Consumer Health Data Privacy Policy

This policy is the consumer health data notice of Veronata, Inc., 2261 Market Street STE 22406, San Francisco, CA 94114, USA (“we”, “us”), the maker of PinkyBond. It applies to the “consumer health data” we handle under the Washington My Health My Data Act, Nevada’s consumer health data law and similar laws, whether or not you live in those states. It adds to, and does not replace, our Privacy Policy, which describes all of our data practices in full.

1. What consumer health data we handle, and why

PinkyBond is the partner’s app. It does not track your own cycle, and it never reads health data from your phone. The health-related information it handles is:

• What your partner chooses to share from PinkyBloom: for example her life stage, cycle phase and day, the mood and energy she shares, her forecast, and in pregnancy her week and next appointment. Why: to show it to you in the app. It travels end-to-end encrypted between the two phones; our server relays it as encrypted data that we cannot read, and deletes it once your phone has received it (after 30 days at most).
• What you tell your Coach: your messages, and a transcript of voice calls (never the audio), with the context you have given the app (such as your first name, how long you have been together, what you want to work on) and, only if she has allowed it in PinkyBloom (off by default), her life stage, cycle phase, the mood and energy she shares and your forecast. Why: to write the answer. This context goes in readable form to our AI model provider with your request. Without her permission none of her data is sent to the Coach. Any of her tasks that mention her health are replaced with “(private item)” before they are sent. The Coach never receives your chat with her or her messages.
• Conversations we keep for review: the text of Coach conversations, with obvious identifiers (email addresses, phone numbers, card numbers, street addresses) removed, kept under a random install identifier, not your name, for up to 90 days and then deleted. Why: to check and improve the quality and safety of the Coach. In the European Economic Area, the United Kingdom, Switzerland and wherever the law requires permission first, this is off until you turn on “Help improve the Coach”. Conversations that touch a crisis or eating care are kept only as a flag, without their text. The readable context about her is not part of what we keep for review.
• Photos you choose to add: a meal or a nutrition label for the food log. Why: to read it for you. We do not keep them.

We collect your location, rounded to about 110 metres (about a city block), only while you are using the app, only when you allow it, and only for a request that needs it, such as finding a place or the weather near you. We use it to answer that request and do not store it beyond it (during a call it is held with the call and deleted within about two hours). We do not use consumer health data for advertising, and we do not use it to build profiles for anyone else.

2. Where we get it

• From you: what you type, say or photograph for the Coach.
• From your partner, only what she chooses to share through PinkyBloom, and only in encrypted form.
• From your phone, with your permission: your calendar or location (rounded to about 110 metres) when you allow them for a request.

We do not buy consumer health data and we do not get it from data brokers.

3. Who we share it with

We never sell consumer health data. We do not share it for advertising. We share it only with these categories of recipients, and only as far as the feature needs:

• Service providers acting for us: hosting, database and file-storage providers; AI model, speech-to-text, text-to-speech and voice-call providers (they receive what you say to the Coach and the context described above, and we do not authorise them to use it to train their models); web-search, places and weather providers when you ask the Coach to look something up (these lookups do not carry your identifiers); and an email delivery service for support messages you send us.
• Your partner: what you send her in the chat, and nothing more. Her sharing with you is hers to control: she can pause or stop it at any time.
• Legal and safety: authorities or others when we believe in good faith that the law, a valid legal process or someone’s safety requires it. Where the law lets us, we tell you first.
• A business transfer such as a merger or sale of the business, in which case the same protections must continue to apply.

We have no affiliates that receive consumer health data linked to you. Apple and Google distribute the app and process purchases; they do not receive consumer health data from us. To get the list of the specific third parties we have shared your data with, ask us (see section 4).

4. Your rights, and how to use them

You can:

• Confirm and access. Ask whether we collect, share or sell your consumer health data, and get a copy of what we hold, plus a list of the third parties and affiliates it has been shared with.
• Withdraw consent. Turn off “Help improve the Coach” in Settings (this also deletes what we kept for your phone), turn off the Coach, or revoke calendar, location or microphone permission in your phone’s settings.
• Delete. “Delete what I’ve shared” in Settings deletes the Coach conversations we kept for your phone. Unpairing deletes what our servers hold for your pairing. Where you created an account, deleting it removes the account and the server memory linked to it, including the conversations kept for review from the phones you signed in on. Deleting the app removes the data on your phone.

To make a request we cannot do in the app, use our contact form and say that it is a consumer health data request. We may need to confirm it is you. We respond within 45 days, and may extend that once by 45 more days if we tell you why. When you ask us to delete, we also tell the providers that hold the data for us to delete it, and complete deletion from archived or backup copies within six months.

Appeal. If we decline a request, tell us through the same contact form with the subject “Appeal” and we will answer within 45 days and explain our decision. If you are still not satisfied you can contact the Washington State Attorney General (atg.wa.gov) or the attorney general of your state.

5. Security, and changes

We protect consumer health data with encryption in transit, access controls and, for what your partner shares, end-to-end encryption that we cannot decrypt. The conversation review tool is access-controlled and used by a small team under confidentiality. No system is perfectly secure.

If we change what consumer health data we handle or share, or why, we will update this page, and we will ask for your consent first where the law requires it.

PinkyBond provides general wellness and relationship information and is not a medical device or a substitute for a healthcare professional.