Consumer Health Data Privacy Policy

Last updated: 11th September 2026

This policy is published by Flarelight App under the Washington My Health My Data Act and equivalent laws. It describes how we handle consumer health data. Our general privacy practices are described separately in our Privacy Notice and App Privacy Policy.

Categories of consumer health data we collect

Through the Flarelight app: none. Entries you make in the app — check-ins, flares, symptoms, rashes, photographs, medications, appointments and notes — are stored only on your device. We do not receive them and cannot access them.

Through our website and email list: your email address, and the fact that you asked to hear about an app for people with lupus and similar conditions. That fact may itself indicate a health condition, and we treat it as consumer health data.

If you contact us: any health information you choose to include in a message to us.

Sources

All of the above is collected directly from you. We do not obtain consumer health data from data brokers, advertising networks, public records or any other third party.

Purposes of collection and use

We use your email address to send you updates about Flarelight, to invite you to testing, and to respond to you. We use information in support messages to answer them.

We do not use consumer health data for advertising, profiling or automated decision-making.

Categories of consumer health data we share, and with whom

We share your email address with hello@flarelight.app for the sole purpose of sending you the emails you asked for, and with Netlify and Tally to the extent it is held on our website and form infrastructure. These providers are contractually restricted to processing it on our instructions.

We do not share consumer health data with advertising networks, analytics providers or data brokers. We do not use advertising pixels, advertising SDKs or cross-site tracking technologies.

Sale of consumer health data

We do not sell consumer health data and have never done so.

Your rights

You have the right to:

• confirm whether we hold consumer health data about you
• access it, including a list of everyone we have shared it with
• withdraw your consent to our collection and sharing of it
• have it deleted

If you ask us to delete it, we will delete it from our records and notify any provider we shared it with to do the same.

To exercise any of these rights, contact hello@flarelight.app We will respond within 45 days. If we need more time we will tell you why, and we may take up to 45 further days.

If we refuse a request we will explain why and how to appeal. If we refuse your appeal, we will tell you how to complain to the Washington Attorney General at atg.wa.gov.

Contact

Flarelight, 124 City Road, London, EC1V 2NX Contact: hello@flarelight.app