Consumer Health Data Privacy Policy
Effective: October 6, 2026
On this page
This policy is for people who live in Washington, Nevada, or another state with a consumer health data law, such as Connecticut. It explains what consumer health data Flarely collects, why, who handles it for us, and how to use your rights. It adds to our Privacy Policy, which covers everything else.
"Consumer health data" means personal information that is linked, or could reasonably be linked, to you and that says something about your physical or mental health. Flarely is an app for people with Crohn's disease and ulcerative colitis, so we treat most information connected to your account or your device as consumer health data, even when it doesn't mention your health directly.
1. What stays on your phone
What you log in Flarely (bowel movements, meals, stress, fasting, plans, your answers when you set up the app, and the summaries the app makes) is stored on your device. We don't collect it and can't see it. You can view, change, export, or delete it in the app at any time. It leaves your device only when you use an AI feature (below) or share something yourself.
2. Consumer health data we collect
| What | Where it comes from | Why we collect it and how it's used |
|---|---|---|
| Entries for an AI summary or recap, only when you ask for one: for each bowel movement, its time, pain level, and whether there was blood or urgency (in newer versions, also how much blood, how urgent, mucus, and stool type, if you recorded them); stress check-ins; fasting entries; how often each meal tag appeared; your time zone | You, through the app | To write the summary you asked for. Our server passes the entries to OpenAI and keeps no copy. The summary is saved only on your device. |
| Meal photos and the food names found in them, only when you ask the app to analyze a photo | You, through the app | To identify the foods and suggest meal tags. Photos are sent without their location or other photo metadata, and our server keeps no copy. |
| Account information: name, email address, Apple user ID if you use Sign in with Apple, time zone, email preference, and free trial details | You, and Apple if you use Sign in with Apple | To run your account and send the emails described in our Privacy Policy. Having a Flarely account can suggest that you live with Crohn's or colitis, which is why we list it here. |
| App usage and crash reports: which screens and features you use, whether you allowed notifications or AI features, crash details, an app instance ID, your operating system and device model, and your country and region | The app, automatically | To see how the app is used and to fix problems. These never include what you logged, such as pain, blood, or what you ate, or anything you type. You can turn them off in the app (Profile, then AI & privacy, then Usage and crash reports). |
| Subscription information: purchases, free trial, and subscription status | Apple, through RevenueCat | To give you access to what you paid for. It contains no health details. |
| Website visits: which pages you read on flarelyapp.com | Your browser, through Cloudflare Web Analytics (no cookies) | To count visits and see which pages are useful. Reading our pages about Crohn's or colitis could suggest an interest in these conditions, which is why we list it here. |
We don't collect your precise location, we don't read Apple Health or other apps, and we don't use geofences.
3. Who handles it for us
We don't sell consumer health data, and we don't share it with third parties. We use these service providers to run Flarely. Each one handles the data only for us, under a contract that stops it from using the data for anything else:
| Service provider | What it does for us | Consumer health data it handles |
|---|---|---|
| OpenAI | Analyzes meal photos and writes AI summaries | Meal photos, food names, summary entries. Not used to train its models; kept up to 30 days for abuse monitoring, then deleted. |
| Cloudflare | Hosts our server and website; counts website visits | AI requests as they pass through (not stored), IP address, short technical logs, website page views |
| Google (Firebase and Google Analytics) | Accounts, crash reports, app usage | Account information, crash reports, usage events |
| RevenueCat | Subscription status | Flarely user ID and purchases |
| Resend | Sends our emails | Name, email address, and email content (kept 30 days) |
| Apple | Sign in with Apple, payments, checking that requests come from the real app | Name and email (your choice), purchases |
We may also disclose information if the law requires it, for example to comply with a valid court order.
Tracking across websites and apps: No third party collects consumer health data about you across other websites or apps through Flarely. The app has no advertising tools and doesn't use your device's advertising identifier. On our website, Cloudflare Web Analytics counts visits without cookies and doesn't follow you to other websites.
4. Your consent
Before the app sends anything to AI features, it asks for your permission. You can turn this off at any time in the app (Profile, then AI & privacy). If we ever want to collect or share consumer health data for a new purpose, we'll ask you first.
5. Your rights
You have the right to:
- Know and access: confirm whether we collect, share, or sell your consumer health data, get a copy of it, and get a list of every company we've shared it with and how to contact them. (We don't sell it, and the companies above are the ones that handle it for us.)
- Delete: have us delete your consumer health data. We'll delete it from our records and tell our service providers to delete it too.
- Withdraw consent: stop the collection or sharing you agreed to.
- Appeal: ask us to reconsider if we turn down a request.
How to use them:
- To stop AI features, or usage stats and crash reports, turn them off in the app (Profile, then AI & privacy).
- To delete your account, everything you've logged on your device, and the records our service providers hold for you (your subscription record at RevenueCat and your usage stats at Google), use Profile, then Delete account.
- For anything else, email [email protected] with "Health data request" in the subject.
To protect your data, we'll ask you to write from the email address on your account, or we'll ask for enough details to confirm the request is yours. We answer within 45 days. If we need more time, we may extend that once by up to 45 more days and will tell you why. Requests are free.
Appeals: If we turn down your request, reply to our answer with "Appeal" in the subject. We'll decide within 45 days and explain our decision. If we still turn it down, you can contact your attorney general: Washington or Nevada.
6. Changes to this policy
If we change this policy, we'll update the effective date at the top. For a material change, such as collecting a new kind of consumer health data or using it for a new purpose, we'll tell you in the app or by email before it takes effect, and ask for your consent where the law requires it.
7. Contact us
Email: [email protected]
Low Latency Labs LLC
2501 Chatham Rd Suite N
Springfield, IL 62704