Draft This page isn’t final yet. Anything in [brackets] is still being decided.

igotchu Consumer Health Data Privacy Policy

Version [1.0]. Effective [date]. Last updated [date].

This page is for Washington’s My Health My Data Act and Nevada’s consumer health data law. It covers only health information. Everything else is in our Privacy Policy.

igotchu is run by [publisher: jacobstarr LLC], [business address]. Contact: privacy@igotchu.app.

igotchu isn’t a health app

igotchu is where people write to the people they’re close to. We don’t ask about anyone’s health, and we don’t look for it. But people write about their lives, so a message can mention health. For example: “Thanks for driving me to every appointment,” or “I’m so glad your surgery went well.”

We treat every message as if it could include health information.

1. The health information we may have

Only what someone chooses to write in a message or a note, or shows in a photo. Depending on the words, that can include:

  • a health condition, illness, injury or disability;
  • care, treatment, surgery, medication or recovery;
  • pregnancy, a new baby, or reproductive or sexual health;
  • gender-affirming care;
  • a psychological condition, or substance use;
  • anything else about someone’s body or health that a person writes.

It can be about the writer, the person it’s for, or someone else.

We don’t collect location, biometrics (face or voice data), genetic data, or health information from any device or other app. We don’t guess or infer anything about anyone’s health.

2. Why we collect it, and how it’s used

Only to:

  • deliver the message: store it, and show it to the people it’s for and to its writer, in the app, on the widget and on the message page;
  • keep igotchu safe: the automatic word check when Send is tapped (a word list on the phone and our server, with no AI), and looking into a message someone reports.

Nothing else. No ads, no profiles, no research, no AI training.

3. Where it comes from

  • The writer: the person who writes a message or a note.
  • The person it’s for: a note or a reaction they add.

We don’t get health information from any other source.

4. Who we share it with

  • The people the message is for, and anyone the writer sends the link to. That’s what writing a message does.
  • Companies that run igotchu for us, only to provide their service to us, under contract:
    • Supabase (database and storage), supabase.com, [privacy contact];
    • Cloudflare (the message page and photos), cloudflare.com, [privacy contact];
    • Apple and Expo relay notifications, which never include message text, so they don’t receive health information.
  • When the law requires it: reports of child sexual abuse material to NCMEC, and valid legal requests (a warrant for message content).

[We have no affiliates; confirm, since jacobstarr LLC and any new igotchu company could count.] We list every company that gets this information above, and you can ask us for the full list with contact details (section 5).

We don’t sell health information, and never will.

5. Your rights

Whether or not you use igotchu, you can:

  • confirm whether we hold health information about you, and see it;
  • get a list of every company we’ve shared it with, with a way to contact each;
  • withdraw your consent (section 6);
  • have it deleted. We delete it from our systems, including recovery copies of the database (within [7] days of deletion, and always within 6 months), and tell every company we’ve shared it with to delete it too.

How to use them

  • Email privacy@igotchu.app. You don’t need an account.
  • With an account, you can also take back any message you wrote, delete any you received (Hide it, then Delete in Settings > Hidden), or delete your account in Settings.
  • Without an account, tap “Don’t contact me again” on a message page to stop messages from that person, and write to us to have everything about your number deleted.
  • We check it’s you with a code sent to your phone number. We don’t ask for anything more than we need.
  • We answer within 45 days. If we need more time, we’ll say why within those 45 days and take up to 45 more. It’s free, up to twice a year.
  • To appeal a decision, reply to our answer or write to privacy@igotchu.app with “Appeal.” We decide within 45 days and explain why in writing. If you disagree, you can contact the Washington Attorney General at [atg.wa.gov/file-complaint] or the Nevada Attorney General at [ag.nv.gov], and we’ll include how in our answer.

We won’t treat you differently for using any of these rights.

  • People with an account: at sign-up, separate from the Terms, each person gives a consent that says: “Messages can include personal things, like health or relationships. igotchu uses them only to deliver messages and keep igotchu safe.” It’s an unchecked box, and we record the version and time. [The legal consult may refine this wording.]
  • Sharing: the only sharing is delivering the message to the people the writer chose, which is the service the writer asked for, and our providers, who act for us. [Lawyer question: whether Washington’s separate consent to share is needed for this.]
  • People without an account: they haven’t asked for anything yet, so we keep the least we can: their number, the name the writer gave, and the message. We delete it 12 months after its link was last opened (or after it was written, if it was never opened), or sooner on request. When they keep a message, they sign up and give the consent above. [Lawyer question: this is the open point under Washington’s law.]
  • Withdrawing consent: write to privacy@igotchu.app or delete your account. igotchu can’t deliver messages without handling what’s in them, so withdrawing closes the account. Taking back a message, or deleting one you received from Settings > Hidden, ends our use of it at any time.

7. Changes

If we change how we collect, use or share health information, we’ll update this page first and ask for consent before any new use.