Consumer Health Data Privacy Policy

This policy covers the health information you add to WarTable Human, the personal side of WarTable at human.wartable.ai, provided by WarTable, LLC ("WarTable," "we," "us"), and what happens to it when you meet other members in the Mesh: your deck, Find, the Draw, intros, messages, blocks and reports. It's our Consumer Health Data Privacy Policy. Our Privacy Policy covers everything else, and it applies to WarTable Human too, except where this policy says something more specific.

The short version

You decide what goes on your Player Card. It's encrypted with a key unique to you.
We ask for your consent before we collect your health information, and again, separately, before other members can see it.
Other WarTable Human members see only what you leave visible. Your score, tier and openness always show, and they're calculated from your whole record.
To make Find and the Draw work, we keep an unencrypted copy of what members can already see on your published card.
Your messages are encrypted, but WarTable holds the keys, so they aren't end-to-end encrypted.
Your name always shows, and members near you in the Mesh may see who you've traded cards with.
We don't sell your health information, we don't use it for advertising, and we don't train AI models on it.
Nobody at WarTable opens your record, your documents or your messages unless you ask us to help with them, a member reports something to us, we need to protect someone's safety, or the law requires it.
You can see, correct, export or delete it, or withdraw your consent, at any time.

Who this covers

WarTable Human is open to people 18 and older only, and for now you can join only by invitation. It's available to US residents only for now.

What we collect

You decide what to add. Your record can hold:

Basics: your sex, birth year, height, weight and the medications you list.
Health records: readings such as heart and cholesterol, metabolic and organ markers, thyroid, blood and immunity, immunizations, sexual health testing, mental health, body composition and performance, with the date each was taken.
Life records: skills, survival training, education, work, certifications, travel, community, practice, philosophy, and what you write about yourself.
Quick answers: your answers to short questions about your mental, social and spiritual life.
Documents you upload: lab reports, scans and clinic records you ask us to read into your card (see "Health documents read by AI" below).
Files you import: a profile file you choose to import into your card.
Your card photo, if you add one.
About you: what you're looking for (such as Dating, Networking or Friends), your interests, goals and labels, and your dating preferences.
Your Mesh activity and settings: who you've traded cards with, your messages, the intros you make and receive, your blocks and reports, who can find you and the tiers you're open to, your saved dealbreakers, and whether you show when you're online.
When you were last active anywhere in WarTable.
Your timezone, so your day in WarTable Human starts at your own midnight. If your WarTable account doesn't have one, we fill it in from your browser. It's part of your WarTable account, so it's used across WarTable, and if you're in a WarTable Command workspace, your teammates can see it.

From what you add, we calculate your scores: your experience points (XP), your grade on each attribute, your Rarity tier and your Human Optimization Quotient (HOQ). A new reading is added as a new entry, so your history is kept until you delete it.

Where it comes from

Only from you: what you type in, the documents you upload, and the files you import. We don't buy health information about you, and we don't collect it from other companies, apps or devices. If we ever add a connection to a health app or device, it will be one you choose to turn on, and we'll update this policy first.

Other members can add information about you too: a member who introduces you to someone picks something you're both looking for as the reason, and a member who reports you picks a reason and can add a note. Neither ever adds to your record or your card.

Why we collect it

To build your Player Card and calculate your scores.
To show your card to the members you allow, as your settings say.
To read the documents you upload, when you ask us to.
To run the Mesh: your deck, Find, the Draw, intros and messages.
To keep members safe: to carry out blocks, and to review reports.
To keep WarTable Human secure and working, and to fix problems.
To meet legal obligations.

We don't use it for anything else. In particular, we don't use it for advertising, and we don't train AI models on it.

Your consent

We ask for your consent twice, separately:

To collect it: when you claim your card, before you add anything.
To share it: when you publish your card, before any other member can see it.

