record package metadata;
review status;
visibility status;
deletion or retention status.

SX Consent may avoid displaying raw medical documents in public or unnecessary areas of the app. Where possible, SX Consent may display limited status indicators such as “Provided,” “Not provided,” “Current,” “Expired,” “Pending,” “Configured,” or similar workflow status values.

6. Vaccination Readiness and Health-Readiness Selections

If enabled, users may select limited vaccination-readiness or health-readiness information. Examples may include COVID-19 vaccination readiness, mpox vaccination readiness, meningitis vaccination readiness, or other user-selected health-readiness information.

SX Consent does not verify vaccination status unless a qualified verification workflow is expressly offered. These selections are user-provided disclosures and are not medical advice, medical clearance, or a guarantee of health status.

SX Consent may also allow users to select neutral health-readiness preferences such as “prefer to discuss” or other user-provided indicators. SX Consent does not verify the medical accuracy, sufficiency, consistency, truthfulness, or current status of these disclosures.

7. Health-Related Acknowledgments

SX Consent may collect acknowledgments that a user:

understands that SX Consent is not a medical provider;
understands that health information is user-provided unless expressly verified;
understands that health-related features do not replace medical testing, clinical interpretation, or professional advice;
agrees not to rely on SX Consent as medical advice;
agrees to consult qualified healthcare professionals;
accepts health-related limitations;
understands that optional health-related records may be retained where permitted or required for legal, security, integrity, multi-party record, or dispute-related reasons.

8. What SX Consent Does Not Collect or Do by Default

Unless a specific feature is enabled and the user provides required permission or consent, SX Consent does not intend to:

collect full medical records;
collect full clinical histories;
collect complete laboratory files;
collect insurance records;
collect prescription records;
collect provider chart records;
collect diagnostic information from healthcare providers;
collect genetic information;
collect reproductive health records;
collect mental health treatment records;
access Apple HealthKit, Apple Health, Google Health Connect, or similar health platforms;
write data to Apple HealthKit, Apple Health, Google Health Connect, or similar health platforms;
diagnose any condition;
interpret health test results;
provide medical recommendations;
provide testing services;
prescribe medication;
connect users with doctors;
operate as telemedicine;
function as a medical device.

If SX Consent later adds any such feature, we will update this Policy and request additional permission or consent where required.

9. Limited Purposes for Handling Health-Related Information

SX Consent may process health-related information only for limited purposes, including:

private requirement setup;
private compatibility review;
Cross-Intake workflows;
user-selected health disclosure;
fairness enforcement when a user requires a health-related item from another user;
agreement drafting;
invitation-specific privacy and optional personal health document upload workflows;
active invitation readiness;
protected record package metadata;
dispute documentation;
legal compliance;
privacy, security, or integrity review;
fraud prevention;
preventing misuse;
account enforcement;
responding to user requests;
processing account deletion or data deletion requests;
complying with provider, Apple App Store, Google Play, or applicable platform requirements.

SX Consent does not use health-related information for public profiles, public discovery, public matching, targeted advertising, public social feeds, public content monetization, or sale of health data.

10. Explicit Consent for Health-Related Features

Certain health-related features may require explicit consent or user-directed permission.

By enabling, requiring, submitting, uploading, displaying, sharing, accepting, viewing, or relying on a health-related SX Consent feature, you expressly consent to SX Consent processing health-related information as described in this Policy, the Privacy Policy, the Sensitive Data Consent, and the Terms and Conditions.

You may revoke health-data processing consent where applicable. However, revoking that consent may:

disable health-related features;
prevent you from requiring health information from others;
prevent you from accepting invitations where health readiness is required;
prevent generation of certain agreements;
limit active invitation readiness;
limit protected record completeness;
restrict your account or available features;
preserve prior records where retention is required or permitted.

Revoking health-data processing consent does not automatically delete records already generated, signed, sealed, shared with another participant, retained for legal reasons, retained for multi-party record integrity, or preserved for protected-record integrity. Revoking consent does not create a refund right.

