Consumer health data privacy policy

This standalone policy covers “consumer health data” as defined by Washington's My Health My Data Act and Nevada's consumer health data law, for everyone who uses Validity.

What we collect — and what we deliberately do not

• Account basics: your email and subscription state, used to run your account.
• Topic follows: if you follow a topic to get updates, we store that follow — it is the service you asked for. We use it only to deliver those updates, never to infer or market against your health status.
• Self-experiment and wellbeing entries: never on our servers. The tracker is local-first — what you log stays on your device. You can export or delete it there; we cannot see it, so we cannot sell it, share it, or lose it.
• No symptom profiles: we do not store your searches or reading against your identity as any kind of health profile.

Analytics and tracking

Analytics are first-party and self-hosted. There are no third-party tracking pixels, no advertising SDKs, no data brokers, and no cross-site trackers anywhere on Validity — and there never will be while our published promises stand.

Sale and sharing

We do not sell consumer health data. We do not share it for advertising. There is no category of “affiliate” or “partner” who receives it, because we have none.

Your rights

• Access & deletion: ask us what we hold about you (it is short) and have it deleted; tracker data you delete yourself, on your device.
• Withdraw consent: unfollow a topic at any time — the stored follow is deleted with it.
• No retaliation: exercising these rights never changes the service you receive.

Requests: the corrections and privacy channel on the errata page reaches the same humans.

Validity is not medical advice.