You can withdraw either at any time. Withdrawing consent to share means unpublishing your card. Withdrawing consent to collect means we stop and delete what you ask us to (see "Deleting your health information" below).

How it's protected

Encrypted, with a key unique to you. The basics on your card, every entry (including what it is, its value and its notes), your uploaded documents and what we read from them, your About answers and your saved dealbreakers are encrypted with AES-256-GCM, using a key derived just for you. Encrypted data is tied to your account, so it can't be read as anyone else's.
Messages: encrypted the same way, with a key derived for each conversation.
What isn't encrypted: what we need to run WarTable Human without opening your record. This includes:
- ID numbers, dates, your card's @handle, whether your card is published, the visibility you set on each item, which sections, basics and About answers you've hidden, and who has asked to see what and your answer;
- your find range, the tiers you're open to, and whether you show when you're online;
- the sex you gave when you claimed your invite, and who invited you;
- for each document, its status, file type, size, a fingerprint of the file, and what the read cost us;
- who you've traded cards with, blocked or been introduced to, and what each intro was for; who the Draw dealt you, why, and what you did with each card; and for each message, who sent it, when, whether it was edited, and whether it has been read;
- for each report, who filed it, who it's about, the reason, and what we decided, with any note our staff added;
- when you were last active;
- the searchable copy of your published card (see "The searchable copy" below).
Your card photo is stored privately, not encrypted with your key. It opens only through links that expire after an hour, and anyone holding a link can open the photo until it expires.
Your account photo (the profile photo of your WarTable account, not your card photo) is stored at a public link.
Who holds the keys: WarTable does. The master key is held in our systems, not on your device, because our servers have to read your record to score it and to show other members what you've chosen to share. This is encryption at rest, not end-to-end encryption.
Staff access: our staff tools don't display your record or your messages, except the copies kept with a report (see "Blocking and reporting" below). They do show your email, the sex you gave when you claimed your invite, and who invited you. Nobody at WarTable opens your record, your documents or your messages unless you ask us to help with them, a member reports something to us, we need to protect someone's safety, or the law requires it.

Who can see your card

Before you publish it: nobody else. Your card is private until you choose to publish it.
After you publish it: other WarTable Human members can open your card. That means members who are 18 or older and whose membership is active. People who only use WarTable Command, our business product, can't, and neither can a member you've blocked or who has blocked you. Your card is never published to the open internet or to search engines. Your find range and tier settings only shape Find and the Draw: any member with your link or @handle can open your published card.
Your name (your first name and last initial) always shows on your card and can't be hidden, and so does your @handle if you've set one.
Your card photo shows to every member who can see your card, wherever your card appears: on the card itself, in Find, in the Draw, in decks and in intros. We remove location, camera and time details from a photo when you upload it.
Your link and QR code: "Show my code" makes a QR code of your card's link. It opens your card for any member who scans it, the same as sharing the link. It doesn't open for anyone who isn't a member.
What shows by default: everything you've added shows, unless you hide it. Before your card goes live, you see exactly what will show, sensitive records included, so you can hide anything first.
Your choices for each stat:
- Visible: members see it.
- Hidden: members see a locked line in the section it belongs to, but never what it is or its value, and they can ask to see it.
- Only me: it doesn't appear on your card at all, not even as a locked line.
Your choices for whole sections and basics: you can hide a whole section, such as Sexual health, or any of your basics one by one. Members see that a hidden section or basic exists, and can ask to see it. A section set to Only me isn't shown at all.
Older values: members see each stat's latest value, and for a lift or a run, your best too. Your older readings stay private unless you choose to share your full history.
What always shows: your HOQ, your tier, your attribute grades and XP, and how much of your card is open, as a percentage. These are calculated from your whole record, including items you've hidden. We never name a hidden item, but because scores always show, a member may be able to work out something about what's behind them.
Unpublishing: you can unpublish your card at any time, and members can no longer open it. Members you've traded cards with still see your name in their deck, and your conversations with them stay as they are.