11. Health Data Is Not Medical Advice

You agree that health-related information in SX Consent is:

not medical advice;
not a diagnosis;
not treatment;
not prevention guidance;
not a substitute for testing;
not a substitute for professional care;
not a clinical recommendation;
not a guarantee that a person is free from infection, exposure, condition, or risk;
not a guarantee that a person’s statements are true;
not a guarantee that a document is authentic;
not a guarantee of health status;
not a guarantee of safety.

You should consult licensed medical professionals for all health decisions.

12. No Verification Guarantee

SX Consent may display health-related information submitted by users or generated by the app workflow, but SX Consent does not guarantee:

authenticity of documents;
accuracy of test results;
freshness of test results;
truthfulness of user statements;
completeness of disclosures;
validity of vaccination claims;
effectiveness of prevention practices;
absence of health risk;
absence of infection, exposure, disease, condition, pregnancy risk, reproductive health risk, or medical risk;
legal sufficiency of health disclosures.

If SX Consent later integrates a qualified third-party verification provider, the provider’s verification may reduce risk but will not eliminate risk or create a medical guarantee.

13. User Responsibility for Health Decisions

You are solely responsible for:

deciding whether to disclose health-related information;
deciding whether to request health-related information;
deciding whether to accept another user’s health disclosure;
deciding whether to participate in an invitation;
obtaining your own medical testing;
consulting medical professionals;
understanding health risks;
practicing appropriate prevention or precautions;
complying with applicable laws;
respecting another user’s private requirements and decisions;
respecting another user’s decision to leave, stop, decline, or not participate.

SX Consent does not assume responsibility for your health decisions, another user’s health decisions, or consequences arising from user interactions.

14. Fairness Rule for Required Health-Readiness Items

If a user marks a health-readiness item or optional personal health document upload status as required, SX Consent may require that user to provide their own equivalent readiness item before imposing that requirement on another user.

For example, if User A requires User B to provide a recent health-readiness document status item, User A may be required to provide User A’s own comparable readiness item first.

This rule is intended to reduce asymmetry, misuse, pressure, and unfair data demands. SX Consent may block, restrict, or flag health-related requirements if the requesting user does not satisfy reciprocal readiness requirements.

15. Visibility of Health-Related Information

Health-related information may be visible to another verified participant only when necessary for a private workflow, such as:

invitation review;
Cross-Intake;
health-readiness requirement matching;
agreement generation;
invitation readiness;
protected record package metadata.

SX Consent may limit visibility to status indicators rather than raw documents. For example, another participant may see “Health-readiness item required,” “Document provided,” “Current,” “Expired,” “Not provided,” “Pending review,” or “Last-tested-date provided.”

SX Consent should not publicly display raw medical documents, health test reports, lab results, or detailed health records. You must not screenshot, copy, publish, threaten to publish, disclose, share, sell, misuse, shame, blackmail, extort, retaliate with, or weaponize another user’s health-related information.

16. No Public Health Profiles or Discovery

SX Consent does not create public health profiles. SX Consent does not allow public browsing of health status. SX Consent does not allow health data to be used for public matching. SX Consent does not allow users to search publicly by health status. SX Consent does not allow health-related information to be marketed as public profile content or public discovery content.

Health-related information is intended only for private, invitation-specific, verified-user workflows.

17. Health Data and One-Time Private Invitation Agreements

Health-related information may be included in a one-time private invitation agreement only when relevant to the invitation-specific workflow and accepted by the participants.

The agreement may include:

whether a health-readiness item was required;
whether a status was provided;
last-tested date if supplied;
health-related acknowledgments;
accepted or declined health-related requirements;
limitation disclaimers;
health-related protected record metadata.

A one-time private invitation agreement does not verify health truth, eliminate health risk, create medical advice, or guarantee legal enforceability.

18. Health Data and Protected Record Packages

SX Consent may include health-related metadata in a protected record package or Evidence Vault record if health-related items were part of the invitation workflow.

