Consumer Health Data Privacy Policy
Effective July 14, 2026 · Version 1.0
In short: your regimen is health data. We collect it only when you choose to add it, use it only to run the checks you asked for, share it only with the infrastructure providers that host the service, and never sell it. You can see it, export it, delete it, or withdraw consent at any time. This policy exists under state consumer-health-data laws, including the Washington My Health My Data Act and Nevada SB 370.
1. Who and what this policy covers
2. Consumer health data we collect
3. Where the data comes from
4. Why we collect and use it
6. No sale of consumer health data
8. How to exercise your rights
10. Affiliates and processors
11. Changes to this policy
01 Who and what this policy covers
This policy applies to "consumer health data" as defined by applicable state laws — personal information that is linked to you and identifies your past, present, or future physical or mental health status — that WhatSupp, Inc. collects through the Service. It supplements our Privacy Policy and controls where the two differ for consumer health data. It applies to all users; residents of Washington, Nevada, and states with similar laws hold the specific legal rights described in Section 7.
02 Consumer health data we collect
We collect these categories, and only these, when you choose to provide them: (a) your supplement regimen — the products, doses, and schedules you add; (b) interaction-check inputs — medication classes or conditions you optionally add so checks are more relevant (e.g., "taking antibiotics"); and (c) derived check results — the interaction flags the Service generates from (a) and (b).
We do not collect diagnoses, medical records, biometric data, or precise location, and we do not use geofencing of any kind, including around health-care facilities.
03 Where the data comes from
Directly from you, and only from you. Adding an item to your regimen or an interaction-check input is the collection event and constitutes your consent to that collection. We do not obtain consumer health data from third parties, data brokers, or inference from your browsing.
04 Why we collect and use it
Solely to provide the features you request: storing and displaying your regimen, running interaction checks against published literature, alerting you (if enabled) when a new report affects an item in your regimen, and syncing across your devices. We do not use consumer health data for advertising, for training AI models, or for any purpose not listed here without asking for your separate consent first.
05 Who it is shared with
Only with processors acting on our instructions under contracts that limit their use of the data to providing services to us: cloud hosting and storage (running the Service and databases), AI infrastructure (processing an interaction check you run; contractually barred from training on your data), and security and support tooling (fraud prevention, responding to your support requests). We may also disclose data when required by law. No other sharing occurs; supplement brands and retailers never receive it.
06 No sale of consumer health data
We do not sell consumer health data and will not do so. Under Washington law, selling consumer health data would require a separate, signed authorization from you; we will never ask for one.
07 Your rights
You have the right to: know and access the consumer health data we hold about you, including a list of the third parties and affiliates it has been shared with and how to contact them; withdraw consent to our collection and use of it; and delete it, including from backups and from our processors, which we complete within the timelines state law requires. Withdrawing consent or deleting your regimen disables interaction checks (they need the data to run) but does not affect the rest of your account. We will never discriminate against you for exercising these rights.
08 How to exercise your rights
Self-serve (fastest): Account › Export my data shows and exports everything; deleting items from your regimen, or deleting your account, deletes the underlying data. By email: support@whatsuppguide.com from your account email address, stating the right you want to exercise. We verify requests against your account email and respond within 45 days (extendable once by 45 days for complex requests, with notice).
09 Appeals
If we decline a request, we will explain why, and you may appeal by replying within 45 days. Appeals are reviewed by a person not involved in the original decision, with a written outcome within 45 days. If your appeal is denied, you may contact your state Attorney General; Washington residents may contact the Washington State Attorney General at www.atg.wa.gov.
10 Affiliates and processors
WhatSupp, Inc. has no corporate affiliates that access consumer health data. A current list of our processors (the categories in Section 5, with vendor names) is available on request at support@whatsuppguide.com and is provided with every access-request response.
11 Changes to this policy
If we materially change how we collect, use, or share consumer health data, we will notify you and — where the change involves a new purpose — ask for your consent before applying it to your existing data. The "Effective" date above reflects the current version.
12 Contact
WhatSupp, Inc. · support@whatsuppguide.com