Requests and shares

Asking to see something: a member who sees a hidden item, section or basic can ask to see it. You'll see their username and account photo with the request.
Your answer: you can approve or decline. Once you've declined, that member can't ask for that item again. You can withdraw an approval at any time.
Sharing first: you can also share a hidden item with a specific member without being asked.
When you unhide something: any pending requests for it are cleared, since everyone can now see it.
Notifications: we tell you about requests, approvals and shares in WarTable Human. If either of you can no longer use WarTable Human, the notification no longer names the other person.

Your deck (Mesh)

Trading cards: when you and another member trade cards, each of you adds the other's card to your deck. In your deck you see each member's HOQ, Stat XP and tier, and whether they're online. Trading cards doesn't show either of you anything else: hidden items still need a request.
Online status: your deck sees you as online when you've been active anywhere in WarTable in the last couple of minutes, including WarTable Command. You can turn off "Show when I'm online" at any time, and that hides the dot from your deck. It doesn't stop us recording when you were last active: our staff can see that, and if you're in a WarTable Command workspace, your teammates see you as online while you're active anywhere in WarTable, WarTable Human included.
Removing a card: you can remove a card from your deck at any time. We don't tell the other member that you declined their trade or removed their card. After a removal, your conversation with them can no longer be added to, so they may notice.

Find and the Draw

Who can find you: your card appears in Find to members who have published their own card, when the distance between you in the Mesh (your find range) and the tiers you're each open to allow it, both ways. Members already in your deck don't appear in your Find. Nobody is told when someone was left out, or when someone found them.
Filters: members can filter Find by tier, sex, age, how they're linked to people, what people are looking for, their interests, goals and labels, how open a card is, whether it's complete, and the values of visible stats. Members with Dating on can also filter by dating preferences. They can also filter by how recently someone had a sexual-health test, which uses your last test date only when your Sexual health section and every test in it are visible. A hidden item never matches a filter.
Your dealbreakers: the filters you save as dealbreakers are encrypted, only you see them, and they only narrow what you're shown. They never hide you from anyone.
Degrees: on cards, in Find and in the Draw, a member may see how they're linked to someone, such as "2nd · via Sam" or "Sam → Alex". That shows a chain of traded cards running through the members named. Your name can show as that link between other members, even if your own find range or tiers would keep you out of their Find. Only members whose cards are published are named this way, so unpublishing your card stops it; there's no other setting for it. Who invited whom is never shown.
The Draw: each day we deal you up to three cards from the same members Find would show you, within your dealbreakers, with a reason for each, such as shared interests or goals or a similar tier. The reasons use only what both of you have left visible. Nobody is told they were drawn. We keep a record of who was dealt to whom, why, and whether the card was flipped, traded or left, until either account is deleted.

Intros

Who can introduce you: a member who has you both in their deck can introduce you to each other, for something you're both looking for. A Dating intro is only possible between two members who both have Dating on. Your find range, the tiers you're open to and your dealbreakers don't apply to an intro from a member.
What you see: who made the intro, what it's for (something you're both looking for), and the other member's card.
Your answer: nothing happens unless you both accept. If you do, you trade cards. If either of you ignores it, nobody is told who ignored it. An intro nobody answers expires after 14 days. The member who made the intro only ever sees that it was sent.

Looking for and dating

Looking for: what you're looking for, such as Dating, Networking or Friends, shows on your card to every member who can see your card, Dating included, unless you hide it. Looking for is hidden as a whole, so to hide Dating you hide the whole list, or take Dating out of it.
Dating preferences: shown only to members who have Dating on and visible themselves, and only while your own Dating is visible.
Your sex and your dating preferences together may let a member work out your sexual orientation. You can hide either of them.
No dating matches: we don't match people for dating. The Draw picks people by shared interests, goals and tier, within your own dealbreakers, which can include sex and dating preferences. Members find each other through Find, the Draw and intros, under the rules above.
Meeting in person: our WarTable Human Terms have safety guidance for meeting someone from WarTable Human.

