This policy, last updated August 15, 2025, covers Calm.com, Inc., its subsidiaries and affiliates when handling Consumer Health Data through Calm Sleep websites and the mobile app, customer support and other interactions. Consumer Health Data means information that may meet applicable US state-law definitions, including Nevada and Washington laws. It supplements the Calm Privacy Policy; capitalized terms come from that policy or applicable law unless stated otherwise.
Supporting quotations
Last Updated August 15, 2025
This Consumer Health Privacy Policy explains how Calm.com, Inc. and our subsidiaries and affiliates (“Calm”, “we”, “our”, or “us”) collect, use, and disclose certain health information about you when you access or use our Calm Sleep website(s) and mobile application (collectively, the “Services”), and when you contact our customer service team or otherwise interact with us. This Consumer Health Privacy Policy is a supplement to the Calm Privacy Policy and applies to personal information and other data that may fall within the definition of “consumer health data” under applicable United States state laws, including Nevada’s Consumer Health Data Privacy Act and Washington’s My Health My Data Act (“Consumer Health Data”). We encourage you to review the Calm Privacy Policy to learn more about our privacy practices and our commitments to you. Capitalized terms used below have the same definitions as in the Calm Privacy Policy or in the applicable laws, unless otherwise noted.
Not stated here
The linked Calm Privacy Policy and applicable laws are not supplied here; their additional terms and definitions are not analyzed.
Legal Rights & Agreement Rules · Company practice
Calm may change this policy
Calm may change this policy from time to time. It will revise the date at the top when it makes changes; additional notice is only something it may provide in some cases.
Supporting quotations
We may change this Consumer Health Privacy Policy from time to time. If we make changes, we will revise the date at the top of the policy and, in some cases, we may provide you with additional notice.
Legal Rights & Agreement Rules · Restriction or exception
Third-party products have separate privacy policies
This policy does not cover third-party websites or products. Calm directs you to their separate privacy policies to understand how those parties use and store your information.
Supporting quotations
This Consumer Health Privacy Policy does not apply to third-party websites or producats. Please separately review their privacy policies to understand how your personal information is used and stored by those third parties.
Data Access & Collection · Company practice
Permission enables health-app and wearable data collection
Depending on how you use Calm Sleep, Calm may collect Consumer Health Data about bodily functions, vital signs, symptoms or measurements. With your permission, it may receive health-app or wearable data such as sleep hours, heart rate, wrist temperature and blood oxygen. The stated sources are third-party apps or products you choose to integrate or link to your Calm Sleep account.
Supporting quotations
We may collect certain Consumer Health Data about you depending on how you engage with our Services. This health information may fall under the following specific categories of Consumer Health Data:
Bodily functions, vital signs, symptoms, or measurements. With your permission, we may receive data from your mobile device’s health app (like Apple HealthKit or Google Health Connect) or wearable, such as hours of sleep, heart rate, wrist temperature, and blood oxygen.
We may collect Consumer Health Data in the following ways:
from third-party apps (like Apple HealthKit) or other third-party products (like a connected fitness device) with which you have chosen to integrate or link your Calm Sleep account.
Use & Processing · Company practice
Health data may personalize sleep services and reports
Calm may use Consumer Health Data to provide Calm Sleep services, including personalizing your experience and sending sleep reports and recommended actions.
Supporting quotations
We may use your Consumer Health Data in the following ways:
to provide our Services to you, including by personalizing your Calm Sleep experience and sending you reports on your sleep and recommended actions;
Use & Processing · Company practice
Health data may be used to answer support requests
Calm may use Consumer Health Data to provide support when responding to your questions, concerns, complaints or other requests.
Supporting quotations
We may use your Consumer Health Data in the following ways:
to provide you support when responding to your questions, concerns, complaints, or other requests;
Use & Processing · Company practice
Health data may be used to create anonymous or aggregated datasets
Calm may use Consumer Health Data to create anonymous or aggregated datasets. This statement describes a use of the data; it does not say all collected health data is anonymous.
Supporting quotations
We may use your Consumer Health Data in the following ways:
to create anonymous or aggregated data sets;
Security & Safeguards · Company practice
Health data may be used to address fraud and harmful activity
Calm may use Consumer Health Data to protect itself, you and others, including preventing, detecting or responding to fraud, security incidents, harassment and other malicious or illegal activity.
Supporting quotations
We may use your Consumer Health Data in the following ways:
to protect ourselves, you, and others such as by taking actions to prevent, detect, or respond to fraud, security incidents, harassment, or other malicious or illegal activity;
Legal Rights & Agreement Rules · Company practice
Health data may be used for contractual and legal compliance
Calm may use Consumer Health Data to meet its compliance, third-party contractual agreements and other legal obligations. The stated purpose includes contractual obligations as well as legal ones.
