DRAFT This text is not final. The bracketed details are filled in before launch.

Consumer Health Data Privacy Policy

Effective [launch date] · Version 1

This policy is for people in Washington, Nevada and other US states with consumer health data laws. It sits alongside our Privacy Policy (moderatio.app/privacy), which covers everything else.

Who we are. Moderatio LLC, [address]. Contact: privacy@moderatio.app.

The consumer health data we collect. The drinks you log (what, how much, how strong, when); the nights you start and end; your limits and presets; your morning check-in answers and the freezes and dry days worked out from them; the reasons and occasions you write; whether the app has suggested help resources to you. If you use the tipsy-meter, your weight, which stays on your phone and is not collected by us.

Where it comes from. From you, through the Moderatio app. We don't buy it or get it from anyone else.

Why we collect and use it. To provide Moderatio to you: keep your log, work out your week, freezes, warnings and awards, sync your phone and the web, and show you help resources if your numbers are heavy. We collect it only with your consent, which you give when you start using the app.

Who we share it with. We don't sell it, and we don't share it with third parties or affiliates. Companies that process it on our behalf under contract (our processors) handle it only to run the service: Cloudflare (hosting and database) and, for error reports with drink data removed, Sentry. We may disclose it if the law requires.

Your rights. You can: confirm whether we hold your consumer health data and get a copy (Me › Your data › Download my data, or by email); get a list of the processors that have handled it, with contact details; delete it (Me › Delete account, or moderatio.app/delete-account), which also deletes it from our processors and our backups within 30 days; and withdraw consent at any time by deleting your account.

How to use them. In the app, or email privacy@moderatio.app from your account email. We respond within 45 days. If we refuse, you can appeal by replying with "Appeal" in the subject; we'll answer within 45 days and, if we still refuse, tell you how to contact your state attorney general (in Washington: atg.wa.gov).

Changes. We'll ask for your consent again before collecting new kinds of consumer health data or using it for a new purpose.