Washington State

Consumer Health Data Privacy Policy

Last updated: September 2026

Version 2026-09-04

Purpose

For Us provides this policy separately from its main Privacy Policy to describe its practices concerning consumer health data where required by Washington's My Health My Data Act (MHMDA). The policy is intended to be maintained as a separate, clearly identifiable privacy policy and linked from the For Us homepage where required by law.

What we treat as consumer health data

For Us may treat the following as consumer health data where applicable: journal entries that reveal information about a person's mental or emotional health; inferences about mood, emotional patterns, or similar information generated from journal content; and records concerning consent choices related to this information.

Collection and consent

Where applicable law requires consent for collection of consumer health data, For Us obtains consent separately from consent to share consumer health data. Consent to one does not automatically constitute consent to the other. Consent records include the relevant timestamp and version.

Sharing and automated processing

For Us may process journal entries through its systems and applicable service providers to generate shared sessions for paired partners. Where this processing is considered sharing under applicable law, For Us will obtain the consent required by that law and disclose the practice clearly.

Who has access

Raw journal entries are not shown to the user's partner. Access is limited to the systems and, where strictly necessary, personnel who need access to operate, secure, support, or maintain the service. For Us does not sell consumer health data and does not use consumer health data for advertising.

Prohibited uses

For Us does not sell consumer health data. For Us does not use consumer health data for targeted advertising. For Us does not use geofencing to identify when a user is near a health care facility and does not collect location data for that purpose.

Retention and deletion

Journal entries are retained while the account exists, subject to the retention practices described in the main Privacy Policy. When a user requests deletion, the 30-day grace period and permanent deletion process described there apply. Deletion is propagated to processors used to operate the service, subject to legally permitted or required retention.

Your rights

Where applicable, you may have the right to confirm whether For Us processes consumer health data; access that data; withdraw consent to collection or sharing; request deletion; and appeal a denial of a request. Requests may be made through support@theforusapp.com or the in-app privacy settings where available.

Contact

Questions about consumer health data can be submitted through support@theforusapp.com.