Skip to content
Low Reactive

Consumer health data privacy policy

Last updated 5 August 2026. This is a standalone policy, separate from our general privacy policy, as required by the Washington My Health My Data Act.

What consumer health data we collect

None. This site collects no consumer health data. There is no symptom checker, no quiz, no form, no account, and no tracking that could infer a health condition from your behaviour. We do not collect it, so we do not store it, share it, sell it, or need your consent to process it.

Categories of data, and their sources

How it is used and shared

There is nothing to use or share. We have no affiliates with access to consumer health data, no processors handling it, and no service providers receiving it, because none exists. If that ever changes, this policy will name each affiliate and processor specifically, in advance of the change, with separate and unbundled opt-in consent collected before any collection or any sharing.

Retention

Not applicable, as nothing is collected. Our standing intention is to not store consumer health data at all rather than to store it briefly.

Your rights

Under the Washington My Health My Data Act, and comparable provisions in Nevada and Connecticut, you have the right to confirm whether we collect, share or sell your consumer health data, to access it, to withdraw consent, and to have it deleted, including by anyone we shared it with.

We can answer any such request immediately: we hold nothing. You are welcome to ask anyway and receive that answer in writing. Contact us at the address in the site footer. We do not require you to create an account to make a request, and we will not discriminate against you for making one.

If this ever changes

Two features of this site are planned that would collect health data: a test-selection tool, and an optional way to report back a test result. Both are deliberately unbuilt. Neither will launch without this policy being rewritten first to name exactly what is collected, separate unbundled consents for collection and for sharing, a published retention schedule, and every affiliate named. Research use would require its own separate consent, because providing a service does not cover studying the people who used it.