Consumer Health Data Privacy Policy

This policy is separate from our Privacy Policy on purpose. Washington's My Health My Data Act, Nevada SB 370 and Connecticut's health data amendments require a distinct notice covering consumer health data specifically, and this is it. If you live in Washington, Nevada or Connecticut it governs how Nghtstand, Inc. handles that category of information about you. We apply it to everyone regardless of where you live, because we would rather run one standard than three.

What we treat as consumer health data

These laws define consumer health data broadly. It is not only medical records. It includes information that identifies your past, present or future physical or mental health, and information from which health or sexual activity can be inferred. On nghtstand, that means:

• HIV status and last tested date, if you choose to add them to your profile. Both fields are optional and both are blank unless you fill them in.
• Sexual orientation, sexuality and relationship status, and the preferences you list such as position, kinks and what you are looking for.
• Precise location, because where you are can support an inference about sexual activity. This includes your live location and your saved home location.
• Body information you choose to enter, such as height, body type and body hair.
• Content you create that discusses health, testing or prevention, including messages, board posts and your bio.

How we collect it

Only from you, and only when you enter it. We do not buy health data, we do not receive it from data brokers, and we do not infer it from third-party tracking. Every health-related field on your profile is optional and blank by default. Location is collected from your device only after your browser asks you and you allow it.

Why we use it

• To show you people near you and to show you to them, which is the service.
• To apply the filters you set, and the filters other people set.
• To display the information you chose to put on your own profile.
• To keep the site safe, investigate reports and enforce our policies.

We do not use consumer health data for advertising. We do not run behavioural advertising on nghtstand at all.

Who we share it with

We do not sell consumer health data. We have never sold it and we will not.Under these laws "sell" includes exchanging it for anything of value, not just money.

The only parties who can technically access data on our behalf are the service providers listed in our Privacy Policy — our hosting and database provider, our map provider, our photo moderation provider and our email provider. They act on our instructions and are not permitted to use it for their own purposes. Our map provider receives coordinates in order to draw a map; it does not receive your profile.

We may disclose information if we are legally required to, and we will require a valid legal process before doing so. We will tell you unless we are legally prohibited from telling you.

What you control, and how

You have the right to:

• Know what consumer health data we hold about you and who we have shared it with.
• Delete it. You can clear any health field on your account page yourself at any time, and it is removed immediately. You can also delete your entire account from the same page.
• Withdraw consent to collection and to sharing, separately.
• Appeal if we refuse a request. See Appeals.

Most of this you can do yourself in seconds without contacting anybody, which is faster than we could do it for you. For anything else, email support@nghtstand.com and we will respond within 45 days.

Things worth knowing about how this site works

• You can hide fields. Anything on your profile can be hidden from other members while still being usable by filters, or left blank entirely.
• Your location is approximate to others by default. Other members see a fuzzed position, not your exact one.
• Unsending a message removes it from both sides. Press and hold your own message. It does not undo a screenshot somebody already took.
• Deleting your account deletes your data. It is not archived for later.

Retention

We keep consumer health data for as long as your account exists, because it is on your profile and the profile is the product. When you delete a field it is gone. When you delete your account, your profile, photos, messages and location are deleted. Limited records we are legally required to keep, such as age-verification consent records, are retained separately and are described in our Privacy Policy.

Contact

Nghtstand, Inc. · support@nghtstand.com

If you are in Washington and believe we have not complied with this policy, you may contact the Washington State Attorney General's Office. If you are in Nevada, you may contact the Nevada Attorney General.