Supporting quotations
We may use your Consumer Health Data in the following ways:
to comply with our compliance, third party contractual agreements, and other legal obligations;
Legal Rights & Agreement Rules · Company practice
Health data may be used to exercise or defend legal rights
Calm may use Consumer Health Data to establish or exercise its legal rights or defend against legal claims.
Supporting quotations
We may use your Consumer Health Data in the following ways:
to establish or exercise our legal rights or defense against legal claims; and
Use & Processing · Company practice
Other health-data uses may occur with requested and received consent
Calm also lists other uses of Consumer Health Data with your consent where it requests and receives that consent. This is the condition for the listed other-use provision, rather than a statement that every earlier listed use requires separate consent.
Supporting quotations
We may use your Consumer Health Data in the following ways:
otherwise with your consent where requested and received.
Sharing & Disclosure · Company practice
Service providers receive health data needed to work for Calm
For the purposes and uses listed in this policy, Calm discloses Consumer Health Data to service providers and vendors that need it to perform services on Calm’s behalf. Examples include cloud storage, account management and powering the services. The policy calls these recipients processors under Consumer Health Data Laws.
Supporting quotations
We may disclose your Consumer Health Data to achieve the purposes and uses listed above. The categories of recipients to whom we disclose your Consumer Health Data with are:
Service providers: We disclose Consumer Health Data to service providers and vendors (also known as “processors” under the Consumer Health Data Laws) that need access to such data to perform services on our behalf, such as to provide cloud storage, manage user accounts, and power our Services.
Sharing & Disclosure · Company practice
Health data may be disclosed during business transactions
For the purposes and uses listed in this policy, Calm may disclose Consumer Health Data in connection with a merger, sale of company assets, financing or acquisition of all or part of its business by another company.
Supporting quotations
We may disclose your Consumer Health Data to achieve the purposes and uses listed above. The categories of recipients to whom we disclose your Consumer Health Data with are:
Business transfer: We may disclose Consumer Health Data in connection with any merger, sale of company assets, financing or acquisition of all or a portion of our business by another company.
Sharing & Disclosure · Company practice
Health data may be disclosed for legal or protective reasons
For the purposes and uses listed in this policy, Calm may disclose Consumer Health Data for legal reasons or as necessary to protect Calm or others.
Supporting quotations
We may disclose your Consumer Health Data to achieve the purposes and uses listed above. The categories of recipients to whom we disclose your Consumer Health Data with are:
Other: We may disclose Consumer Health Data for legal reasons or as necessary to protect Calm or others.
Sharing & Disclosure · User right or choice
You can request health-data categories and recipient contact details
Under applicable privacy laws and subject to exceptions, you can ask what categories of Consumer Health Data Calm collects, shares or sells. You can also obtain a list of all third parties and affiliates with whom Calm has shared or sold your data, with an active email address or other contact method. Requests may be denied when an exception applies, including legal retention duties or inability to authenticate the request using commercially reasonable efforts.
Supporting quotations
As provided for in the Privacy Rights section of the Calm Privacy Policy, you may make requests about your personal information. Applicable privacy laws provide you certain specific rights with respect to your Consumer Health Data law subject to exceptions. Specifically:
The right to know what categories of Consumer Health Data we collect, share, or sell. You also have the right to obtain a list of all third parties and affiliates with whom we have shared or sold your Consumer Health Data, and an active email address or other mechanism that you may use to contact these third parties. If you are a Washington resident or otherwise subject to Washington law, you also have the right to access your Consumer Health Data that we collect, share, or sell.
You may exercise your rights by contacting support@calm.com with your request. As further stated in the Calm Privacy Policy, your request may be denied where an exception applies, including but not limited to, where we are legally required to maintain your Consumer Health Data or if we are unable to authenticate the request using commercially reasonable efforts.
Not stated here
Describing rights concerning data sales does not by itself establish that Calm sells Consumer Health Data.
The linked Calm Privacy Policy text is not supplied here; this card cannot describe its additional rights procedures, definitions or exceptions.
Data Access & Collection · User right or choice
Washington law provides an additional health-data access right
If you are a Washington resident or otherwise subject to Washington law, the policy also gives you the right to access the Consumer Health Data Calm collects, shares or sells. Applicable exceptions remain, including required legal retention or inability to authenticate a request using commercially reasonable efforts.
