Consumer Health Data Privacy Policy

This policy describes how Alani Jones Foundation handles consumer health data. It is provided under the Washington My Health My Data Act and applies to everyone, including residents of Nevada under a similar law. It covers only consumer health data. Everything else is in our Privacy Policy.

1. The consumer health data we collect, and why

We collect the following categories, and only for the purposes given.

• Pregnancy and pregnancy loss. The type of loss, the date it happened, how far along the pregnancy was, and a due date if you give one. We use this to decide which of the thirty readings you are shown and in what order, because what helps after a first trimester loss is not what helps after a stillbirth.
• Your child. Your baby's name and whether you chose to name them. We use it so the app and its reminders can say their name rather than a blank.
• Your bereavement and mental state. What you write in the journal, the word you pick to describe a day, whether you went outside, and your answers to the question about how alone you feel. We use these to give your own writing back to you and to know whether the thirty days helped.
• A journal entry recorded in your own voice. Named separately because it is a different kind of data rather than another form of the same one: a voice is biometric and cannot be redacted. We do not collect it. If you record an entry instead of typing it, the recording is a file on your phone, it is never uploaded, and it is not in any backup we hold. The words you type are; the audio is not.
• An indication that you may need help urgently. If you report feeling completely alone, we record that and alert the Foundation so that a person knows. We use it for that alert only.
• Bereavement support you ask us for. What you tell us in a request for support or for a comfort box, and what you tell us in a survey about how you were doing. We use these to send you what you asked for and to understand whether it helped.

We collect nothing in these categories beyond what is necessary for the purposes above, and we do not use any of it for advertising.

2. Where it comes from

• You, when you answer the app's questions or write in it.
• You, when you fill in a form on this website.
• Your device, when the app tells our server which days you have completed so that your writing is backed up to your account.

We do not buy consumer health data, and we do not receive it about you from data brokers, hospitals, clinics or any other third party.

3. The consumer health data we share

We share the categories in section 1 only with the service providers that store and move it for us, and only so that Alani works. We do not share it for any other purpose.

We have never sold consumer health data and we do not sell it. Selling it would require your separate written authorization, and we do not ask for one.

4. Who we share it with

These are the categories of third parties, and the specific companies within them, that may handle consumer health data on our behalf. They act on our instructions and may not use it for their own purposes.

• Database hosting: Neon.
• Application hosting: Vercel.
• Account and sign-in: Clerk.
• Email delivery: Brevo. This is how an alert about a check-in, or a reply to a request you sent, reaches a person.
• Push notification delivery: Expo, and Apple or Google. A notification never carries a copy of what you wrote.

The Foundation has no affiliates. Analytics providers do not receive consumer health data: they do not run in the app, and the pages on this website where you describe a loss are excluded from them.

We would disclose consumer health data if the law required it of us, and we would tell you unless we were forbidden from doing so.

5. Your rights, and how to use them

You have the right to:

• Confirm whether we hold consumer health data about you, and get a copy, together with a list of everyone we shared it with.
• Withdraw your consent to our collecting it or sharing it.
• Have it deleted, including from our backups, and to have us tell the companies listed above to delete their copies.

To use any of these, write to legal@alanijonesfoundation.org saying which one you want. We will confirm we have received it, ask you only for what we need to be sure it is you, and answer within 45 days. If we need longer we will tell you why, and it will not be more than 45 days more. There is no charge and we will not treat you differently for asking.

If we refuse, we will tell you why and how to appeal. Send an appeal to the same address and a different person will consider it and reply within 45 days. If we deny your appeal, you may complain to the Washington State Attorney General at atg.wa.gov/file-complaint.