This policy explains how PEEKAWHOM SOFTWARE - L.L.C - S.P.C ("PeekaWhom", "we", "us") handles consumer health data under the Washington My Health My Data Act and Nevada's consumer health data law (NRS 603A). PeekaWhom is used by parents and legal guardians to keep information about their children. Children do not have PeekaWhom accounts. In this policy, "you" means the Account Holder: the parent or legal guardian who manages a child's profile.

1. Consumer health data we collect and how we use it

We collect these categories of consumer health data about children, in the Health section of a Child Profile:

allergies and intolerances, and how severe they are;
medical conditions, and other health notes you choose to add;
medications and supplements, their doses and schedules, and the record of doses given;
health documents and reports you upload.

We use this data only to provide the PeekaWhom service you request: to store it in your child's profile; to show it to you and to the Circle members you give Health access; to let you and them record medication doses and health updates; to send Circle Alerts in the app; and to keep the service secure, backed up and working. Emails we send, such as Circle Alert and account security emails, never include health details.

We collect consumer health data only after you give consent in the app, and you can withdraw that consent at any time. We do not use consumer health data for advertising or profiling, and we do not use it to train AI models.

2. Where the data comes from

You, when you enter health information or upload health documents.
Circle members you have allowed to add or edit your child's health information.

We do not obtain consumer health data from other companies, and we do not infer or derive it from other information.

3. Consumer health data we share

All of the categories in section 1 may be shared, but only as you direct: a Circle member sees the health information that the Health access you give them covers, and a health report only when you share it. The first time you give a Circle member Health access to a child, the app asks you to confirm that you want to share that child's health information with them.

4. Who we share it with

Third parties: the people you invite to your child's Circle and give Health access, such as family members and carers. Courts, regulators or law enforcement, only where the law requires us to disclose it.
Affiliates: none. PeekaWhom has no affiliates that receive consumer health data.

Our service providers process consumer health data only on our instructions, under written contracts:

Amazon Web Services (hosting, database and storage in Frankfurt, Germany);
Cloudflare (security and secure delivery of the app; your information passes through Cloudflare's network on its way to our servers);
Microsoft 365 (our business email). We do not send consumer health data by email, but if you email us health information, for example in a privacy request, it is kept in our email system.

Our payment provider (Stripe) and our email provider (Brevo) do not receive consumer health data. We do not sell consumer health data.

5. Your rights and how to use them

You can:

confirm whether we collect, share or sell consumer health data about you or your child, and get a copy of it, together with a list of the third parties and affiliates we have shared it with and a way to contact each of them;
withdraw your consent, in My Account in the app (Legal & privacy, then Health Information Consent) or by email. After you withdraw, no one can add or change your children's health information until you give consent again. Health information saved before stays until you delete it;
delete consumer health data. In the app, after withdrawing consent, you can choose "Delete all health information" to delete it for all your children at once. Deleting a child's profile or your account also deletes it. You can also ask us to delete it. We delete it from our active systems, tell our service providers, and backup copies are overwritten within 90 days.

To make a request, email [email protected] with "Privacy Request" in the subject line. You do not need to create an account to make a request. Please do not include unnecessary health details in your email. We may need to confirm your identity and that you are the child's parent or legal guardian. We answer within 45 days. If we need more time, we will tell you within those 45 days, and we will answer within a further 45 days. Requests are free up to twice in any 12 months.

Appeals. If we decline your request, you can appeal by replying to our answer or by emailing [email protected] with "Privacy Appeal" in the subject line. We will answer your appeal in writing within 45 days and explain what we did or did not do, and why. If we deny your appeal, you can contact the Washington State Attorney General (https://www.atg.wa.gov/file-complaint) or the Nevada Attorney General (https://ag.nv.gov).

6. Collection by third parties across websites

No third party collects consumer health data through PeekaWhom over time or across different websites or online services. The PeekaWhom app has no advertising or analytics trackers.

7. Changes to this policy

If we change this policy in a material way, we will update the effective date and tell Account Holders by email or in the app before the change takes effect. We will ask for your consent before collecting, using or sharing new categories of consumer health data, or using it for new purposes.

8. Contact

PEEKAWHOM SOFTWARE - L.L.C - S.P.C, Abu Dhabi, United Arab Emirates. [email protected]

Consumer Health Data Privacy Policy