Consumer Health Data Privacy Policy

Scope

This Consumer Health Data Privacy Policy applies to consumer health data that FamiJo collects, uses, or shares about a Washington consumer or another person to whom an applicable consumer-health-data law applies. It is separate from the FamiJo Privacy Policy and supplements the disclosures required by applicable consumer-health-data law.

Consumer health data means information linked or reasonably linkable to a person that identifies their past, present, or future physical or mental health status, as defined by applicable law. An entry is not consumer health data merely because it is personal; its content and use matter. Receiving or retaining information can be collection even when you voluntarily provide it. We do not require a medical history or diagnosis to use FamiJo, but protect covered information you choose to include as described here.

Categories of consumer health data we may collect

Depending on what you choose to enter, upload, or connect, FamiJo may collect journal text, photos, day pins, tracker items, daily step counts if you turn on Steps, routines, events and to-dos (including their titles and times), reminders, the meals, glasses of water and activities you record in a Health journal (called an Exercise journal before October 2026) and, if that journal counts calories, the calories you enter for its meals, a list of foods and their calories you choose to save for later entries (My foods), other exercise or health-related journal details, managed-profile information, and other information that may identify your past, present, or future physical or mental health status, health-related activities, or health-related experiences.

FamiJo may also collect account identifiers, device and service information, support messages, and journal-activity signals that are linked or reasonably linkable to the information above. FamiJo does not purchase consumer health data from data brokers.

Sources of consumer health data

We collect consumer health data directly from you when you add it to a journal, photo, tracker, profile, event, reminder, support message or data-access request. An authorized adult, co-author (someone invited to write in and help manage a journal, called a co-manager in earlier versions of this Policy), or group participant may add information to a shared or managed profile, and, where a parent switches on a child sign-in, the child may add it to the child's own journal. We may collect limited activity and technical information automatically when you use the Service or when you enable an optional integration. If you turn on Steps in the FamiJo app on your phone or tablet, we receive each day's step count from that device's health app (Apple Health or Health Connect), with the permission the device asks you for, only for days with a journal entry; FamiJo reads nothing else from the health app and writes nothing to it.

Purposes for collecting and using consumer health data

We collect and use consumer health data to provide and maintain the personal and family journaling, sharing, reminder, calendar link, search, security, and optional Journimal features you request; to offer you, for a meal you have not written yet, the last one you wrote, and to suggest the foods you saved as you type; to respond to support requests; to prevent fraud and abuse; to comply with law; and to protect users and the Service.

Journimal uses limited activity signals to select a playful journal companion or reflection: when and how often you write, word and line counts, day pins, the presence of photos or events, tracker progress and, for your own Journimal, the kinds of journal you keep, your family groups and how often you post to them. It does not read free-form journal text or photos to infer a diagnosis, treatment, health status, mental health status, clinical risk, or emergency risk, and it does not use what a Health journal's meals or activities say, or their calories.

We use daily steps only to show them on the journal days they belong to, not for Journimal, statistics, insights or anything else.

Categories of consumer health data disclosed

When you direct a share or grant access, recipients may receive the journal text, photos, day pins, tracker items, profile details, events, reminders, and associated identifiers made available by that choice, including any health information those items contain. Review the content and recipients before sharing. People who can open a journal, such as co-authors you add or a child's parent, also see the daily steps saved with its days; a day shared to a family group or outside FamiJo does not include them, and a day posted to a family group or sent to another app does not include a Health journal's meals or activities.

If you turn on the calendar link, anyone who has the link, and each calendar app or service you add it to, can read the titles, dates, times and repeats of your events and to-dos, with the notes on your own items, and, unless you leave them out, the titles, dates and times of the family events and to-dos others share with a group you are in, including any health information they contain (such as an appointment's title). In the same way, family events and to-dos you share with a group can appear, without their notes, in the calendar link of anyone in it who turns one on, and so reach the calendar services that person chooses. A Health journal's meals and activities are never in a calendar link.

Service providers may process stored content and associated account or technical information to host, secure, sync, and deliver the requested Service. A support or privacy request may disclose the health-related details you choose to include and the identifiers needed to respond. Email, sign-in, and billing providers do not receive private journal text or photos merely because you sign in, receive an account email, or purchase a membership.

