Connecticut Privacy Notice

Effective Date: 10/15/2026 · Last Updated: 10/15/2026

This Connecticut Privacy Notice ("CT Notice") is for consumers residing in Connecticut ("Connecticut Consumers") under the Connecticut Data Privacy Act, Conn. Gen. Stat. §§ 42‑515 to 42‑526 ("CTDPA"). The Privacy Policy, the Consumer Health Data Collection Consent and the Consumer Health Data Sharing Consent apply to every Nisone user and are our privacy notice under the CTDPA. This CT Notice states what the CTDPA asks of us for Connecticut Consumers beyond those documents, and nothing else. If you have questions about this CT Notice, please contact us.

Nearly everything you record in Nisone is sensitive data under the CTDPA: it reveals a mental or physical health condition, and it is consumer health data. We process it only with your consent, which you give as three separate acts when you create your account: consent to the processing described in the Privacy Policy, consent to collection in the Consumer Health Data Collection Consent, and consent to sharing in the Consumer Health Data Sharing Consent. Each is its own document with its own checkbox, and none is part of the Terms of Service. We do not process sensitive data for any purpose those documents do not disclose.

Study Exports Are Pseudonymous Data

While your account exists, the study exports that include your measurements are pseudonymous data under the CTDPA. Each participant is identified by an enrollment number; the information that links that number to your account is kept separately in our systems; and no export includes your email address or any other identifier. We share exports with other Nisone account holders for open research, as the Consumer Health Data Sharing Consent describes, and with no one else.

Everyone who downloads a study export agrees in our Terms of Service not to attempt to re‑identify any participant, not to combine an export with other information for that purpose, and not to pass an export to anyone they have reason to believe would do either. We oversee compliance with that obligation and take appropriate steps to address any breach of it. If you believe an export has been used to attempt to identify a participant, tell us at hello.nisone@proton.me.

You may withdraw your consent at any time, as easily as you gave it: delete your account from within the Nisone application, or email us at hello.nisone@proton.me from the address on your Nisone account. We stop processing your personal data as soon as practicable, and no later than fifteen days after we receive your withdrawal.

Deleting your account does this at once: your email address and password are erased, and what remains can no longer be connected to you. A withdrawal sent by email is completed within the same fifteen days. Because recording your measurements and pooling them with those of other participants is the service, withdrawing consent ends your use of Nisone.

De‑identified Data After Deletion

If an account is deleted, the measurements it produced stay within the studies they belong to, in de‑identified form: nothing we keep can reasonably be linked to you. We take reasonable measures to ensure that de‑identified data cannot be associated with an individual, we maintain and use it only in de‑identified form, and we do not attempt to re‑identify it.

What We Do Not Do

We do not sell personal data. We do not process personal data for targeted advertising. We do not profile you in furtherance of decisions that produce legal or similarly significant effects. We do not use personal data to train large language models or any other machine‑learning system. Because we do none of these things, there is nothing for you to opt out of.

Your Rights Under the CTDPA and How to Exercise Them

The CTDPA gives Connecticut Consumers the right to confirm whether we are processing personal data about you and to access it; to correct inaccuracies in it; to delete personal data provided by you or obtained about you; to obtain a copy of it in a portable and readily usable format; and to opt out of the sale of personal data, targeted advertising, and profiling, none of which we do.

Exercising your rights. You or your authorized agent may submit a request by one of the following methods:

We respond within 30 days of confirming a request came from you, which is within the 45 days the CTDPA allows. If we need the one 45‑day extension the CTDPA permits, we tell you within the first 45 days and say why. Requests are free; if you make more than one request of the same kind in a twelve‑month period we may charge a reasonable fee or decline a request that is manifestly unfounded, excessive, or repetitive. We do not discriminate against you for exercising these rights.

Appeals. If we decline a request, we tell you why, and you may appeal by replying to that denial. We answer every appeal in writing within 45 days. If the appeal is denied, you may submit a complaint to the Connecticut Attorney General through the complaint form at portal.ct.gov/ag/common/complaint-form-landing-page.

Changes to This CT Notice

We will not process sensitive data for any purpose, or share it with any recipient, that the documents named above do not disclose without first updating them and asking for your consent again. We notify Connecticut Consumers of a material change to this CT Notice in the Nisone application, as its own notice, before it takes effect, so that you can read what changed and, if you prefer, withdraw your consent first. The dates at the top of this CT Notice say when it took effect and when it was last changed.