Protected record packages may include:

status values;
timestamps;
acknowledgments;
document hashes;
visibility status;
agreement references;
audit events;
Cross-Intake items;
closure records.

Protected record packages are contextual records. They are not medical records, legal conclusions, proof of health status, proof of non-infection status, or absolute proof of any event.

19. Health Data Retention

SX Consent may retain health-related information for as long as reasonably necessary for:

providing health-related features;
account readiness;
agreement integrity;
protected record integrity;
legal compliance;
fraud prevention;
abuse prevention;
dispute resolution;
chargeback defense;
user protection;
audit records;
provider compliance;
platform compliance;
enforcing Terms and Conditions.

Retention periods may vary based on whether data is part of a signed agreement, part of a sealed protected record package, associated with multiple users, involved in a dispute or legal hold, relevant to fraud or abuse, subject to legal or provider requirements, or technically feasible to delete.

Health-related raw documents, if enabled, should be retained only as long as reasonably necessary and should be subject to restricted access and enhanced controls.

20. Data Deletion and Health Data

You may request deletion of eligible health-related information through the Data Deletion process. SX Consent may deny, delay, limit, or partially fulfill deletion where retention is necessary to:

preserve signed agreements;
preserve protected record package integrity;
protect another participant’s rights;
comply with law;
respond to legal process;
resolve disputes;
prevent fraud;
investigate abuse;
maintain audit logs;
comply with provider requirements;
defend legal claims;
maintain multi-party records;
enforce Terms and Conditions.

Where deletion is not possible or not appropriate, SX Consent may restrict, archive, de-identify, hash, segregate, or limit access to the data where feasible.

21. Account Deletion and Health Data

Account deletion does not automatically delete all health-related information. If health-related information is included in a signed agreement, protected record package, audit log, privacy/security record, dispute record, provider record, or multi-party invitation record, SX Consent may retain it where reasonably necessary.

Deleting your account does not create a refund right. Deleting your account may prevent future access to certain records, but it may not erase records lawfully retained for protected record integrity, legal, security, compliance, provider, tax/accounting, dispute, or multi-party purposes.

22. Health Data Security

SX Consent uses reasonable administrative, technical, and organizational safeguards designed to protect health-related information.

Safeguards may include:

encryption in transit;
restricted access;
access logging;
role-based controls;
limited visibility;
separate handling for raw documents where feasible;
document hash or metadata handling;
provider controls;
audit logs;
security monitoring;
least-privilege access;
incident response procedures;
retention controls;
deletion or restriction workflows;
contractual safeguards for authorized personnel, contractors, vendors, and service providers.

No system can be guaranteed completely secure. You are responsible for securing your device, email, phone number, password, PIN, biometric access, lock screen, and notification settings.

23. Health Data Breach and Incident Handling

If SX Consent discovers a security incident involving health-related information, we will investigate and take appropriate steps. Where required by applicable law, we may notify affected users, regulators, providers, app stores, payment processors, or other required parties.

Not every incident is a legally reportable breach. SX Consent will evaluate incidents based on applicable law, affected data, risk, scope, security measures, and available facts.

24. Consumer Health Data Laws

Some U.S. states have laws that regulate consumer health data beyond HIPAA. Depending on your location and the data involved, you may have rights related to access, deletion, correction, data portability, limitation, restriction, or additional disclosures.

SX Consent may provide separate notices or rights where required by applicable consumer health data laws. Where state consumer health data laws apply, SX Consent may require express consent before collecting or sharing certain health-related information and may provide separate processes for consumer health data rights.

25. HIPAA Status

SX Consent is not intended to be a healthcare provider, health plan, healthcare clearinghouse, or business associate solely by offering SX Consent’s private documentation features.

Unless SX Consent expressly enters into a written business associate agreement or otherwise becomes subject to HIPAA through a specific relationship, SX Consent does not represent that it is a HIPAA covered entity or business associate.

