Nevada Consumer Health Data Privacy Policy

Effective Date: 10/13/2026 · Last Updated: 10/13/2026

This Nevada Consumer Health Data Privacy Policy ("NV Policy") applies to information defined as "consumer health data" under Nevada's consumer health data law, NRS 603A.400 to 603A.550 (the "Nevada Act"), relating to consumers residing in Nevada and consumers whose consumer health data is collected in Nevada (herein referred to as "Nevada Consumers", "you", or "your"). In this NV Policy we call that information "Consumer Health Data".

Nisone is a journaling and health‑tracking application. Nearly everything you record in it is Consumer Health Data, so this NV Policy is short on exceptions and specific about what we do. If you have questions about this NV Policy, please contact us.

Consumer Health Data We Collect and How We Use It

The Consumer Health Data we collect is the data you choose to enter. We collect the following categories of Consumer Health Data, when collected in connection with your past, present, or future physical or mental health status:

• Identifiers: your email address. It is the only identifier we hold for you. We ask for your date of birth when you create an account, in order to confirm that you are an adult, and we do not store it.
• Health and wellness information you record: the measurements you log, including numeric readings, ratings on a scale, yes/no answers, and free‑text journal entries; your answers to a study's intake form, which may include health history, demographics, and other self‑reports the study author asks for; and the time each entry was taken, including, where a study calls for it, the time relative to waking.
• Study participation information: which studies you have joined, which treatment arm you are in, when you started, and whether and when you left or were discontinued. The fact that you are following a particular treatment is itself Consumer Health Data, and it is the independent variable the study exists to examine.

We use each of these categories in one way: to keep your measurement log, to run the studies you join, and to pool your measurements with those of other participants in the same study. We run no inference of any kind on the data you record: there is no derived profile, no health score, and no prediction.

We do not collect the following categories: commercial information, such as purchases or payment information; internet or other electronic network activity information; geolocation information; audio, visual, or similar information about you; or inferences drawn from any of the above.

Sources of Consumer Health Data

We collect Consumer Health Data from one source: you, entering it directly into the measurement log in the Nisone mobile application or on the Nisone website.

We do not collect Consumer Health Data from third‑party websites or applications, data suppliers, advertising networks, social media companies, other service providers, publicly available sources, or any other person.

Purposes of Collecting, Using, and Sharing Consumer Health Data

We collect, use, and share your Consumer Health Data only as necessary to provide the service you have requested, and with the consents you give in the Consumer Health Data Collection Consent and the Consumer Health Data Sharing Consent. Specifically, we use it to:

• keep your measurement log so that you can review it;
• schedule the measurements a study asks of you, and tie each measurement to its study and treatment arm;
• establish whether you fit a study you ask to join, and describe the population whose measurements are pooled;
• pool your measurements with those of other participants in the same study, so that the study can answer its question; and
• comply with a legal obligation.

We share Consumer Health Data for one purpose: open research, so that each study's pooled measurements can answer the study's question and be checked by anyone who cares to. We do not use Consumer Health Data for advertising, and we do not use or share it for any purpose not listed here.

How Consumer Health Data Is Processed

Consumer Health Data is sent from the Nisone application or website to our servers over an encrypted connection and stored in a database on servers that DigitalOcean, LLC hosts for us in the United States. It is read to show you your own log, to schedule your measurements, and to build each study's pooled export. Everyone at Nisone with access to it is bound by a duty of confidentiality. We run no automated analysis on it beyond pooling it with the measurements of other participants in the same study.

Consumer Health Data We Share, and With Whom

The Nevada Act requires that your consent to sharing be obtained separately from your consent to collection, so we ask for it in its own document, the Consumer Health Data Sharing Consent. We share the following categories of Consumer Health Data with the following categories of third parties:

• Health and wellness information you record, pseudonymously, with other Nisone account holders. Every study's measurement log and intake answers can be downloaded by anyone with a Nisone account. The export identifies each participant by an enrollment number, not by your email address or any other identifier, and it does not include your account details. It does include free‑text entries exactly as you wrote them.
• Study participation information, with study authors: the account holder who created a study you join can see that your account has enrolled, which arm it is in, and when you started or left.
• Any category of Consumer Health Data, with public and government authorities, including law enforcement, only when reasonably necessary to comply with a valid legal process.

DigitalOcean, LLC, which hosts our servers and object storage, processes Consumer Health Data on our behalf to provide hosting to us, under a contract that does not permit any other use; that disclosure is necessary to provide the service you requested. We have no affiliates. We do not sell Consumer Health Data, and we do not share it with advertisers or with anyone not named here.

Your Rights and How to Exercise Them

The Nevada Act gives Nevada Consumers the right to confirm whether we are collecting, sharing, or selling Consumer Health Data about you; to a list of the third parties with whom we have shared it or to whom we have sold it; to have us stop collecting or sharing it; and to have it deleted. The Nevada Act does not require us to give you a copy of your data, but we do. You also have the right to appeal our refusal to act on a request.

You or your authorized agent may submit a request by one of the following methods:

• Self‑service, by deleting your account from within the Nisone application. Deleting your account erases its identifiers, so that the measurements it produced can no longer be connected to you.
• Emailing us at hello.nisone@proton.me from the address on your Nisone account, which is how we confirm the request is yours.

We will respond to a request within 45 days of confirming it came from you; where we need more time we may extend once by 45 days, and we will tell you within the first 45 days and say why. We complete deletion within 30 days of confirming a deletion request, and we instruct our hosting provider to delete what it holds on our behalf. If we deny your request, we will tell you why, and you may appeal by replying to that denial. We will answer the appeal in writing within 45 days and, if the appeal is denied, tell you how to contact the Office of the Nevada Attorney General, which accepts complaints at ag.nv.gov/Complaints/CSU_Complaints___FAQ.

Withdrawing consent stops further collection and sharing from the moment we receive your request. Data that other account holders have already downloaded as part of a study export is outside our control, and we cannot recall it.

Reviewing and Changing Your Consumer Health Data

You can review every measurement you have recorded in the Nisone application, change a measurement's value, and delete a measurement, at any time and without asking us. Intake answers cannot be changed in the application; email us from the address on your account and we will correct them. You can download everything you have recorded, including your intake answers, as a CSV file from your account settings on the Nisone website.

Tracking by Third Parties

No third party collects Consumer Health Data, or any other information about you, over time and across different Internet websites or online services through Nisone. We embed no trackers, no analytics, and no advertising code.

Changes to This NV Policy

We will not collect, use, or share any category of Consumer Health Data, or use it for any purpose, that is not disclosed in this NV Policy without first updating it and asking for your affirmative consent again. We notify Nevada Consumers of a material change to this NV Policy in the Nisone application, as its own notice, before the change takes effect, so that you can read what changed and, if you prefer, withdraw your consent or delete your account first. The effective date at the top of this NV Policy is the date of its most recent change.