Legal & help · English
Consumer Health Data Privacy Notice
Draft scope
UNPUBLISHED ENGLISH WORKING DRAFT — NOT APPROVED FOR PRODUCTION. No public effective date has been set. Legal review, required appointments and permissions, final consent/rights procedures, and actual release qualification remain outstanding. These documents do not activate a customer contract or certify compliance. UNPUBLISHED CONDITIONAL DRAFT. Prepared for counsel to assess Washington and other applicable consumer-health-data laws. This is a separate health-data notice, not a statement that every element of the law applies or has been implemented. Resolve affected jurisdictions, consent, service-provider contracts and deletion procedures before health-data processing in scope.
Categories and sources
Health information is prohibited in Kintwined stories, family questions, interviews, attachments and imports. The authored catalog has no explicit health prompts and Settings no longer offers health-topic opt-in. Nevertheless, free text, recordings, images, imports, older records and family narratives may reveal physical/mental health, disability, reproductive/sexual health or related information about users and other people. No automated content screening or health-data removal is implemented. Kintwined is not a clinical provider, DNA-test service or biometric identification service and does not request GPS location or operate health-service geofencing. The prohibition does not establish that consumer-health laws are inapplicable.
Purpose and use
Health-data collection or sharing is not an intended or permitted purpose of this memory service. If health data is nevertheless supplied, the app may encrypt, store, synchronize, back up or share it under existing user controls; a warning does not stop these operations. Applicable duties, lawful conditions, remediation and separate consent requirements must be assessed before processing in scope. Do not use any such data for sale, targeted advertising, unrelated profiling, insurance/employment/credit eligibility or AI training. A family member’s upload or acceptance of general terms is not blanket consent from the affected person. This conditional draft does not authorize health-data processing.
Recipients
User-selected authorized recipients can receive the permitted story or media. Kintwined’s first-party Cloudflare storage holds the assigned encrypted objects and relevant operational metadata. Google Drive and private Apple CloudKit storage providers are disabled. Story speech and translation run locally. Ordinary billing, Cloudflare Email Sending and Expo are not intended recipients of health-story content. Provider contracts, subprocessor categories and any data revealing health through metadata must be verified. Private content keys remain on user devices; encryption does not by itself remove legal duties. No consumer-health-data sale is proposed.
Health-data rights and contact
Contact [email protected] or write to Lost Meteor LLC, 8 The Green, Ste B, Dover, DE 19901, United States, marking Consumer Health Data Request. Request confirmation/access, required recipient information, withdrawal of consent, deletion or an appeal where applicable. Identity/authority checks must be proportionate and not demand recovery keys. In-app deletion can supplement this route. The final workflow must meet the applicable response, appeal, processor-notification and backup-deletion requirements; independent recipients, offline copies and encryption limits need careful legal treatment. These implementation procedures remain a release blocker.
Publication requirement
If Washington’s law applies, counsel must finalize a distinct homepage link and the contents required for that separate health-data policy. This draft does not authorize collection by itself, supply a consent interface or substitute for the general Privacy Notice. No public link was created.