Even where HIPAA does not apply, SX Consent may still handle health-related information under this Policy, the Privacy Policy, the Sensitive Data Consent, applicable consumer privacy laws, platform rules, provider rules, and contractual safeguards.

26. HealthKit, Health Connect and Health Platform Data

SX Consent does not currently intend to access Apple HealthKit, Apple Health, Google Health Connect, or similar health data platforms unless clearly disclosed.

If SX Consent later requests access to such health data, SX Consent will:

provide additional notice;
request user permission;
explain why access is needed;
limit access to necessary data;
honor platform restrictions;
update App Store and Google Play disclosures;
update this Policy where required.

SX Consent will not use HealthKit, Health Connect, or similar health platform data for advertising, public discovery, public matching, or public content monetization.

27. Sharing Health-Related Information With Other Verified Participants

Health-related information may be shared with another verified participant only when necessary for a private, user-initiated SX Consent workflow.

Examples include:

when you require a health-readiness item;
when another user requires a health-readiness item;
when health-related readiness affects Cross-Intake;
when health-related status is included in the one-time private invitation agreement;
when health-related status is part of protected record metadata.

You are responsible for deciding whether to share health-related information. Do not share health-related information unless you understand the risks and agree to the specific disclosure.

28. Sharing Health-Related Information With Service Providers and Authorized Personnel

SX Consent may share limited health-related information with service providers, contractors, employees, officers, directors, legal advisors, compliance advisors, security personnel, and other authorized personnel only as necessary to operate the platform, protect security, process records, store data, provide support, comply with law, maintain protected record integrity, enforce terms, or protect SX Consent, Beniquez Sanchez and Company LLC, SX Consent™, BS and Co AI Labs™, users, providers, contractors, directors, officers, and affiliates.

Providers may include:

hosting providers;
storage providers;
security providers;
legal and compliance advisors;
app infrastructure providers;
crash/error monitoring providers;
document handling providers;
identity verification providers;
support tools;
SMS or email providers, but only limited operational metadata unless necessary;
payment or subscription providers, if needed for account management.

SX Consent does not sell health-related information.

29. No Health Data for Targeted Advertising

SX Consent does not intend to use health-related information for:

targeted advertising;
behavioral advertising;
public matching;
public discovery;
sale to data brokers;
third-party promotional use;
cross-app tracking;
public content monetization.

If our practices materially change, we will update our policies and provide legally required choices or consent.

30. User Prohibited Conduct Involving Health Data

You must not:

upload false health documents;
alter test results;
impersonate a medical provider;
misrepresent vaccination status;
misrepresent health-readiness status;
submit another person’s health data without authorization;
pressure another user into disclosing health data;
threaten to reveal health information;
shame or harass someone based on health information;
publish another user’s health information;
use health data for blackmail or extortion;
use health data to discriminate unlawfully;
bypass reciprocal health-readiness requirements;
manipulate health status fields;
misuse screenshots;
upload malware or hidden content in documents;
use SX Consent as a substitute for medical testing or advice.

Violations may result in suspension, restriction, termination, record preservation, provider reporting, law enforcement cooperation, legal reporting, legal action, or other enforcement action where appropriate.

31. Health Data in Support Communications

Do not send unnecessary health-related information through email, SMS, chat, or support forms. If you contact support about a health-related issue, include only the minimum necessary information.

SX Consent may preserve support communications for legal, security, fraud-prevention, compliance, customer support, enforcement, and protected record purposes.

SMS and email may not be secure channels for sensitive health information. Sensitive details should generally be reviewed inside the app.

32. Notices and Health Privacy

SX Consent attempts to avoid exposing health-related details in SMS messages, email subject lines, in-app notice previews, or other operational notice previews.

Operational messages may say something like:

“Open the app to review an account action.”
“Open the app to review invitation readiness.”
“Open the app to complete a pending response.”

