Legal

Consumer health data (Washington, Nevada, Connecticut and other states)

This section is the consumer health data privacy policy that certain US states require. It supplements the other sections.

Information covered and sources: the information in the section "Your health information", which you enter yourself or which the Service calculates from what you enter, and the information described in the section "Information collected".
Purposes: the Service features you request, described in the section "Why". No other purpose.
Consent: we collect the health information in your account with your consent, and we disclose it to a third party that does not act on our behalf only with a separate consent. We do not sell it.
Who receives it: only the providers that act on our behalf, named in the section "Providers and locations", under contract. Categories of third parties we share it with for other purposes: none.
No geofencing: we do not use geofencing around health care facilities.
Your rights: to know whether we process your health information and to access it, with the list of the third parties and providers that received it; to withdraw your consent; to have it corrected; to have it deleted, including at the providers that received it and in backups; not to be discriminated against for exercising these rights. Write to the person in charge (section "Who is responsible"). We answer within 45 days, which may be extended once by 45 days where necessary, with notice. If we refuse, you may appeal by replying to our refusal; we answer the appeal within 45 days and tell you how to contact your state's attorney general.
Incidents: if your health information is disclosed or accessed without authorization, we notify you within the periods the applicable law sets, including the US federal health breach notification rule where it applies.