Consumer Health Data Privacy Policy

1. Consumer Health Data We Collect and How We Use It

• Practice history: each Grow practice you do: which one, the day (in your time zone), how long it lasted, whether you finished it (or, in the Happiness Program, whether you tried, adapted or skipped it), and your optional “Useful,” “Neutral” or “Not for me” answer. We use it to show your history, count the practice days the Happiness Program asks for, add your Self-kindness Kind Acts, and skip a reminder when you have already done that activity today.
• Grow use and share actions: the day you use Grow, which tool you start, and whether you take a private-message share action or open your phone's share sheet. We keep these limited usage records for 97 days to count use and improve Grow; opening the share sheet does not tell us whether you shared anything or which other app you chose. These records do not include your text, answers or recipient.
• Notes and reflections: the private notes you add after a practice and the reflections you write in the Happiness Program. They are stored encrypted, and we use them only to show them back to you and to add to something you share, if you choose to (Section 4).
• Goals: your intentions and what you write with them (why it matters, a small step, when you'll do it and an easier version), the goals the Happiness Program saves for you, each goal's status, and your check-ins on it (such as “Tried it”) with any note. What you write is stored encrypted. We use it to show your goals and weekly review, to include the goal's words in a reminder you set for it, and to add to something you share, if you choose to (Section 4).
• Happiness Program progress: whether you chose Teen or Adult wording, the lesson parts you have read, the days you practiced, when you chose “Continue anyway,” the stages and levels you have finished, and your optional self-check answers and practice ratings (each from 0 to 10), which are stored encrypted. We use it to run the program and to show your results side by side when you finish a level.
• Check-in answers: each stage starts with “How are you doing today?” The app sends your answer so the program can respond; for example, the lowest answer brings up ways to get help. We keep your answer, encrypted and with its date, only if you turn on “Save my check-ins,” and then we show you your own trend at the end of each level. With saving off, we don't keep it. No answer alerts anyone.
• Power breathing hold times: the app sends each round's hold time with the session. We keep them, encrypted, in your private hold history only if you turn on “Save my hold times.” We also record when you acknowledged the Power breathing safety screen; we never ask for or store health answers.
• Your saving choices: when you turned “Save my check-ins” and “Save my hold times” on or off, and the privacy policy version that applied. This is our record of your consent.
• Reminders and favorites: the times, days and time zone of the Grow reminders you set, any pause, and the practices you mark as favorites. We use them to send only the reminders you asked for, and we keep a record of each reminder sent for 30 days. Other settings, such as a practice's pace, voice and sounds and the choices you make in lessons, stay on your phone and are not sent to us.
• Self-kindness Kind Acts: completing a practice (or trying your goal's small step) adds one Self-kindness Kind Act a day, and finishing a stage or a level adds one more. We keep them with your other Kind Acts, and only you see them: other members see your other Kind Acts on your profile, never your Self-kindness count, and it isn't part of the total or streak they see.
• Membership and free-pass records: if you buy a Grow membership through the App Store or Google Play: the store, your price level, monthly or yearly, its status, its start, renewal and end dates, whether it will renew, the store's identifiers for the purchase (a purchase token is stored encrypted), the notices the store sends us about it, and a random purchase-account number we create for you. If you redeem a free pass: the offer it came from, its start and end dates, whether it was ended early, and the notices we sent you about it. We use these records to give you full access, show your membership in the app, and send free-pass notices.
• Age-range result: the result of the age check the app runs through Apple's or Google's age features (for example adult, under 18, or under 13) and when it was checked, never the raw information the store provides. In Grow we use it to keep Grow closed to accounts that an age check has locked, and to add “Recommended with an adult nearby” before Power breathing for people under 18.

We also use counts of Grow activity to understand how Grow is used and to run and improve it; our admin reports show only grouped statistics, hide counts below five, and never show a person's activity, private text, check-ins, hold times, safety answers or age information.

We don't scan or analyze what you write. Our admin tools never show your notes, check-ins or answers, and we never use Grow data for advertising or to train large language models.

2. Where It Comes From

• You: what you write, choose and answer in Grow, and the code you enter on our free-pass page.
• The Kind Act app on your phone: it records your sessions, your local date and your time zone.
• Apple and Google: the status of a membership you buy through the App Store or Google Play, and the result of their age features.
• Kind Act: what we work out from the above, such as your program progress, your Self-kindness Kind Acts and whether you have full access.

3. How We Handle and Protect It

We use consumer health data only for the purposes in Section 1, and we handle it this way:

• Your notes, reflections, goal text, check-in answers, self-check answers, practice ratings, hold times and store purchase tokens are encrypted in our database, so they stay encrypted in our backups too.
• Grow's screens in the app send nothing to third-party analytics services.
• Our admin tools need an administrator account with two-step sign-in. They show whether you have a membership or pass, never your notes, check-ins or answers.

