Consumer Health Data Privacy Policy

This Consumer Health Data Privacy Policy supplements our Privacy Policy and applies to consumer health data collected from residents of Washington State (under the Washington My Health My Data Act) and Nevada (under Nevada Senate Bill 370), and to anyone else whose consumer health data is collected in those states. If there is a conflict between this policy and the Privacy Policy, this policy controls for consumer health data.

1. What Consumer Health Data We Collect

“Consumer health data” means personal information linked to you that identifies your past, present, or future physical or mental health status. Because the Alora application is a relationship and emotional-wellbeing product, the following consumer health data may be collected when you choose to share it or when the application infers it:

Mental and emotional health information you describe in onboarding answers and conversations, such as anxiety, stress, grief, or experiences of abuse
Sexual and reproductive health information you describe, including sexual activity, orientation, and relationship intimacy
Other health conditions, medications, or treatments you mention
Inferences the application draws from the above, such as an attachment style or emotional patterns
Voice transcripts and images that contain any of the above

We do not collect precise location data and we do not collect biometric data.

2. Sources

Consumer health data comes from you (what you type, say, or upload), and from the application’s automated processing of that information. We do not buy consumer health data from anyone.

3. How We Use It

To generate AI responses and personalize the application for you
To remember context between conversations
To respond to reports of abuse or safety concerns
To provide support you ask for
To evaluate and improve the AI assistant, de-identified where practical
To comply with law and to establish, exercise, or defend legal claims

We do not use consumer health data for advertising or marketing of any kind.

4. Sharing

We share consumer health data only with service providers that process it on our behalf under contract, for the purposes above: Google (Firebase database, storage, and infrastructure), OpenAI (AI responses and transcription), Langfuse (AI observability), and PostHog (analytics and session recording, where permitted). We may also disclose it when required by law or to prevent serious harm to a person. We do not share the health information you provide, or inferences we draw from it, with advertising or attribution partners. A list of the third parties with whom we share consumer health data is above; there are no affiliates.

We do not sell consumer health data, and we will not sell it without a separate, signed authorization from you.

5. Consent

We collect consumer health data only where it is necessary to provide the feature you asked for, or where you have chosen to share it. You may withdraw consent at any time by deleting your account (Settings > Account > Delete account) or by emailing maureen@lovedbyher.com. Withdrawal does not affect processing that happened before it.

6. Your Rights

To confirm whether we collect, share, or sell your consumer health data, and to access it, including a list of third parties we shared it with
To withdraw consent to collection or sharing
To have your consumer health data deleted, including from our service providers and from backups within 30 days
To appeal a decision on your request

To exercise these rights, use account deletion in the application or email maureen@lovedbyher.com with “Health data request” in the subject line. We verify requests using your account email. We respond within the time required by applicable law (generally 45 days, extendable where the law allows). If we deny a request, you may appeal by replying to our response; we answer appeals within 45 days and, if the appeal is denied, we will tell you how to contact the Washington or Nevada Attorney General.

7. No Geofencing

We do not use geofencing around any facility that provides health-care services, and we do not collect precise location data.

8. Changes and Contact

Each version of this policy has a version number and effective date, listed at alora.love/legal; earlier versions are available on request. Contact: Loved By Her LLC, 8401 Mayland Dr Ste A, Richmond, VA 23294, United States, maureen@lovedbyher.com.