Categories of persons with whom consumer health data may be shared

We may share consumer health data with the people you authorize, including family members, co-authors, group participants, invitees, external services or platforms to which you direct a share, anyone who has your calendar link and the calendar apps or services you add it to, and, for family events and to-dos you share with a group, the calendar links of the people in it and the calendar services they choose.

We may share consumer health data with service providers that process it to provide the features you choose, including Render for hosting and Neon for database hosting. Resend provides account email delivery, Expo provides push-notification delivery, and Google and Apple provide optional sign-in services; sign-in itself does not send them your journal content. We may also share data when required by law or reasonably necessary to protect rights, safety, security, or the Service.

Stored photos may also be processed by the private object-storage provider configured for FamiJo. That provider acts to store and deliver the requested content, not to advertise to you. Contact support@famijo.com for the applicable provider and recipient information.

Consent and sale

We collect and use consumer health data only as reasonably necessary to provide the Service you request and as described in this Policy. If applicable law requires separate consent for a collection, use, or sharing that is not necessary to provide the requested Service, we will obtain that consent before doing so and describe how you can withdraw it.

FamiJo does not sell consumer health data. FamiJo does not share consumer health data with third parties for their independent advertising, marketing, or data-broker purposes.

Optional account-linked page and feature statistics require the separate Help improve FamiJo opt-in. That choice does not authorize additional collection or sharing of consumer health data or waive any separate authorization required by law. Journimal can be turned off independently in Settings.

Children under 13 years old and adult-managed profiles

A child under 13 years old may not create or control an independent FamiJo account. A parent, legal guardian, or other adult with legal authority may create a child profile for a child under 13 years old inside the adult's account. Depending on what the adult or an authorized co-author enters, or, with a child sign-in the adult switched on after confirming the emailed notice, what the child writes, that profile may contain consumer health data or other sensitive information, including journal details, photos, tracker items, routines, events, exercise-related entries or, only if the adult turns steps on after reading what it means, the child's daily step count from Apple Health on the child's iPhone or iPad. A child's sign-in has no calendar link. The Privacy Policy (Section 13) describes the child sign-in in full.

Before a child profile for a child under 13 years old is created or converted, FamiJo records the adult's attestation of authority, the time of acknowledgment, the account identifier, and the applicable child-profile acknowledgment version. That record is an auditable acknowledgement, not independent verification of parent or guardian status, and does not substitute for verifiable parental consent where applicable law requires it. In that event, VAV Apps may require additional steps and limit the profile until they are completed.

The adult account holder may request access, deletion, correction, or withdrawal of an applicable consent for the child's profile through Parent controls or Settings, or by contacting support@famijo.com from the adult account email. We may verify identity and authority before responding. FamiJo does not sell consumer health data or disclose information in child profiles for children under 13 years old for a third party's independent advertising, marketing, or data-broker purposes.

Your consumer health data rights and requests

Subject to applicable law, you may confirm whether we collect, share, or sell your consumer health data; access it; withdraw applicable consent; and request deletion. Use the privacy-request flow in FamiJo Settings or email support@famijo.com from the email associated with your account. We may verify your identity before acting on a request. You can also remove saved steps yourself at any time in Settings > Journal settings, and turn off or reset your calendar link in Settings > Calendar.

If we deny a consumer health data request, you may appeal by replying to the decision or emailing support@famijo.com with the subject line "Privacy appeal." You do not need to create a new account or purchase a membership to submit a request. We may ask for information reasonably needed to authenticate a request, not your account password or journal PIN.

Where the Washington My Health My Data Act applies, requests must be addressed without undue delay and within 45 days of receipt. A single additional 45-day extension is permitted when reasonably necessary if notice and reasons are provided within the initial period. Authentication steps do not restart the response period. An appeal requires a written response within 45 days; a denied appeal must include a way to contact the Washington Attorney General to complain.

For a covered Washington deletion request, deletion includes affected records across our network and required notices to affiliates, processors, contractors and other third-party recipients. Deletion from archived or backup systems may be delayed as that law permits, but not beyond six months after authentication of the deletion request. Ordinary retention cycles or technical limitations do not override these duties. Other applicable laws may impose different or additional requirements. These are legal obligations, not a claim that clicking a request button automatically completes deletion.