Consumer Health Data Privacy Policy

1. Who this is for

This notice is for residents of Washington and Nevada, and it is published to meet Washington's My Health My Data Act and Nevada's consumer health data law. It sits alongside our main Privacy Policy, which covers everything else and applies to everyone.

ALLiN is operated by ALLIN ASSISTANCE LLC, 16400 Collins Ave, Sunny Isles Beach, FL 33160. We are the regulated entity for the data described here. We do not have affiliates, so no affiliate receives your consumer health data.

ALLiN is a self help app for people quitting gambling. It is not a healthcare provider, and it is not covered by HIPAA.

2. The health data we collect

These are the categories of consumer health data ALLiN collects:

• Information about a behavioural health condition. Your answers about how often you gambled, how long, whether you found it hard to stop, whether you chased losses, and whether you gambled to cope with stress, boredom, or emotional pain.
• Symptoms. The symptoms you select at setup and in later check ins, which include anxiety, guilt or shame, restlessness, feeling unable to stop, and financial and relationship strain.
• A score we calculate. A dependency score derived from your answers. It is an estimate produced by software, not a diagnosis.
• Self reported measurements over time. Urge intensity ratings, urge triggers, whether you resisted, mood and craving ratings, recorded slips, and your streak and pledge history.
• Health related free text. Journal entries, your written reasons for quitting, and notes attached to a slip. These are whatever you choose to write, so they can contain anything you decide to tell the app.
• Efforts to obtain health services. The fact that you use a recovery app at all, and any recovery goals you set.

We do not collect precise location data as consumer health data. The places you save in the location blocker stay on your phone and never reach us, which is explained in section 3.4 of the Privacy Policy.

3. Where it comes from

There is one source: you. Every piece of consumer health data listed above is something you typed, tapped, or selected inside the app. We do not buy health data, we do not receive it from data brokers, advertising networks, or other apps, and we do not infer it from anything outside ALLiN.

4. What we use it for

We use it to run the app for you, and for nothing else. Specifically:

• To show you your own progress, streak, statistics, and history.
• To tailor what the app shows you, such as your plan, your reminders, and your check ins.
• To back it up so that you can restore it on a new phone, if you have an account.
• To keep the service working and secure, and to answer you if you contact support.

If you never create an account, this data stays on your device and we never receive it at all.

5. What is shared, and with whom

We share consumer health data with one category of third party, and only so the app can function:

• Cloud infrastructure provider (Supabase). It stores your backed up data and runs our database and authentication. It processes the data only on our instructions and may not use it for its own purposes. The categories shared are all of those listed in section 2, and only when you have an account.

That is the complete list. No advertiser, analytics provider, data broker, insurer, employer, or marketing partner receives any of it. We share no consumer health data with any affiliate, because we have none.

We may also disclose it if we are legally compelled to, or where it is necessary to protect someone from a credible risk of serious harm, as described in section 10 of the Privacy Policy.

6. What we never do with it

• We do not sell it. We have never sold consumer health data and we will not, so we never seek the valid authorisation a sale would require.
• We do not use it for advertising or marketing, and there is no advertising software in the app.
• We do not use it to train machine learning models.
• We do not use it to build a profile of you for any purpose other than showing you your own progress.
• We do not use geofencing around any health care facility, and we do not use location to infer anything about your health.

7. Your rights

If you are a Washington or Nevada resident, you have the right to:

• Confirm whether we hold consumer health data about you, and access it.
• Obtain a list of all third parties with whom we have shared your consumer health data, including how to contact each of them.
• Withdraw consent to our collection and sharing of it.
• Have it deleted, including from our archived and backup systems.
• Not be discriminated against for exercising any of these rights. Using them costs you nothing and changes nothing about your access to the app.

8. How to use those rights

You can do the two biggest ones yourself, immediately, without asking us:

• Delete everything we hold. In the app, go to Settings, then Account, then Delete account. This removes your synced health data from our servers.
• Withdraw consent and stop any further collection. Delete your account, or simply do not create one. Without an account, nothing leaves your phone.

For anything else, including a copy of your data or the list of third parties, email admin@allinquit.com with "Consumer health data request" in the subject line. We will respond within 45 days. If we need more time we may take one further 45 days, and we will tell you why before the first period ends. We may ask you to confirm you are the account holder, which normally means writing from the email address on the account.

If we deny your request, we will tell you why and how to appeal. You can appeal by replying to that decision or by emailing us with "Appeal" in the subject line, and we will respond in writing within 45 days. If we deny the appeal, you may complain to the Washington State Attorney General, or to the Nevada Attorney General if you are a Nevada resident. You can contact them whether or not you appeal to us first.

9. Contact

• Email: admin@allinquit.com
• Or reach us through the Support page.

Regulated entity: ALLIN ASSISTANCE LLC, 16400 Collins Ave, Sunny Isles Beach, FL 33160.