Nevada Consumer Health Data Privacy Policy

Effective date: 17 August 2026

This policy applies to consumer health data covered by Nevada Revised Statutes 603A.400–603A.550 that Cropol Labs d.o.o. handles through Planique. Cropol Labs d.o.o. is established at Ulica sv. Ane 30A, 31000 Osijek, Croatia, company number 030322161. In this policy, Planique, we, us and our mean Cropol Labs d.o.o.

Planique Health is an optional private tool for personal or household organisation. It is not a professional health-record system and does not provide medical advice.

1. Consumer health data collected and how it is used

The categories depend on what the user chooses to enter and which requested Health features the user activates:

Category	Use and manner of processing
Health profile and linking information	A display label, emoji, account identifier and optional physical characteristics organise owner-controlled Health profiles. A legal name or relationship is not required.
Conditions, care and provider information	Diagnoses, medical history, insurance, emergency contacts, clinicians, appointments, visit notes, tests and procedures are stored, organised, displayed, exported and deleted as requested.
Medication information	Medication, prescription, dosage, schedule, occurrence, adherence and notes support records, schedules and requested reminders.
Bodily functions, symptoms and measurements	Symptoms, pain, vital measurements, weight, height and observations support histories and requested summaries.
Reproductive and sexual health information	Period and cycle history, pregnancy-related information, tests, symptoms, sexual-activity records and notes are stored and displayed as requested. Optional cycle estimates use only completed period dates after a separate choice.
Planique-created Health information	Requested schedules, occurrences, reminders, Calendar views, summaries and optional cycle estimates are derived from user-supplied records and settings.
Health choices and service information	Activation, household-use declarations, legal-document versions, timestamps, deletion state, settings and minimized security events are used to enforce choices, secure the vault and handle rights or incidents.
Health information in support or rights correspondence	The support form is not intended for Health information and accepts no attachments. If a person nevertheless includes Health information, we use only what is necessary to respond, protect rights and arrange a safer follow-up.

Planique processes these categories inside the authenticated application and Supabase infrastructure only for the personal or household Health features the user requests, associated security, legal choices, export, deletion, support and incident response. Planique does not use consumer health data for advertising, targeted marketing, data brokerage, research datasets, AI training, insurance, credit, employment or eligibility decisions.

Planique does not collect precise device location, wearable or medical-device feeds, HealthKit, Health Connect or health information from healthcare providers, insurers, employers, advertising networks, data brokers or public sources.

2. Sources

Consumer health data comes from:

• the adult account holder who enters records and selects Health features;
• another person whose information the account holder enters after confirming that the profile is about the account holder or supported by that person's permission or appropriate legal authority;
• Planique calculations and scheduling functions requested by the user; and
• minimized account, legal-choice, security and support events created while providing or protecting Health.

3. Sharing, processors, third parties and affiliates

Supabase receives and processes the categories in section 1 as Planique's contracted database, authentication, file-storage and server-function processor. This processing is necessary to provide the Health service the user requests. Access is limited to the disclosed instructions and operational need.

Planique does not send Health content to notification providers, app stores, RevenueCat, Vercel, Resend, advertising services or diagnostics providers. Remote reminders are generic. When an account holder deliberately exports a Health profile and chooses a destination through the device share sheet, the device makes the export available to that user-selected destination.

Categories of consumer health data shared with third parties or affiliates for their own purposes: none. Categories of third parties receiving consumer health data: none. Corporate affiliates receiving Planique data: none. Planique does not sell consumer health data.

No third party collects consumer health data through Planique over time and across different websites or online services. The public website uses only cookies necessary to operate and has no analytics, advertising, session replay or cross-site tracking.

4. Your Nevada rights

Subject to Nevada law, you may ask Planique to:

• confirm whether it is collecting, sharing or selling consumer health data concerning you;
• provide the required list of third parties with whom it has shared or sold that data;
• stop collecting, sharing or selling consumer health data concerning you; and
• delete consumer health data concerning you.

You may review and change many Health records inside the authenticated app. Planique provides no sale of consumer health data from which you need to opt out. You will not be discriminated against for exercising your rights.

5. How to submit a request or appeal

An account holder should use the authenticated Privacy & Legal controls when available. You may also contact support or write to planique.planner@gmail.com. Do not send Health records or identity documents through the form or ordinary email. We will arrange a controlled follow-up if additional information is reasonably necessary to authenticate the request.

We respond without undue delay and no later than 45 days after authenticating the request. When reasonably necessary because of complexity or the number of requests, we may extend that period once by up to 45 days and give notice and reasons within the initial period. Required information is free at least twice each year, subject to Nevada's rules for manifestly unfounded, excessive or repetitive requests.

If we refuse to act, you may appeal through the same support form or email by identifying the request and writing Nevada consumer health appeal. We respond in writing within 45 days after receiving the appeal. A denied appeal will explain the decision and provide contact information for the Nevada Office of the Attorney General.

If a request concerns a represented profile, Planique will not confirm that a profile or account exists until identity, authority, confidentiality and the rights of everyone involved have been assessed.

6. Withdrawal and deletion

You may withdraw the Health choice through the available app control or request that Planique stop collecting or sharing consumer health data concerning you. Withdrawing Health deactivates the module and deletes Health profiles, source records, Planique-created Health information, reminders and related Calendar items from active systems. A narrower profile or record deletion is available where supported.

After authenticating a deletion request, Planique deletes the covered data from its records and network within 30 days and notifies Supabase or another required recipient. Planique's residual encrypted database backups are designed to expire within seven days, and deletion instructions are reapplied if a backup is restored. This is shorter than Nevada's outside backup-deletion allowance. A narrow record may be preserved where Nevada or another binding law permits or requires it; it is not used for ordinary Health features.

7. Consent, policy changes and geofencing

Health remains locked until the user makes an affirmative Health choice. The choice identifies the categories, purposes, necessary processor and withdrawal consequences. Planique does not share consumer health data for an independent third-party purpose. If that fact changes, any required sharing consent will be separate from collection consent.

Planique will disclose material policy changes and obtain a new affirmative, voluntary choice before collecting, using or sharing additional categories or purposes where Nevada law requires it. Planique does not implement a geofence around a healthcare facility or another in-person healthcare location to identify or track a person, collect consumer health data, or send a Health- related message or advertisement.