Annex C. Supplement for the United States
This annex applies if you live in the United States.
1. Consumer health data notice. For the purposes of the Washington My Health My Data Act and comparable statutes, Lady I discloses the following:
- Requirement
- Categories of consumer health data collected
- Response
- section 4 — profile, health diary, predictions
- Requirement
- Sources
- Response
- exclusively you; we buy and ingest nothing from third parties
- Requirement
- Purposes of processing
- Response
- section 5
- Requirement
- Categories of third parties with whom it is shared
- Response
- only the processors in Annex A, acting on our instructions
- Requirement
- Sale of consumer health data
- Response
- we do not and will not sell it; we seek no authorization to sell because we conduct no sale
- Requirement
- How to exercise rights
- Response
- through Profile in the app, or support@ladyiapp.com
- Requirement
- Response time
- Response
- within 45 days, extendable by a further 45 days for complex requests
- Requirement
- Deletion
- Response
- from our systems immediately, from backups within 30 days; our processors delete within the same period
- Requirement
- Appeal
- Response
- if we refuse a request, you may appeal to support@ladyiapp.com; we answer in writing within 45 days and, if the appeal is refused, tell you how to contact the Attorney General of your state
This notice is also published as a separate page at ladyiapp.com/consumer-health-data.
2. Consent. Collection of health data takes place on the basis of your prior explicit consent given in the app. Sharing with a processor for the purpose of delivering the service itself is covered by that same consent and is limited to Annex A.
3. State-law rights. Depending on your state — among others California, Colorado, Connecticut, Virginia, Oregon, Texas, Delaware — you have rights of access, deletion, correction, portability and objection. Lady I grants these rights to all users in the United States, regardless of state, through the functions in Profile. In California the app is treated as a provider of health care under the Confidentiality of Medical Information Act for the reproductive-health information you enter, and we keep it confidential accordingly. In Virginia we collect reproductive or sexual health information only with your prior explicit consent (opt-in). In Connecticut your health data is sensitive data processed only with your consent.
4. We do not sell your data and do not share it for cross-context behavioral advertising. We receive no payment or other consideration for your data.
5. Breach notification. See section 15. Lady I is a vendor of personal health records for the purposes of the Federal Trade Commission's Health Breach Notification Rule and notifies as that rule requires.
6. Oversight. You may complain to the Attorney General of your state; in Washington you also have a private right of action under the My Health My Data Act.