Messages

Who you can message: only members you've traded cards with. Messages are text only.
Encryption: your messages are encrypted at rest, with a key for each conversation. WarTable holds the keys, so this isn't end-to-end encryption.
Read status: we record when a message has been read, so its sender can edit it until then. There's no read receipt as such, but once a message has been read, its sender can no longer edit it, so they can tell it's been seen.
Edits: you can edit a message up to 10 times, while it's unread and while you're still in each other's deck. It shows as edited, and we keep each earlier version. Only our staff can see an earlier version, and only in a report about that message or conversation.
Deleting a conversation removes it for you only. The other member keeps their copy. A message is erased for good once you've both deleted it, and a whole conversation is erased for both of you if either of you deletes your account. Copies kept with a report are the exception (see "Blocking and reporting" below).
After a removal: a conversation with someone who's no longer in your deck stays readable for both of you, but neither of you can send or edit messages in it.
After a block: the conversation is hidden from both of you, but not erased, and it can still be reported. Unblocking doesn't bring it back; trading cards again does.
While suspended: a suspended member can't open or delete their conversations in the app. To have them deleted, email privacy@wartable.ai.
Notifications say only who sent you a message, never what it says.

Blocking and reporting

Blocking: you can block any member, at any time. It hides you from each other everywhere in WarTable Human: cards, Find, the Draw, decks, intros and messages. It removes them from your deck, cancels pending trades, requests and intros between you, and withdraws anything either of you had shared with the other. Unblocking doesn't restore any of it. They aren't told, though they may notice you've gone.
Reporting: you can report a card, a message, a conversation or an intro. You choose a reason and can add a note.
What our staff see in a report: only WarTable admins can open reports. They see:
- your name and email, and the reported member's;
- your reason and note, and how many earlier reports named the same member;
- for every report, whatever was reported: a copy of the reported member's card as it was when you reported it, without hidden items or dating preferences, and a copy of their card photo. The copy is made even if their card isn't published;
- for a message: the message, its earlier versions, and up to 20 messages before it from both of you;
- for a conversation: the latest 20 messages you still have, with their earlier versions;
- for an intro: who made it, who it was for, and the reason given.
You're asking us for help, so staff read these copies. Staff don't read messages otherwise. The copies are encrypted and kept with the report, even if the messages, the card or either account is later deleted.
The member you report is never told who reported them.
What can happen: a report can lead to a warning, a suspension, or removal from WarTable Human. A suspended or removed member can't see or reach other members, and other members can't see them. Removal also unpublishes their card and takes it out of every deck.
How long we keep reports: a report is kept while it's open, and deleted 2 years after our staff close it, with its copies. Reports about a member we've removed are kept with no end date, so the removal still holds.
Suspension and removal records: if we suspend or remove you, we keep a record of that decision linked to your account ID, even if you delete your account, so the decision still applies if you sign in again with the same account.

The searchable copy

Encrypted records can't be searched, so to power Find, the Draw, and the cards shown in decks, messages and intros, we keep an unencrypted copy of the parts of your published card that members can already see:

your tier, HOQ, Stat XP and openness;
your visible basics (sex, birth year, height and weight) and the values of your visible stats;
the date of your last sexual-health test, if your Sexual health section and every test in it are visible;
your visible About answers, and your dating preferences if they're visible;
whether your card is complete.

It never includes hidden items or your photo. We update it when you change your card and once a day, and we delete it when you unpublish your card or delete your account. While a member is suspended, it's kept but not shown to anyone.

Health documents read by AI

If you upload a lab report, scan or clinic record (a PDF or a photo), we send it to an AI model to pull out the readings it shows. Today that model is Anthropic's Claude, reached through OpenRouter, and we pay for the read.

