Consumer Health Data Privacy Policy

Effective Date: 10/27/2026

This Consumer Health Data Privacy Policy explains how Knit Healthcare, LLC ("Knit", "we", "us", or "our") collects, uses, shares, and protects consumer health data under Washington's My Health My Data Act and Nevada's consumer health data law. It applies to consumer health data, as those laws define it, about people who live in Washington or Nevada or whose data is collected there.

1. Consumer Health Data We Collect

  • Health information you enter, such as conditions, medicines, allergies, readings, and check-in answers about mood, anxiety, alcohol, nicotine, and how you get around

  • Data from Apple Health and other devices and services you connect, such as activity, heart rate, sleep, and, if you turn on cycle tracking, cycle information

  • Medical records from health systems you connect, such as medications, lab results, diagnoses, allergies, immunizations, procedures, visits, and care team members

  • Coverage details and claims from a health insurer or Medicare you connect

  • Lab results read from photos of lab reports you add

  • Profile details that can say something about your health, such as sex, height, weight, your goals, and a pregnancy status you set

We do not collect precise location or biometric data. If you lock the app with Face ID, your device checks it and we never receive it.

2. Why We Collect and Use It

  • To provide the Services you ask for: keeping your health record, showing it on your devices, working out your health score and daily step, reading lab report photos you add, and writing insights if you turn AI features on

  • To send sign-in codes and notices about your account

  • To keep the Services secure, fix problems, and improve them

  • To meet legal obligations

  • If you turn on research sharing, to prepare de-identified data for research

We collect consumer health data only as needed to provide the Services you ask for, or with your consent.

3. Where It Comes From

  • You

  • Apple Health and the other devices and services you connect

  • The health systems, insurers, and Medicare you connect

4. Who We Share It With

  • Service providers that run the Services for us and act only on our instructions: cloud infrastructure, our AI provider (when AI features are on or you add a lab report photo), email delivery, push notifications, app error monitoring, and a public medical terminology service (the words you type when you search for a medicine or condition)

  • The health systems, insurers, and Medicare you connect, only as needed to make or end that connection

  • Others when the law requires it, or as part of a merger or sale of our business

We have no affiliates. We do not sell consumer health data. If you turn on research sharing, research partners receive only data de-identified using the HIPAA Safe Harbor method, which these laws do not treat as consumer health data. We will never sell consumer health data without the signed authorization these laws require.

5. Your Rights

You can:

  • Confirm whether we collect, share, or sell your consumer health data, and get a copy of it

  • Get a list of every third party we have shared it with, with a way to contact each one

  • Withdraw your consent, for example by turning off research sharing, AI features, or cycle tracking

  • Have it deleted. We delete it from our systems, tell our service providers to delete it too, and it is gone from our backups within 30 days

6. How to Make a Request

You can use Download your data, Delete account, and the switches in the app's Settings at any time. For anything else, email hello@knithealthcare.com from the address on your account, with "Consumer health data" in the subject line. Before we act, we confirm the request comes from you, for example by asking you to sign in. We answer within 45 days. If we need more time, we tell you why within those 45 days and take no more than 45 days more. Requests are free.

7. Appeals

If we decline your request, you can ask us to reconsider by replying with "Appeal" in the subject line. We decide within 45 days and tell you in writing what we decided and why. If we deny your appeal, you can contact the Washington Attorney General or the Nevada Attorney General.

8. Changes to This Policy

Before we collect or use consumer health data for a purpose or in a category this policy does not describe, we will ask for your consent. We will tell you in the app or by email before any change to this policy takes effect.

9. Contact Us

Knit Healthcare, LLC
Email: hello@knithealthcare.com