Health data
Consumer health data privacy policy
Last updated . Washington, Nevada, and Connecticut call some of what we collect “consumer health data” and ask for a plain, separate policy about it. This is that policy. For everything else, see our privacy page.
What we collect
The data these laws cover, as we collect it:
- which kind of moment you are in (one of six)
- the feelings you pick for it
- how loud it felt before and after, on your own scale
- that a safety screen was shown to you, when, and which region's helplines you saw, never your words
- the patterns you choose to keep (“What I've noticed”)
- your check-in answers
- the steps you are offered and the wins you record
- the words you write about a moment, only if you turn on “Keep my words”
Why we collect it
To run the loop the app is built on: catch the moment, help you unhook from it, offer one small step, check back, and remember what helps. Safety-screen records exist to keep that feature working and accountable, never to build a profile of you.
Where it comes from
From you, directly, with one exception: a pattern under “What I've noticed” is drafted by the app from your own saved moments, and kept only if you say keep.
Who we share it with
We do not sell this data to anyone. We share it only with processors acting for us, and only the parts each one needs:
Cloudflare
Runs the website and the app's servers.
What it handles: Requests to the site, including your IP address, which we do not keep.
Where: Cloudflare's data centres around the world, usually the one nearest you. Cloudflare is based in the United States.
Neon
Stores your account and what you save in the app.
What it handles: Your saved data. Everything you write is encrypted with a key that is yours alone before it is stored.
Where: United States (AWS, us-east-1)
Clerk
Handles signing in.
What it handles: Your email address and how you sign in (an email code or Google).
Where: United States
Anthropic (the Claude API)
Writes the small steps you ask the app for. If Claude can't write one, Cloudflare (Workers AI) writes it instead.
What it handles: What you wrote for that step, the moment and feelings you picked, and up to five patterns you chose to keep. Never your email or your name. Anthropic does not train on it, and deletes it within 30 days (or keeps it up to 2 years if its safety checks flag it as breaking its usage rules). Cloudflare does not train on it or keep it.
Where: Anthropic's and Cloudflare's servers that run AI models, around the world. Both companies are based in the United States.
Stripe
Takes payments.
What it handles: Your card and billing details. We never see your full card number.
Where: United States
Resend
Sends the emails you ask for: check-ins, waitlist emails and account notices.
What it handles: Your email address and the email's text.
Where: United States
PostHog
Counts how the site and app are used.
What it handles: Which screens were reached and which buttons were used. Never anything you type.
Where: United States
Cloudflare
Runs our domain and forwards mail sent to our support address.
What it handles: Emails you send us.
Where: Cloudflare's data centres around the world, usually the one nearest you. Cloudflare is based in the United States.
Of the processors above, the database, the hosting provider, the AI provider, and the email service that sends check-ins each receive some of your health data, to do their part of the job. The analytics service receives choices from a fixed list, such as which kind of moment you started, how far you got, or how you answered a check-in, never your words. Safety events reach it with no profile of you attached.
Your consent
We ask for your consent to this separately, at signup, with its own checkbox. Agreeing to our terms or our privacy page does not count as agreeing to this.
No geofencing
We do not use your location to work out whether you are at a health care provider, and we never will.
Your rights, and how to use them
In Settings, under Privacy, you can export your data or delete it. Withdrawing your consent to this means we can no longer keep your health data, so in the app it is the same step as “Delete everything”. You can also email hello@meetsoot.com.
If we refuse a request
Email hello@meetsoot.com with “Appeal” in the subject line. We will answer within 45 days. If we still refuse, you may contact the Washington Attorney General.
See also our privacy page and our terms.