NephroKin — Consumer Health Data Privacy Policy

NephroKin — Consumer Health Data Privacy PolicyLast updated: August 22, 2026 · Effective date: August 22, 20261. About This PolicyThis Consumer Health Data Privacy Policy applies to consumer health data that NephroKin LLC ("NephroKin," "we," "our," or "us") collects through the NephroKin mobile application and nephrokin.com (together, the "Service").It applies to you if you are a resident of Washington or Nevada, or if your consumer health data is collected in Washington or Nevada. It is a separate document required by the Washington My Health My Data Act and the Nevada consumer health data law.Where this Policy uses the term "consumer health data," we mean information that is linked or reasonably linkable to you and that identifies your past, present, or future physical or mental health status. That includes the information described in Section 2.2. Categories of Consumer Health Data We CollectWe collect the following categories of consumer health data:- Health conditions and status: the condition you or your Care Recipient are managing, the diagnosis date, and the health information you choose to log.
- Measurements and symptoms: urine protein readings, weight, swelling location and severity, and the dates of each entry.
- Medications: medication names, dosages, schedules, whether a medication is active, and whether you marked a dose as taken.
- Free-text notes: any notes you choose to enter, which may contain additional health information.
- Care Recipient identity information: name, date of birth, diagnosis date, and relationship to the account holder, which is health data because it is tied to a health condition.
- Information derived from the above: in-app alerts generated from your logged data, trend views, and the contents of any report you export.
- Community content: posts, replies, and reactions you choose to share, including posts marked anonymous, which may contain health information you choose to disclose.
- Account and technical information tied to the above: your email address, name, and, if provided, phone number and zip code, along with IP address, device information, and access logs. These are consumer health data under Washington law because they are linked to your use of a health-specific service.We do not collect precise location data, biometric data, genetic data, information about gender-affirming care, or information about reproductive or sexual health.3. Where This Data Comes FromWe collect all consumer health data directly from you, as the adult account holder, when you enter it into the Service. We do not buy consumer health data, we do not collect it from data brokers or other third parties, and we do not derive it from tracking you across other websites or apps.Where you use the Service on behalf of a Care Recipient, you enter that person's information yourself. The Care Recipient does not create an account, log in, or interact with the Service.4. Why We Collect and Use ItWe collect and use consumer health data only for the following purposes:- To provide the Service's logging, calendar, trend, and reminder features.
- To generate the in-app alerts and trend views you have asked for.
- To create the reports you choose to export.
- To operate the community feature, including moderation and enforcement of our community guidelines.
- To communicate with you about your account, including confirmation, security, and support messages.
- To maintain the security, integrity, and reliability of the Service, and to investigate suspected fraud or abuse.
- To comply with legal obligations and to establish, exercise, or defend legal claims.We do not use consumer health data for advertising of any kind, for profiling, or to train artificial intelligence or machine learning models. We do not use it for any purpose beyond those listed above without first obtaining your consent.5. Who We Share It WithWe share consumer health data only with the service providers listed below, each of which processes it on our behalf, under contract, and is not permitted to use it for its own purposes.- Supabase, Inc. Database hosting, user authentication, and data storage. Receives all consumer health data stored in the Service.
- Resend, Inc. Delivery of transactional email, including account confirmation, password reset, and consent confirmation messages. Receives your email address and the contents of those messages. It does not receive your logged health data or a Care Recipient's name.
- Apple Inc. Distribution of the App through the App Store. Receives account and transaction information associated with your Apple account. It does not receive your logged health data.We have no corporate affiliates, and we do not share consumer health data with any affiliate.We may also disclose consumer health data when required by law, subpoena, or other legal process, or where we believe in good faith that disclosure is necessary to protect the safety of any person. Where we are permitted to tell you, we will.If we are involved in a merger, acquisition, or sale of all or substantially all of our assets, consumer health data may transfer to the acquiring party as part of that transaction. The recipient would remain bound by this Policy for the data transferred, and we will notify you and give you the opportunity to delete your data before any transfer takes effect.6. We Do Not Sell Your Consumer Health DataWe do not sell consumer health data, and we have never done so. We would not sell it without first obtaining your valid authorization, signed separately from the consents described in Section 7. We have no plans to do so.7. Consent, and How to Withdraw ItWe ask for your consent separately for each of the following, and we do not ask you to consent to more than one at a time:- Collection of consumer health data, given during account setup before you can begin using the Service.
- Sharing of consumer health data with the service providers listed in Section 5, given separately from your collection consent.Each consent is recorded with the date and time it was given, and we send a confirmation message to your verified email address summarizing what you consented to.You may withdraw either consent at any time by emailing [email protected] or by deleting your account in the App. Withdrawing your consent does not affect anything we did before you withdrew it. If you withdraw your collection consent, we can no longer provide the Service, and your account will be closed and your data deleted as described in Section 8.8. Your RightsIf you are a Washington or Nevada resident, you have the right to:- Confirm whether we are collecting, sharing, or selling your consumer health data.
- Access your consumer health data, including a list of the third parties with whom we have shared it.
- Withdraw your consent to our collection or sharing of your consumer health data.
- Have your consumer health data deleted.
- Be free from discrimination or denial of service for exercising any of these rights.8.1 How to Exercise ThemEmail [email protected] from the email address on your account, or use the in-App account deletion feature. We may ask you for information to confirm your identity, and we will use that information only to verify the request.We will respond within 45 days. If we need more time, we may extend by another 45 days, and we will tell you why before the first period ends.8.2 DeletionWhen you request deletion, we delete your consumer health data from our active systems, and we direct our service providers to do the same, within 30 days. Data held in encrypted backups and archived systems is deleted within six months.We retain a limited record confirming that the deletion occurred, consisting of an internal reference, the date of the request, and the date the deletion completed. That record does not include your name, your health data, or your readable email address.If you have posted to the community feature, deleting your account removes your identity from those posts. If you want the content of a post removed as well, delete the individual post before you delete your account.8.3 If We Deny a RequestYou may appeal by replying to our response or emailing [email protected] with "Appeal" in the subject line. We will respond within 45 days. If we deny the appeal, you may contact the Washington Attorney General or the Nevada Attorney General.9. How Long We Keep Consumer Health DataWe keep consumer health data for as long as your account is active, and delete it on the timeline in Section 8.2 when you delete your account or ask us to. Accounts inactive for more than 24 consecutive months may be deleted after advance notice to your email address.10. How We Protect ItWe encrypt consumer health data in transit and at rest, restrict access so that one user cannot see another user's data, limit administrative access to personnel who need it to operate and support the Service, and maintain a written information security program that we review periodically. No system is completely secure, and we cannot guarantee absolute security.11. Where It Is StoredConsumer health data is stored on servers located in the United States. The Service is intended for users in the United States only.12. ChildrenAccounts are held by adults. A child does not create an account, log in, or interact with the Service. Where an account holder logs information about a child in their care, the account holder enters that information and consents to its collection.13. Changes to This PolicyIf we make a material change to how we collect, use, or share consumer health data, we will notify you in the App or by email and obtain your consent before applying the change to data we have already collected. Changes apply going forward only.14. Contact UsNephroKin LLC
4539 N 22nd St, Ste N, Phoenix, AZ 85016
[email protected]