Washington Consumer Health Data Privacy Policy

Effective date: 17 August 2026

This policy applies to consumer health data covered by the Washington My Health My Data Act that Cropol Labs d.o.o. handles through Planique. Cropol Labs d.o.o. is established at Ulica sv. Ane 30A, 31000 Osijek, Croatia, company number 030322161. In this policy, Planique, we, us and our mean Cropol Labs d.o.o.

1. Consumer health data we collect and how we use it

We collect only the categories you choose to enter or create by using requested Health features:

Category	How Planique uses it
Health profile and linking information	A display label, emoji, account identifier and optional physical characteristics keep records organised and available only through the account holder's vault. A display label does not need to be a legal name or relationship.
Conditions, care and provider information	Diagnoses, medical history, insurance, emergency contacts, clinicians, appointments, visit notes, tests and procedures are stored, organised, displayed, exported and deleted as the user requests.
Medication information	Medication, prescription, dosage, schedule, occurrence, adherence and related notes are used to organise medications and requested reminders.
Bodily functions, symptoms and measurements	Symptoms, pain, vital measurements, weight, height and other user-entered observations are used to display histories and requested summaries.
Reproductive and sexual health information	Period and cycle history, pregnancy-related information, tests, symptoms, sexual-activity records and notes are stored and displayed as requested. Optional cycle estimates use only completed period dates after a separate choice.
Planique-created Health information	Requested schedules, medication occurrences, reminders, calendar views, summaries and optional cycle estimates are created from the records and settings the user supplies.
Health choices and service information	Health activation, household-use declarations, document versions, timestamps, deletion state, Health settings and minimized security events are used to enforce choices, protect the vault and handle rights or incidents.
Health information in a support or rights request	The support form is not intended for Health data and accepts no attachments. If a person nevertheless includes Health information, we use only what is necessary to respond, protect rights and arrange a safer follow-up.

We do not collect precise device location, wearable or medical-device feeds, HealthKit, Health Connect, provider records or health information from data brokers. We do not infer Health conditions for advertising, profiling or eligibility decisions.

2. Sources of consumer health data

Consumer health data comes from:

• the adult account holder who enters records and chooses Health features;
• another person whose information the account holder enters after confirming that the profile is about the account holder or supported by that person's permission or appropriate legal authority;
• Planique calculations and scheduling functions requested by the user; and
• minimized account, legal-choice, security and support events generated while providing or protecting Health.

Planique does not currently obtain Health data from another Planique account, a clinician, insurer, employer, wearable, medical device, advertising network, data broker or public source.

3. Categories of consumer health data we share

Planique does not share consumer health data with a third party or affiliate as “sharing” is defined by the Washington My Health My Data Act. Cropol Labs d.o.o. has no corporate affiliates that receive Planique data. We do not sell consumer health data.

Supabase processes the categories listed in section 1 as Planique's contracted database, authentication, file-storage and server-function processor. This processor disclosure is necessary to explain how Planique operates; a disclosure to a processor for the disclosed requested service is excluded from “sharing” under the Act.

Planique does not send Health content to notification providers, app stores, RevenueCat, Vercel, Resend or diagnostics providers. Remote reminders are generic. When the account holder deliberately exports a Health profile and chooses a destination through the device share sheet, the device makes the export available to the destination the account holder selects.

Categories of third parties with whom Planique shares consumer health data: none. Specific affiliates with whom Planique shares consumer health data: none.

4. Your Washington rights

Subject to the Act, you may:

• confirm whether Planique is collecting, sharing or selling consumer health data concerning you;
• access that data and receive the required recipient information;
• withdraw consent from future collection or sharing; and
• request deletion of consumer health data concerning you, including by notifying processors and other recipients where required.

Planique provides no sale of consumer health data from which you need to opt out. You will not be discriminated against for exercising these rights.

5. How to submit a request or appeal

An account holder should use the authenticated Privacy & Legal controls when available. You may also contact support or write to planique.planner@gmail.com. Do not send Health records or identity documents through the form or ordinary email. We will arrange a controlled follow-up if additional information is reasonably necessary to authenticate the request.

You do not need to create a new account. If you already have an account, we may ask you to use it. We respond without undue delay and within 45 days after receipt, subject to one permitted 45-day extension with timely notice and reasons. Required information is provided free up to twice annually, subject to the Act's rules for manifestly unfounded, excessive or repetitive requests.

If we refuse to act, you may appeal through the same support form or email by identifying the request and writing Washington consumer health appeal. We respond to the appeal in writing within 45 days. A denied appeal will explain the decision and how to contact the Washington Attorney General.

If a concern relates to a represented profile, Planique will not confirm that a profile or account exists until identity, authority, confidentiality and the rights of everyone involved have been assessed.

6. Withdrawal and deletion

Withdrawing the Health choice deactivates Health and deletes Health profiles, source records, Planique-created Health information, reminders and related Calendar items from active systems. A narrower profile or record deletion is available where supported.

Planique's residual encrypted database backups are designed to expire within seven days. If a backup is restored during that period, deletion instructions are reapplied. A narrow record may be preserved where the Act or another binding law permits or requires it; it is not used for ordinary Health features.

7. Changes to this policy

Before collecting, using or sharing an additional category of consumer health data, or using it for an additional purpose not disclosed here, Planique will update this policy and obtain affirmative consent where the Act requires it. The effective date above identifies the current version.