Nothing is saved to your card until you confirm it. You review what the model found and keep only what you choose.
What we keep: the file you uploaded, encrypted with your key. What the model found is also encrypted, and it's deleted once you've confirmed your choices. The file stays until you delete it.
Deleting a document: deletes the file and what was read from it. We keep a short record, without any of the document's contents, that a read happened (its date, file type, size and cost), because each read counts towards your monthly allowance.
What the AI provider sees: the document, so it can read it. We send it only to providers that don't keep it after the read or use it for training, and we don't use your documents to train AI models.
AI makes mistakes. Check every reading before you keep it.

The waitlist and invites

The waitlist: when you join the WarTable Human waitlist on our website, we save your name, email, your confirmation that you're 18 or older, any invite code you arrived with, and the campaign information described in our Privacy Policy, in GoHighLevel, our CRM. We use it to keep your place in line and to email you when your card is ready. An invite code is saved as given; we don't check it at that point. The waitlist doesn't collect health information.
Invites: when you join through an invite, we record who invited you. Only WarTable can see who invited whom.

What we don't do with your health information

We don't sell it. We don't sell, rent or trade your health information to anyone, for money or anything else.
We don't use it for advertising. It isn't used for targeted advertising or shared with advertisers or data brokers.
We don't train AI models on it.
It isn't part of any workspace. Your Player Card belongs to you, not to a WarTable Command workspace. Workspace owners and admins have no special access to it.

Who we share it with

Only:

The members you let see it, as described above.
Our staff, when a member reports something, as described in "Blocking and reporting" above.
Our service providers, only to run WarTable Human: Google Cloud for hosting and storage, and OpenRouter and the AI provider for the documents you ask us to read.
When the law requires it, or when we need to protect someone's safety.

You can ask us for the list of service providers that have processed your health information.

If there's a breach

If we learn that your health information was accessed or shared without your permission, we'll tell you without unreasonable delay, and within 60 days of finding out. Where the law requires it, we'll also tell the Federal Trade Commission and other authorities.

Deleting your health information

One entry at a time: you can delete any entry on your card at any time. It's a hard delete: the encrypted entry is removed from our database, not just hidden.
Documents: you can delete any uploaded document at any time, as described above.
Your card photo: you can remove or replace it at any time. Copies kept with a report are the exception.
Everything: to delete your whole Player Card and account, email privacy@wartable.ai from your account's address. Within 90 days we'll delete your record, your card and its photo, your About answers and dealbreakers, your requests and shares, your deck, your intros and the Draw's record of you, and your uploaded documents, and confirm when it's done.
Your conversations: deleting your account erases every conversation you're part of, for the other member too.
What we keep after you delete your account: reports filed by you or about you, with their copies, for as long as "Blocking and reporting" above says; any record that we suspended or removed you; blocks other members placed on you, so they still apply if you sign in again with the same account; and, on the invite you claimed, the sex you gave when you claimed it, no longer linked to your account.
Backups: deleted data rolls off our backups on their normal schedule.

Your health data rights

You can see, correct, export and delete your health information, and withdraw your consent to us collecting or sharing it, at any time. To use these rights, email privacy@wartable.ai. We'll answer within 45 days, or sooner where the law requires. If we decline, you can appeal by replying to our answer, and we'll respond within the time the law sets. If your appeal is denied, you can contact your state's attorney general. We won't treat you differently for using these rights.

Health information and HIPAA

WarTable isn't a healthcare provider or a health plan, and we don't act for one. WarTable Human holds the health information you choose to add about yourself. We protect it as this policy describes, and state consumer health data laws may give you extra rights over it.

Changes to this policy

When we update this policy, we'll change the date at the top of this page. If the change is significant, we'll tell you by email or in WarTable Human before it takes effect, and we'll ask for your consent again where the law requires it.

Contact us

WarTable, LLC
9621 Lackland Rd, Saint Louis, MO 63114, United States
privacy@wartable.ai