Consumer health data privacy policy
Status: draft for legal review. Last updated: October 8, 2026.
This policy explains how Frndo handles "consumer health data" as defined by Washington's My Health My Data Act, Nevada's consumer health data law (SB 370), and similar laws. It adds to our Privacy Policy.
What consumer health data we collect
- Health information you share in conversation: anything you tell Frndo about your physical or mental health, such as symptoms, conditions, medications, sleep, exercise, mood, stress, or emotional wellbeing. Frndo may remember it as part of its memory of you, including mood patterns it notices over time.
- Health data from Apple Health, only if you grant permission: step count, heart rate, blood oxygen, and body temperature. [TBD: confirm before publishing. In the current version of the app, Health data is not uploaded to our servers.]
- Precise location, if you allow it. We don't use it to tell whether you're seeking health care services.
How we collect it
Directly from you, in your conversations with Frndo, and from your iPhone, through Apple Health, when you allow it.
Why we collect and use it
Only to provide Frndo to you: so Frndo can understand what you're going through, remember it, and talk with you about it, such as checking in on fitness goals or asking how you're feeling after a hard week. We don't use consumer health data for advertising, marketing, or any other purpose, and we never sell it.
Who we share it with
We share consumer health data only with the service providers that process it on our behalf to run Frndo, under contracts that limit their use of it. These are our cloud hosting and database providers and the provider that runs our AI models. See Subprocessors. We do not share it with anyone else, except where the law requires.
Consent
We collect and share consumer health data only with your consent, or as necessary to provide the service you asked for. [TBD: describe how the app asks for consent to collect consumer health data, and separately to share it.]
Your rights
You have the right to:
- confirm whether we collect, share, or sell your consumer health data, and access it, including a list of the third parties and affiliates we share it with (see Subprocessors);
- withdraw your consent to its collection and sharing;
- have it deleted. See Delete your account and data. When you ask, we delete it from our systems and tell our service providers to delete it too.
To use these rights, email privacy@frndo.app. We'll respond within 45 days, which we may extend once by another 45 days if needed. If we decline your request, you can appeal by replying to our decision. If your appeal is declined, you can contact the Washington State Attorney General at atg.wa.gov, or your own state's attorney general.
Contact
privacy@frndo.app, or QB ME LLC, [TBD: registered address].