Consumer Health Data Privacy Policy

Cloudflare: Cloudflare does not retain consumer health data. No deletion action is required.
Apex server-side: Apex Development Studio LLC stores no consumer health data on any server it controls. No server-side deletion is required.

5.4 Right to Withdraw Consent

You have the right to withdraw consent to the collection or sharing of your consumer health data at any time:

HealthKit data collection: Revoke Journey Tracker's HealthKit access at any time through iOS Settings → Privacy & Security → Health → Journey Tracker. This immediately stops all HealthKit data collection.

Withdrawal of consent is always prospective. Revoking HealthKit access immediately stops future data collection. It does not retroactively delete data that was previously collected with your consent.

5.5 Private Right of Action

The My Health My Data Act provides a private right of action for violations of its provisions (RCW 19.373.040). If you believe your rights under MHMDA have been violated, you may bring a claim as provided under the statute.

6. Consent

Journey Tracker collects consumer health data only with your affirmative consent. We do not collect health data passively or without your knowledge.

6.1 HealthKit Data

HealthKit data is collected only after you grant permission through Apple's native HealthKit authorization dialog. This dialog clearly describes the specific data types Journey Tracker requests access to. Granting permission through this dialog constitutes your consent to the collection of consumer health data for the purposes described in this policy.

6.3 Consent Standards

All consent obtained by Journey Tracker is:

Freely given — you are not required to consent to use the core features of the app
Specific — each consent request identifies the exact data and purpose
Informed — you are told what data is collected, why, and who receives it
Opt-in — no consumer health data is collected or shared by default
Voluntary — declining consent does not prevent you from using Journey Tracker's core features
Unambiguous — consent requires an affirmative action (granting a permission or tapping a consent button)

These consent standards meet or exceed the requirements of RCW 19.373.020.

7. Contact

To exercise your rights under this policy or Washington's My Health My Data Act, or to ask questions about how your consumer health data is handled:

Email: support@journeytracker.app (subject line: "Health Data Privacy Request")
Website: journeytracker.app/support
Company: Apex Development Studio LLC

We will respond to all requests within the timeframes required by applicable law.