These kinds of service providers process it for us, only to provide their service to us:

• cloud hosting for our servers and database, and storage for our backups;
• storage and delivery of Grow's audio files, which sees which file your phone downloads but not your account;
• Apple's and Google's push notification services, which deliver the reminders you set and free-pass notices (a goal reminder includes the goal's words);
• email delivery, for free-pass notices when a push notification can't reach you;
• the in-app chat service, for anything you choose to send in a message;
• error monitoring and crash reporting, which receive technical details when something goes wrong, such as which Grow screen or address was in use and, for errors on our servers, your account number, but not what you write; and
• website hosting for our free-pass page.

4. Who We Share It With

We share consumer health data only with:

• People you choose, when you tap Share: only what you pick. That is a card saying what you did (for example, “I finished a breathing session.”) and, only if you turn on “Add my note,” your note, reflection or intention. You can send it in a message to someone you already chat with, post it on Good Vibes, where it is public to everyone, or send it with your phone's share menu. Whoever receives it can pass it on. A share never includes your check-ins, hold times or pass status.
• Apple or Google, when you buy or manage a Grow membership through the App Store or Google Play: your purchase-account number and the identifiers of your purchase, so we can confirm it and keep your access in step with the store. Apple and Google handle your payment under their own privacy policies.
• Government authorities, only when the law requires it, such as a valid court order.

We never sell consumer health data. We do not use your personal data for targeted advertising. We don't share it with any affiliate, advertiser or data broker, with schools or employers, or with the person or group that gave you a free-pass code. A free pass gives no one else access to your Grow data. Nothing you write or answer in Grow is shown to other people unless you choose to share it.

5. Your Rights and How to Use Them

• See it: much of it is in the app, including your goals, saved check-ins, hold history, Happiness Program record and membership. You can also ask us to confirm whether we collect, share or sell your consumer health data, for a copy of it, and for a list of every third party and affiliate we have shared it with, along with an email address or other way to contact each one.
• Change it: you can edit your goals in the app. To correct anything else, ask us.
• Stop saving: turn off “Save my check-ins” (in Program settings) or “Save my hold times” (in Power breathing) at any time. We stop saving new ones right away; what you saved before stays until you delete it. You can also ask us to stop collecting and sharing your consumer health data: we then turn Grow off for your account and collect nothing new through Grow until you ask us to turn it back on, except that notices from Apple or Google keep the record of a membership you bought up to date until it ends.
• Delete it: in the app, delete your saved check-ins (Program settings → Delete my check-ins) and your hold history (Hold history → Delete history). To delete all of your Grow data and keep your account, open Menu and tap Delete my Grow data beside Delete Account when Grow is available, or ask us. It deletes, from our live systems right away, your practice history and notes, limited use and share-action records, reflections, goals and their check-ins, Happiness Program progress, saved check-ins, self-check answers and ratings, hold times, Grow reminders, favorites and affirmation choices, safety-screen dates, saving choices (both switches are off again) and Self-kindness Kind Acts. It keeps your account and what it still needs: your Grow membership and free-pass records (the store keeps billing a membership until you cancel it there), your age-range result and the records that go with it, which protect your whole account, your daily journal and Kind Act reminders and any pause on your reminders, and, if you asked us to stop collecting, the record of that request. Deleting your Kind Act account (Menu → Delete Account) deletes your Grow records from our live systems right away, except that a record of each notice Apple or Google sent us stays, with its link to you removed and its contents erased, so the same notice is never processed twice, and a used single-use pass code stays marked as used without saying who used it. Copies in our backups are removed as those backups expire.
• Make a request: email support@kindact.app (from the address on your Kind Act account, if you have one) with “Consumer health data request” in the subject line, and tell us what you would like. We may ask for more information to confirm it's you, but you never need to create an account to make a request. Requests are free. We respond within 45 days; if we need up to 45 more days, we tell you why within the first 45. We complete a deletion within 30 days of confirming your request, and we tell the service providers and third parties that received the data to delete it too.
• Appeal: if we decline your request, reply to our decision or email support@kindact.app with “Appeal” in the subject line. Within 45 days we will tell you in writing what we did and why. If we deny your appeal, we will tell you how to submit a complaint to your state's Attorney General.

6. Tracking by Other Companies

No other company collects your Grow data over time or across other websites or apps when you use Grow. Grow's screens in the app use no third-party analytics or advertising tools, and neither does our free-pass page.

7. Changes to This Policy

If we change this policy in a material way, we will post the new version here with a new effective date and tell you in the app or by email before the change applies. We will not collect, use or share consumer health data in a way this policy does not describe without telling you first and getting your consent.

8. Contact Us

Questions about this policy or your consumer health data: support@kindact.app

Kind Act LLC
Website: kindact.app