Supporting quotations
As provided for in the Privacy Rights section of the Calm Privacy Policy, you may make requests about your personal information. Applicable privacy laws provide you certain specific rights with respect to your Consumer Health Data law subject to exceptions. Specifically:
The right to know what categories of Consumer Health Data we collect, share, or sell. You also have the right to obtain a list of all third parties and affiliates with whom we have shared or sold your Consumer Health Data, and an active email address or other mechanism that you may use to contact these third parties. If you are a Washington resident or otherwise subject to Washington law, you also have the right to access your Consumer Health Data that we collect, share, or sell.
You may exercise your rights by contacting support@calm.com with your request. As further stated in the Calm Privacy Policy, your request may be denied where an exception applies, including but not limited to, where we are legally required to maintain your Consumer Health Data or if we are unable to authenticate the request using commercially reasonable efforts.
Not stated here
The linked Calm Privacy Policy text is not supplied here; this card cannot describe its additional rights procedures, definitions or exceptions.
Retention & Deletion · User right or choice
You can request deletion by Calm and its service chain
Subject to applicable privacy-law exceptions, you have the right to have Calm, its affiliates, service providers and contractors delete the Consumer Health Data they have about you. This is not an unconditional deletion promise: a request may be denied where an exception applies, including a legal duty to retain the data or inability to authenticate the request using commercially reasonable efforts.
Supporting quotations
As provided for in the Privacy Rights section of the Calm Privacy Policy, you may make requests about your personal information. Applicable privacy laws provide you certain specific rights with respect to your Consumer Health Data law subject to exceptions. Specifically:
The right to have us, as well as our affiliates, service providers, and contractors, delete the Consumer Health Data we have about you.
You may exercise your rights by contacting support@calm.com with your request. As further stated in the Calm Privacy Policy, your request may be denied where an exception applies, including but not limited to, where we are legally required to maintain your Consumer Health Data or if we are unable to authenticate the request using commercially reasonable efforts.
Not stated here
The linked Calm Privacy Policy text is not supplied here; this card cannot describe its additional rights procedures, definitions or exceptions.
Use & Processing · User right or choice
You can withdraw consent where Calm relies on it
You have the right to withdraw consent relating to your Consumer Health Data where Calm relies on consent to collect, use or share it. The stated right is limited to consent-based handling; it does not say all processing must stop. Applicable request exceptions and commercially reasonable authentication requirements remain.
Supporting quotations
As provided for in the Privacy Rights section of the Calm Privacy Policy, you may make requests about your personal information. Applicable privacy laws provide you certain specific rights with respect to your Consumer Health Data law subject to exceptions. Specifically:
The right to withdraw consent related to your Consumer Health Data where we rely upon consent to collect, use, or share your Consumer Health Data.
You may exercise your rights by contacting support@calm.com with your request. As further stated in the Calm Privacy Policy, your request may be denied where an exception applies, including but not limited to, where we are legally required to maintain your Consumer Health Data or if we are unable to authenticate the request using commercially reasonable efforts.
Not stated here
The linked Calm Privacy Policy text is not supplied here; this card cannot describe its additional rights procedures, definitions or exceptions.
Cross-references
qualifies (model-proposed): Permission enables health-app and wearable data collection — qualifies: Permission-based receipt of linked health-app or wearable data is subject to the stated right to withdraw consent where Calm relies on it; the withdrawal card preserves that scope and applicable request exceptions.
Legal Rights & Agreement Rules · User right or choice
Exercising these privacy rights should not lead to discrimination
The policy states a right not to receive discriminatory treatment for exercising the privacy rights described above: knowing and accessing health data as applicable, deletion, and withdrawing consent where relied upon.
Supporting quotations
The right not to receive discriminatory treatment for the exercise of the privacy rights described above.
Legal Rights & Agreement Rules · Procedure
Send health-data rights requests to support@calm.com
For Consumer Health Data covered by this Calm Sleep policy, you may exercise applicable rights by emailing support@calm.com. Requests may be denied where an exception applies, including legal duties to retain data or inability to authenticate the request using commercially reasonable efforts. The policy refers to the Calm Privacy Policy for additional rights information. This policy does not govern third-party websites or products; their own privacy policies apply.
