CONSUMER HEALTH DATA PRIVACY POLICY

For Washington and Nevada residents.

This policy is required by the Washington My Health My Data Act (RCW 19.373) and the Nevada consumer health data law (SB 370, 2023). It applies only to consumer health data, and only to residents of Washington and Nevada and to data collected in those states. All other data we handle is described in our main Privacy Policy.
The controller of this data — the “regulated entity” under both laws — is ATLASHC Paweł Dolatowski, ul. Sadowa 9, 64-514 Pamiątkowo, Poland, privacy@rentyourtime.app.
Effective July 23, 2026Version 1.0
1

What consumer health data we collect, and why

RentYourTime is a digital wellbeing app. Most of what it measures never reaches us: your per-app breakdown and your live usage meter are computed and stored on your iPhone using Apple’s Screen Time frameworks, and we cannot read them.

We treat the following as consumer health data:

CategoryPurpose and use
Aggregated daily wellbeing totals — minutes over your allowance and “rent avoided” — collected only if you switch on cloud backupTo restore your streak and history when you move to a new phone. Nothing else.
The account identifier (your email address) to the extent it links you to the totals aboveTo associate the backup with your account so it can be restored to you

We do not collect any other category of consumer health data. We do not infer or derive health conditions, diagnoses, treatment, medication use, reproductive or sexual health information, biometric or genetic data, or precise location from what we collect, and we do not collect precise location at all.

If we ever wish to collect a category or serve a purpose not listed above, we will ask for your consent first.

2

Where the data comes from

The sole source is you and your iPhone, through the RentYourTime app, after you switch on cloud backup. We do not obtain consumer health data from data brokers, advertising networks, public records, or any other outside source.

3

What we share, and with whom

We do not share consumer health data with third parties for their own purposes.

The data described in §1 is stored on our behalf by a service provider acting as our processor under a written contract that forbids any use other than delivering the service to you:

ProcessorRoleContact
Amazon Web Services EMEA SARL (Luxembourg) / Amazon Web Services, Inc. (USA)Hosting and encrypted storage in AWS region eu-central-1 (Frankfurt, Germany)aws.amazon.com/contact-us

We share no consumer health data with affiliates. We have no affiliates.

4

We do not sell your consumer health data

We have never sold consumer health data and we do not sell it. Under both laws, any sale would require your signed, separate valid authorization obtained in advance, and we would have to give you a copy of it. We are not asking for one.

5

We do not use geofencing

We do not use a geofence around any health care facility, and we do not use geofencing to identify or track you, to collect consumer health data, or to send you notifications or advertising. We do not collect precise location information.

6

Your rights, and how to use them

Washington and Nevada residents have the right to:

  • Confirm and access. Ask whether we are collecting, sharing, or selling your consumer health data, and receive a copy of it, together with a list of all third parties and affiliates with whom we have shared or sold it and an active means of contacting them.
  • Withdraw consent. Withdraw your consent to our collection of your consumer health data, and separately to any sharing of it.
  • Delete. Have your consumer health data deleted from our records.

Self-service. The fastest route for all three is inside the app, at Settings → Privacy: switch cloud backup off to withdraw consent and stop collection, export your data, or delete your account.

By email. Write to privacy@rentyourtime.app with the subject line “Consumer Health Data Request” from the email address on your account. That is how we verify you. You may use an authorised agent, who must supply written proof of authority.

Our response. We answer within 45 days. If we need more time, we will tell you within those 45 days and take up to 45 days more. Requests are free, up to twice a year.

Deletion. When you ask us to delete, we remove your consumer health data from our active systems and from archived and backup systems within 30 days, and we notify our processor to do the same. We will confirm when it is done.

Appeals. If we refuse a request, we will tell you why and how to appeal. Write to privacy@rentyourtime.app with “Appeal” in the subject line and we will respond in writing. If we deny your appeal, you may complain to your Attorney General:

Washington: Office of the Attorney General, Consumer Protection Division — file a complaint at atg.wa.gov
Nevada: Office of the Attorney General, Bureau of Consumer Protection — ag.nv.gov
7

How we keep it safe

We restrict access to consumer health data to the people who need it to do their job, and we protect it with encryption in transit and at rest and with the on-device architecture described in §1, which means most of what the app measures is never in our possession at all.

8

Changes

If we change this policy in a way that affects you, we will update the version and date above and tell you inside the app before the change takes effect. Where a change requires your consent, we will ask for it separately.

9

Contact

privacy@rentyourtime.app — a human, not a bot, will reply.