Consumer Health Data Privacy Policy

Why this page exists

Washington's My Health My Data Act, Nevada's SB 370, and Connecticut's health-data amendments each define a category called consumer health data and require a separate disclosure about it. This is that disclosure.

These laws classify data, not companies. They apply to any business that holds information indicating a person's physical or mental health status — and they were written specifically to reach consumer apps, because the federal health-privacy law does not apply to us: HIPAA covers doctors, hospitals, and insurers, and not companies like this one. A journal entry describing a hard week falls inside the state definition wherever it is stored.

So this page is not a claim about what we are. Donny Wonny is a wellness product. We are not a healthcare provider and not a HIPAA covered entity, and we are not a medical device. We do not diagnose, treat, prescribe, or make clinical claims, and we say so plainly on our disclaimer page. Being covered by these statutes is about what we store, not what we do.

What we count as consumer health data

We apply this section to the content you write about how you are feeling, and to anything we infer from it:

• Mood check-ins — the moods and intensity you log.
• Journal entries, including the transcript of a voice journal. (The audio itself is transcribed and then deleted; it is not stored.)
• Let It Out entries — the vent space, which exists specifically for difficult feelings.
• Donny conversation history — your messages to Donny and its replies, which are frequently about what you are going through.
• Crisis-screening signals — the output of the automated check described in Safety, including whether it flagged a message and any resulting alert. This is an inference about your wellbeing and is the most sensitive item on this list.
• Voice mood detection, if you turn it on. It is off by default and requires your explicit consent.
• Facts Donny has remembered, when chat memory is switched on — off by default — to the extent they touch how you are doing.

What we do not count

Being thorough in one direction should not mean overreaching in the other. The following are ordinary product data, and we do not treat them as consumer health data: your email address and login credentials, your age attestation, your display name, cosmetic Customize Donny choices, payment and subscription records, and general engagement data such as streaks, badges, and challenge participation.

We also collect no biometric or genetic data. The optional camera feature described in our Privacy Policy is not offered at launch, and if it ships, face detection would run on your device and no frames would be uploaded.

Where it comes from

All of it comes from you — typed, spoken, or tapped into the app. We do not buy this data, we do not receive it from data brokers, and we do not derive it from your activity on other services.

Why we collect it

Only to run the features you are using: saving your journal, showing your mood history, letting Donny reply in context, and surfacing crisis resources when the automated check fires. We do not use it for advertising, and we do not profile you for advertising.

Where these laws require consent before collecting or sharing consumer health data, we ask for it, and features that depend on it stay off until you turn them on.

Who receives it

We have no affiliates. Donny Wonny LLC is a single-member Texas company with no parent, subsidiaries, or sister companies, so there is no corporate family for your data to travel around.

These categories of service providers may process consumer health data in order to run the service. The full list of everyone we work with is in Privacy Policy §3; the subset that can touch this particular data is:

• Cloud hosting and database (Google Cloud / Firebase) — where your entries are stored.
• AI processing (OpenAI) — receives your message and relevant context in order to generate Donny's reply. Per OpenAI's API terms, API inputs and outputs are not used to train their models.
• Translation (Google Cloud Translation) — only if you have switched on auto-translate.
• Transactional email (SendGrid) — only on the crisis-notification path, if you have opted in and named an emergency contact.
• Push notification delivery (Expo) — a safety-alert notification travels through Expo to reach a device. Alert notifications never contain journal, vent, or chat text.

Each is bound by contract to use the data only to provide the service to us. Access by people working on Donny Wonny is limited to what is necessary, as described in Privacy Policy §4.2.

We do not sell it

We do not sell consumer health data, and we do not share it for advertising. These laws allow a sale only with a separate signed authorization, and we do not seek one — our commitment not to sell your data is unconditional, not a default we could quietly change.

Your rights

If you live in Washington, Nevada, or Connecticut, you may:

• Confirm and access — ask whether we collect or share your consumer health data, see it, and get the list of third parties above with a contact for each.
• Withdraw consent — for any feature you switched on, at any time. Withdrawing stops future collection for that feature.
• Delete — ask us to delete your consumer health data, including from our service providers.

How: in the app, open Settings → Privacy, where you can switch features off, delete individual entries, and request deletion of your account and its contents. Or email privacy@donnywonny.com from the address on your account, or use our contact form.

Timing: we respond within 45 days, and will tell you if we need a further 45 days. Deletion is carried out as described in Privacy Policy §7.2, whose only exceptions are a legal hold and the financial records we are required to keep. If we deny a request, you can appeal — see Privacy Policy §5.3. Washington residents may also complain to the Washington State Attorney General.

No geofencing

We do not operate a geofence around any healthcare facility, and we never use location to infer anything about your health. The one place the app uses location is the optional Local Weather feature, which sends coordinates rounded to roughly a kilometre and no account identifier.

One limit worth stating plainly

The crisis check is an automated keyword and pattern screen. It helps, and it will miss things — it is not a clinical assessment and it is not a person watching. You can always open crisis resources yourself from Safety without waiting for anything to detect a problem.

Questions? Email privacy@donnywonny.com. See also our complete Privacy Policy, Do Not Sell or Share My Personal Information, and Limit the Use of My Sensitive Personal Information.