Consumer Health Data Privacy Policy

Effective Date: September 23, 2026

This policy explains how Woven Moments handles “consumer health data” as defined by Washington's My Health My Data Act and similar state laws. It supplements our Privacy Policy, which covers everything else.

Woven Moments is a shared journal. We never ask you for health information. But a journal is personal, and you or your partner may choose to write, say, or photograph something about your physical or mental health, such as a pregnancy, an illness, a medication, a therapy appointment, or how you are feeling. When that happens, we treat it as consumer health data.

1. What we collect and why

Consumer health data can appear in:

Text entries, replies, Letters, and Patterns you write.
Transcriptions of voice notes (the audio itself is discarded after transcription).
Photos you upload.
The family background you add in Settings.
Weaves, the daily stories our AI writes from your and your partner's entries.

We use it only to provide the journal you asked for: to store your entries and show them to you and your partner, to write your daily Weave, to send you your Weave by email or notification, and to keep the Service secure. We do not use it for advertising, we do not sell it, we do not use it to train AI models, and we do not analyse your journal to draw conclusions about your health.

2. Where it comes from

From you, when you write, record, or upload something.
From your partner, when they write about you in the shared journal.
From our AI provider, when it writes a Weave from those entries.

3. What we share, and with whom

We share the categories of content listed in section 1 only as needed to provide the Service, and only with:

Your paired partner, who sees your entries and your shared Weaves in the app.
Service providers that help us run the Service: database and sign-in hosting, photo storage, an AI writing service, voice transcription, email delivery, push notification delivery, application hosting, and error monitoring. They process it only to provide their part of the Service, under their own terms. Our Privacy Policy names each provider, and you can ask us for the full list with contact details (see section 4).
Authorities, only when the law requires it or to protect someone's safety, as described in section 3 of our Privacy Policy.

We have no affiliates, and we never sell consumer health data.

4. Your rights

You have the right to:

Know and access: confirm whether we hold consumer health data about you, get a copy of it, and get a list of every third party we have shared it with, with a way to contact each.
Withdraw consent: stop us collecting and sharing it. Because health information only reaches us through your journal, the practical way to do this is to delete the entries concerned or your account.
Delete: have consumer health data about you deleted. This includes removing it from shared Weaves, even though Weaves otherwise stay with your partner when an account is deleted. We will also ask our service providers to delete it. Copies in backups are removed as those backups expire, and in any case within six months.

5. How to make a request

Email hello@wovenmomentsapp.com from the email address on your account, with “Health data request” in the subject, and tell us which right you want to use. You do not need to create an account to make a request. We may ask for information to confirm it is really you.

We respond within 45 days. If we need longer, we will tell you why within those 45 days and may take up to 45 more. Requests are free up to twice a year.

6. Appeals

If we decline your request, reply to our decision with “Appeal” in the subject line and we will review it and answer in writing. If you are not satisfied with the outcome, you can contact the Washington State Attorney General at atg.wa.gov/file-complaint.

7. Changes

If we want to collect or use consumer health data in a new way not described here, we will update this policy and ask for your consent first.