Consumer Health Data Privacy Policy

Effective date: September 10, 2026

This is a separate policy from our general Privacy Policy, published on its own as required by the Washington My Health My Data Act (RCW 19.373) and Nevada's consumer health data law (NRS 603A.400–.550). It applies to everyone who uses the App, not only residents of Washington or Nevada.

Categories of consumer health data we collect, and why

Sleep duration and timing; nutrition and dietary habits; physical activity; smoking status and frequency; alcohol consumption; self-reported stress, social connection, cognitive activity, and sense of purpose; age, sex, height, weight, and body fat percentage. We use this data solely to calculate and display your personal "health capital" score and how it changes with your habits. We do not use it for advertising, profiling for marketing, or eligibility decisions of any kind (employment, insurance, credit, or otherwise).

Categories of sources

All of the above comes directly from you, entered by hand into the App. We do not obtain health data about you from any other source.

Categories of consumer health data shared, and with whom

We do not share or sell any of the health data listed above with any third party, for any purpose. The only information that leaves your device is your email address, if you create an account, processed by our authentication provider Supabase solely so you can log back in. Supabase does not receive your health data — it stays on your device.

Where this data is stored

Your consumer health data is stored only locally, in your browser's storage on your own device. We do not maintain a server-side database of it.

The trade-off you should know about: because we never receive this data, we also can't restore it. If you clear your browser's site data, open the App in a different browser or in an in-app browser (Telegram, Instagram, and similar apps run their own isolated browser that doesn't share storage with Safari or Chrome), switch devices, or lose your device, your health data is gone — there is no backup on our end to recover it from. Creating an account does not change this; it only saves your email so you can sign in.

Your consent

Before you enter any health information, the App presents a clear, standalone consent checkbox that names and links this policy, our Privacy Policy, and our Terms of Use — separate from any other agreement. Checking it and proceeding is your affirmative opt-in consent. Because we never sell or share your consumer health data, no separate sale/share authorization is requested, as none is needed.

Your rights

You have the right to: (1) confirm and access — ask us to confirm whether we are collecting, sharing, or selling your consumer health data, and to access it, including a list of any third parties it has been shared with (currently none); (2) delete — request deletion of your consumer health data; since it lives on your device, you can delete it yourself at any time by clearing your browser's local storage for this site, or email us to delete your account email from our servers; (3) withdraw consent — stop the collection of new consumer health data at any time by discontinuing use of the App.

We will respond to requests under (1) and (2) within 45 days of receipt, extendable once by an additional 45 days when reasonably necessary. If any account data is held in backups, deletion from those backups may take up to 6 months. We will not discriminate against you for exercising these rights.

To exercise any of these rights, email support@humanchange.app.

If we refuse your request: appeal

If we decline to act on your request, we will tell you why. You may appeal that decision within a reasonable time by replying to our decision or emailing support@humanchange.app with "Appeal" in the subject line. We will respond to your appeal in writing within 45 days, explaining our decision. If we deny the appeal, we will also provide you with a way to contact the Washington State Attorney General to submit a complaint, which you can do directly at atg.wa.gov/file-complaint.

No geofencing

We do not use geofencing or any location-based technology to identify, track, collect data from, or send notifications to users based on their proximity to a healthcare facility or any other location.

Changes

We will update this policy if our data practices change and will update the effective date above accordingly.

Contact: support@humanchange.app