Consumer Health Data Privacy Policy

Last updated 2026-10-31

About this policy

Effective 2026-10-31

This policy applies to consumer health data as defined by Washington’s My Health My Data Act, Nevada law (SB 370), Connecticut law and similar laws. It supplements our Privacy Policy.

Categories of consumer health data we collect and why

On your device only (we can’t access it): medications, amounts, schedules, dose logs, supplies, injection sites and journal entries (weight, mood, energy, sleep, symptoms, notes). It’s used to provide the features you choose.

If you turn on sync: an end-to-end encrypted copy of the records above (unreadable to us), plus your email address, sync metadata and IP address. Together these show that you use a medication tracker. They’re used only to sign you in, sync your data, and secure the service.

If you join our email list: your email address. This may suggest an interest in medication tracking. It’s used only to send the emails you asked for.

If you contact support: anything you choose to tell us. It’s used only to answer you.

Sources

All of it comes directly from you or your device.

Consent

We collect consumer health data only as needed to provide the features you request. We ask for your separate consent before turning on sync. You can withdraw consent at any time by deleting your sync account or unsubscribing.

Categories we share, and with whom

We share consumer health data only with processors that handle it for us under contract: Supabase (sync and sign-in), Resend (sign-in codes and opt-in email), Netlify (website logs) and Microsoft (support email). RevenueCat and Expo receive no health data. We don’t share consumer health data with any third party or affiliate; we have no affiliates. We don’t sell consumer health data, and we don’t use geofences around health care facilities.

Your rights

You have the right to: confirm whether we collect, share or sell your consumer health data; access that data, including a list of all third parties and affiliates it has been shared with or sold to, with their contact information; withdraw consent; and have it deleted, including by our processors and from our backups.

To exercise these rights, email privacy@markeen.app or use the in-app tools under Settings → Back up, restore or delete data and Settings → Account and sync. We respond within 45 days, and may extend that once by 45 days if reasonably necessary, in which case we’ll tell you. To appeal a decision, reply with “Appeal” in the subject line within a reasonable time. We’ll respond within 45 days. If we deny your appeal, you may contact the Washington Attorney General (atg.wa.gov), the Nevada Attorney General (ag.nv.gov) or the Connecticut Attorney General (portal.ct.gov/ag).

Contact

Roland Timsa · privacy@markeen.app · 7756 Delco Ave, Winnetka, CA 91306, USA