About this policy

This policy is the consumer health data notice of Veronata, Inc., 2261 Market Street STE 22406, San Francisco, CA 94114, USA (“we”, “us”), the maker of PinkyBloom. It applies to the “consumer health data” we handle under the Washington My Health My Data Act, Nevada’s consumer health data law and similar laws, whether or not you live in those states. It adds to, and does not replace, our Privacy Policy, which describes all of our data practices in full.

1. What consumer health data we collect, and why

Cycle, pregnancy and life-stage information you log: period and cycle dates, flow, symptoms, mood and energy entries, pregnancy week and due date, and postpartum, perimenopause and menopause information. Why: to run the tracker, make predictions and show your calendar. This stays on your phone unless you turn on iCloud Sync (your own iCloud account), use a feature described below, or share with your partner.
Health information read from your phone, if you allow it: menstrual flow and matching symptoms from Apple Health (iPhone) or Health Connect (Android), and, only if you connect wearable data, resting heart rate, heart-rate variability, active energy, exercise time, body weight and sleep. Why: to fill in your log and your insights. It is read and used on your phone and is not sent to us.
What you tell your Coach: your messages, and a transcript of your voice calls (never the audio), together with context from your tracker such as your life stage, cycle day and phase, and forecast for the next 14 days, and the notes the Coach keeps about you. Why: to write the answer. This can include health information that you choose to mention. We do not send your logged symptoms or notes, your partner chat or your Apple Health data to the Coach.
Photos you choose to give the app: a meal or a nutrition label for the food log, or screenshots of another period tracker to import your history. Why: to read them for you. We do not keep them.
Conversations we keep for review: the text of Coach conversations, with obvious identifiers (email addresses, phone numbers, card numbers, street addresses) removed, kept under a random install identifier, not your name, for up to 90 days and then deleted. Why: to check and improve the quality and safety of the Coach. In the European Economic Area, the United Kingdom, Switzerland and wherever the law requires permission first, this is off until you turn on “Help improve the Coach”. Conversations that touch a crisis or eating care are kept only as a flag, without their text.
Account and purchase records, if you create an account or buy voice time: these are not health data, but where an optional account is used it can be linked to the notes the Coach keeps about you.

We collect your location, rounded to about 110 metres (about a city block), only while you are using the app, only when you allow it, and only for a request that needs it, such as finding a place or the weather near you. We use it to answer that request and do not store it beyond it (during a call it is held with the call and deleted within about two hours). We do not use your consumer health data for advertising, and we do not use it to build profiles for anyone else.

2. Where we get it

From you: what you log, say or photograph, and what you choose to import.
From your phone, with your permission: Apple Health or Health Connect, and your calendar or location (rounded to about 110 metres) when you allow them for a request.

We do not buy consumer health data and we do not get it from data brokers.

3. Who we share it with

We never sell consumer health data. We do not share it for advertising. We share it only with these categories of recipients, and only as far as the feature needs:

Service providers acting for us: hosting, database and file-storage providers; AI model, speech-to-text, text-to-speech and voice-call providers (they receive what you say to the Coach and the tracker context described above, and we do not authorise them to use it to train their models); web-search, places and weather providers when you ask the Coach to look something up (these lookups do not carry your identifiers); and an email delivery service for support messages you send us.
Your partner, only what you choose to share: through partner sharing in PinkyBond. You set the scope, the data is end-to-end encrypted so we cannot read it, and you can pause or stop it at any time.
Legal and safety: authorities or others when we believe in good faith that the law, a valid legal process or someone’s safety requires it. Where the law lets us, we tell you first.
A business transfer such as a merger or sale of the business, in which case the same protections must continue to apply.

We have no affiliates that receive consumer health data linked to you. Apple and Google distribute the app and process purchases; they do not receive your logged health data from us. To get the list of the specific third parties we have shared your data with, ask us (see section 4).

4. Your rights, and how to use them

You can:

Confirm and access. Ask whether we collect, share or sell your consumer health data, and get a copy of what we hold, plus a list of the third parties and affiliates it has been shared with. The app can export everything you logged (Settings, export as JSON, CSV or PDF).
Withdraw consent. Turn off “Help improve the Coach” in Settings (this also deletes what we kept for your phone), turn off iCloud Sync, revoke Apple Health, Health Connect, location, calendar or microphone permission in your phone’s settings, or stop sharing with your partner. You can stop using the Coach at any time.
Delete. “Delete what I’ve shared” in Settings deletes the Coach conversations we kept for your phone. Remove Partner or Delete All Data deletes what our servers hold for your pairing. Where you created an account, deleting it removes the account and the server memory linked to it, including the conversations kept for review from the phones you signed in on. Deleting the app removes the data on your phone.

To make a request we cannot do in the app, use our contact form and say that it is a consumer health data request. We may need to confirm it is you. We respond within 45 days, and may extend that once by 45 more days if we tell you why. When you ask us to delete, we also tell the providers that hold the data for us to delete it, and complete deletion from archived or backup copies within six months.

Appeal. If we decline a request, tell us through the same contact form with the subject “Appeal” and we will answer within 45 days and explain our decision. If you are still not satisfied you can contact the Washington State Attorney General (atg.wa.gov) or the attorney general of your state.

5. Security, and changes

We protect consumer health data with encryption in transit, access controls and, for partner sharing, end-to-end encryption that we cannot decrypt. The conversation review tool is access-controlled and used by a small team under confidentiality. No system is perfectly secure.

If we change what consumer health data we collect or share, or why, we will update this page, and we will ask for your consent first where the law requires it.

PinkyBloom provides general wellness information and is not a medical device or a substitute for a healthcare professional.