Supporting quotations
This Consumer Health Privacy Policy explains how Calm.com, Inc. and our subsidiaries and affiliates (“Calm”, “we”, “our”, or “us”) collect, use, and disclose certain health information about you when you access or use our Calm Sleep website(s) and mobile application (collectively, the “Services”), and when you contact our customer service team or otherwise interact with us. This Consumer Health Privacy Policy is a supplement to the Calm Privacy Policy and applies to personal information and other data that may fall within the definition of “consumer health data” under applicable United States state laws, including Nevada’s Consumer Health Data Privacy Act and Washington’s My Health My Data Act (“Consumer Health Data”). We encourage you to review the Calm Privacy Policy to learn more about our privacy practices and our commitments to you. Capitalized terms used below have the same definitions as in the Calm Privacy Policy or in the applicable laws, unless otherwise noted.
This Consumer Health Privacy Policy does not apply to third-party websites or producats. Please separately review their privacy policies to understand how your personal information is used and stored by those third parties.
As provided for in the Privacy Rights section of the Calm Privacy Policy, you may make requests about your personal information. Applicable privacy laws provide you certain specific rights with respect to your Consumer Health Data law subject to exceptions. Specifically:
You may exercise your rights by contacting support@calm.com with your request. As further stated in the Calm Privacy Policy, your request may be denied where an exception applies, including but not limited to, where we are legally required to maintain your Consumer Health Data or if we are unable to authenticate the request using commercially reasonable efforts.
Not stated here
The linked Calm Privacy Policy is outside this supplied document. Its additional request terms and exceptions are not analyzed; the examples of denial grounds here are not exhaustive.
The linked Calm Privacy Policy text is not supplied here; this card cannot describe its additional rights procedures, definitions or exceptions.
Cross-references
qualifies (model-proposed): You can request deletion by Calm and its service chain — qualifies: Deletion requests use the stated support contact and remain subject to exceptions, including legally required retention and inability to authenticate using commercially reasonable efforts. These limits are included in the deletion card itself.
Legal Rights & Agreement Rules · Company commitment
Requests get a response within 45 days, with a conditional extension
Calm will respond to a rights request within 45 days after receipt. It reserves an additional 45 days when reasonably necessary, provided it notifies you of the extension within the initial 45 days. This is a response deadline, not a promise that the request will be granted.
Supporting quotations
We will respond to your request to exercise your right(s) within forty-five (45) days after receipt, and we reserve the right to extend the response time by an additional forty-five (45) days when reasonably necessary and provided consumer notification of the extension is made within the first forty-five (45) days. An authorized agent may submit a request to exercise the opt-out right on your behalf.
Legal Rights & Agreement Rules · User right or choice
An authorized agent may submit an opt-out request for you
An authorized agent may submit a request to exercise the opt-out right on your behalf. This sentence does not extend the agent permission to every kind of privacy request.
Supporting quotations
We will respond to your request to exercise your right(s) within forty-five (45) days after receipt, and we reserve the right to extend the response time by an additional forty-five (45) days when reasonably necessary and provided consumer notification of the extension is made within the first forty-five (45) days. An authorized agent may submit a request to exercise the opt-out right on your behalf.
Not stated here
This document does not specify the scope of the referenced opt-out right or an agent-authorization procedure.
Legal Rights & Agreement Rules · Procedure
Nevada residents may appeal a denied request
If you are a Nevada resident and Calm denies your request, you may appeal. Calm will include appeal steps in its response and, within 45 days after receiving the appeal, tell you in writing what action it took or did not take and why. If the appeal is unsuccessful, you may complain to the Nevada Attorney General through the linked complaint page.
Supporting quotations
How to appeal decisions about your rights.
Nevada: If you are a Nevada resident and your request is denied, you may appeal our decision and we will provide the steps to appeal as part of responding to your request. Within forty-five (45) days of receipt of an appeal, we will inform you in writing of any action taken or not taken, including an explanation of our reasons in reaching the decision. If your appeal is not successful, you may submit a complaint with the Nevada Attorney General at https://ag.nv.gov/Complaints/CSU_Complaints___FAQ/.
Legal Rights & Agreement Rules · Procedure
Washington residents and people located there may appeal
If you are a Washington resident or located in Washington and Calm denies your request, you may appeal. Calm will provide appeal steps with its response and, within 45 days after receiving the appeal, explain in writing any action taken or not taken and the reasons. If the appeal is unsuccessful, you may complain to the Washington State Attorney General through the linked complaint page.
Supporting quotations
How to appeal decisions about your rights.
Washington: If you are a Washington resident or located in Washington and your request is denied, you may appeal our decision and we will provide the steps to appeal as part of responding to your request. Within forty-five (45) days of receipt of an appeal, we will inform you in writing of any action taken or not taken, including an explanation of our reasons in reaching the decision. If your appeal is not successful, you may submit a complaint with the Washington State Attorney General at https://www.atg.wa.gov/file-complaint.