Operational notices should not reveal sensitive details such as health test status, diagnosis, test result, private requirement selections, or health disclosures. Users are responsible for securing device notification previews, lock screen settings, email access, phone access, and account credentials.

33. No Emergency or Public Health Reporting Service

SX Consent is not a public health reporting system. SX Consent is not an emergency medical service. SX Consent is not a disease surveillance system. SX Consent does not automatically report health conditions to public health authorities, except where required by law, court order, subpoena, or valid legal process.

If you need emergency medical assistance, call 911 or your local emergency number.

34. User Acknowledgment of Risk

By using health-related features, you understand and agree that:

health information may be sensitive;
another user may provide inaccurate information;
documents may be outdated, forged, incomplete, or misunderstood;
test results may not cover all risks;
timing of tests may matter;
there may be window periods or limitations;
vaccination status may not eliminate risk;
health-readiness practices may not eliminate risk;
SX Consent cannot guarantee health safety;
SX Consent cannot guarantee another user’s honesty;
SX Consent cannot guarantee legal outcomes;
you remain responsible for your own medical decisions.

35. Relationship Between Health-Related Information and Participation

Health-related disclosures do not replace any person’s independent decision-making. Health-related disclosures do not create future participation, permanent participation, legal immunity, a waiver of rights, or any guarantee about another person’s conduct, health status, or real-world actions.

Each user remains responsible for their own health decisions, private decisions, and participation decisions. Any invitation remains voluntary and applies only to that specific protected invitation workflow.

SX Consent health-related features are private documentation tools only. They are not medical clearance, legal advice, proof of health status, proof of non-infection status, or a guarantee of safety.

SX Consent may allow users to provide optional personal health-related information or optional health document status information inside a protected private-invitation workflow. SX Consent does not provide medical advice, does not verify medical truth, does not diagnose or treat any condition, does not provide medical clearance, and does not guarantee safety. Health-related information is user-provided, optional where applicable, limited to the specific protected invitation workflow, and subject to privacy, retention, deletion, security, and protected-record integrity rules.

36. Enforcement, Changes to This Policy and Health Data Consent Checkbox

SX Consent may suspend, restrict, disable, investigate, preserve, or terminate accounts, records, or features if we believe health-related information is being misused or that enforcement is necessary to protect users, SX Consent, Beniquez Sanchez and Company LLC, SX Consent™, BS and Co AI Labs™, owners, directors, officers, contractors, employees, vendors, service providers, affiliates, successors, assigns, intellectual property, contractual rights, security, privacy, operations, or reputation.

We may also preserve records, investigate activity, restrict accounts or features, report to providers, respond to law enforcement, comply with legal process, preserve claims or defenses, or take legal action where appropriate.

We may update this Health Data Handling Policy from time to time to reflect changes in law, Apple App Store requirements, Google Play requirements, health app declaration requirements, consumer health data laws, FTC rules, provider requirements, SX Consent features, security practices, protected-record workflows, or health-related feature design.

Material changes may be communicated through the website, app, email, in-app notice, or other reasonable method. Continued use of health-related features after the updated Policy becomes effective means you acknowledge and accept the updated Policy, where permitted by law.

Suggested consent checkbox: I confirm that I am at least 18 years old. I understand that SX Consent is not a healthcare provider, telemedicine provider, laboratory, medical device, medical advisor, or emergency service. I expressly consent to SX Consent processing health-related declarations, document status, last-tested date, vaccination-readiness selections, health-readiness selections, and related metadata as described in the Health Data Handling Policy, Sensitive Data Consent, Privacy Policy, and Terms and Conditions. I understand that SX Consent does not verify medical truth, does not provide medical advice, does not guarantee health safety, and does not create future invitation acceptances.

37. Contact Us

For questions about this Health Data Handling Policy, contact:

Privacy: Click Here
Legal: Click Here
Security: Click Here
Support: Click Here

Mailing Address:

Beniquez Sanchez and Company LLC
1317 Edgewater Dr. Num. 7387
Orlando, FL 32804