Consumer Health Data Privacy Policy

Effective Date: 10/12/2026 · Last Updated: 10/12/2026

This Consumer Health Data Privacy Policy (“WA Policy”) applies to information defined as “Consumer Health Data” under the Washington State My Health My Data Act, chapter 19.373 RCW (“MHMD”), relating to consumers residing in Washington and consumers whose Consumer Health Data is collected in Washington (herein referred to as “Washington Consumers”, “you”, or “your”). We apply the same practices to every Nisone user, wherever they live.

Nisone is a journaling and health‑tracking application. Nearly everything you record in it is Consumer Health Data, so this WA Policy is short on exceptions and specific about what we do. Our use of your other personal information, such as your account details, is governed by the Nisone Privacy Policy. If you have questions about which policy applies to your information, please contact us.

Consumer Health Data We Collect

The Consumer Health Data we collect is the data you choose to enter. We collect the following categories of Consumer Health Data, when collected in connection with your past, present, or future physical or mental health status:

Identifiers: your email address. It is the only identifier we hold for you. We ask for your date of birth when you create an account, in order to confirm that you are an adult, and we do not store it.
Health and wellness information you record: the measurements you log, including numeric readings, ratings on a scale, yes/no answers, and free‑text journal entries; your answers to a study’s intake form, which may include health history, demographics, and other self‑reports the study author asks for; and the time each entry was taken, including, where a study calls for it, the time relative to waking.
Study participation information: which studies you have joined, which treatment arm you are in, when you started, and whether and when you left or were discontinued. The fact that you are following a particular treatment is itself Consumer Health Data, and it is the independent variable the study exists to examine.

We do not collect the following categories: commercial information, such as purchases or payment information; internet or other electronic network activity information; geolocation information; audio, visual, or similar information about you; or inferences drawn from any of the above. We run no inference of any kind on the data you record: there is no derived profile, no health score, and no prediction.

Sources of Consumer Health Data

We collect Consumer Health Data from one source: you, entering it directly into the measurement log in the Nisone mobile application or on the Nisone website.

We do not collect Consumer Health Data from third‑party websites or applications, data suppliers, advertising networks, social media companies, other service providers, publicly available sources, or any other person.

Why We Collect and Use Consumer Health Data

We collect and use your Consumer Health Data only as reasonably necessary to provide the service you have requested. Specifically, we use it to:

keep your measurement log so that you can review it;
schedule the measurements a study asks of you, and tie each measurement to its study and treatment arm;
establish whether you fit a study you ask to join, and describe the population whose measurements are pooled;
pool your measurements with those of other participants in the same study, so that the study can answer its question; and
comply with a legal obligation.

We do not use Consumer Health Data for advertising, and we do not use it for any purpose not listed here.

Nisone is a platform for open research, and sharing pooled measurements is part of the service you ask for when you join a study. We share the following categories of Consumer Health Data, in the following ways:

Health and wellness information you record, pseudonymously, with other Nisone account holders. Every study’s measurement log and intake answers can be downloaded by anyone with a Nisone account. The export identifies each participant by an enrollment number, not by your email address or any other identifier, and it does not include your account details. It does include free‑text entries exactly as you wrote them.
Study participation information, with the author of the study you join, who can see that an account has joined their study and which arm it is in, and can discontinue an enrollment.

We do not sell Consumer Health Data, and we do not share it with advertisers. We may disclose Consumer Health Data to comply with a valid legal process or to respond to such requests from public and government authorities.

As necessary for the purposes described above, we share Consumer Health Data with the following categories of third parties:

Other Nisone account holders. Anyone with a Nisone account can download the pseudonymous export of any study, including the measurement log and intake answers of every participant in it. This is the only way your recorded health information leaves Nisone, and it is the open‑research sharing you consent to when you join a study.
Study authors. The account holder who created a study you join can see that your account has enrolled, which arm it is in, and when you started or left.
Service providers. DigitalOcean, LLC runs the servers that operate Nisone, the database that stores your data, and the object storage that holds files uploaded to studies. DigitalOcean processes this data only to provide hosting to us, under a contract that does not permit any other use.
Public and government authorities. We may disclose Consumer Health Data to public and government authorities, including law enforcement, when reasonably necessary to comply with legal process.

We have no parent company and no affiliates, and we share Consumer Health Data with no one else.

MHMD Consumer Rights

MHMD provides certain rights to Washington Consumers with respect to their Consumer Health Data, subject to certain exceptions. You have the right to confirm whether we are collecting, sharing, or selling Consumer Health Data about you; to access that data, including a list of the third parties with whom we have shared it; to withdraw your consent to our collection and sharing of it; and to request its deletion. In addition, you have the right to appeal our refusal to act on your request. If your appeal is denied, you may submit a complaint with the Washington State Attorney General at www.atg.wa.gov/file-complaint.

Exercising MHMD Consumer Rights. You or your authorized agent may submit a request to exercise your MHMD Consumer Rights by one of the following methods:

Self‑service, by deleting your account from within the Nisone application. Deleting your account erases its identifiers, so that the measurements it produced can no longer be connected to you.
Emailing us at hello.nisone@proton.me from the address on your Nisone account.

We will respond to a request within 45 days. If we deny your request, we will tell you why, and you may appeal by replying to that denial; we will answer the appeal within 45 days and, if the appeal is denied, tell you how to contact the Washington State Attorney General.

Withdrawing consent stops further collection and sharing from the moment we receive your request. Data that other account holders have already downloaded as part of a study export is outside our control, and we cannot recall it.

Changes to This WA Policy

We will not collect, use, or share any category of Consumer Health Data, or use it for any purpose, that is not disclosed in this WA Policy without first updating it and asking for your affirmative consent again.