FluxTribe Consumer Health Data Privacy Policy
This policy describes how FluxTribe, operated by Echotropy LLC ("we," "us"), collects, uses, and shares consumer health data. It supplements our Privacy Policy and is written to meet the Washington My Health My Data Act, the Nevada Consumer Health Data Privacy Law (SB 370), and Connecticut's consumer health data provisions. It applies to all users of the FluxTribe app in the United States.
1. Consumer health data we collect, and why
| Category | Examples | Purpose |
|---|---|---|
| Medication information | Your medication plan (medication name, schedule, dose), each injection record (medication, dose, injection site, date and time), and medication reminders | To store, display, and chart your records and deliver the reminders you set |
| Body measurements | Weight and body-fat entries, whether typed in or read from Apple Health with your permission | To show your weight curve alongside your medication timeline |
| Side-effect notes | Symptoms and notes you record | To keep your log complete for your own reference |
| Health information in content you publish | Anything health-related you choose to include in posts or comments | To publish that content to the community feed, at your direction |
We collect this data to provide the App's core features to you. We do not use it for advertising, do not sell it, and do not use it to build advertising profiles.
2. Sources of consumer health data
- You, when you enter records in the App;
- Apple Health, only if you grant read permission (weight and body fat only; we never write to Apple Health);
- Content you choose to publish in the community.
3. Consumer health data we share
We do not sell consumer health data, and we do not share it with third parties for marketing or advertising.
Consumer health data is processed by service providers acting on our behalf:
- Cloudflare, Inc. — stores all service data (database and media storage) and runs the automated moderation model that checks the text of posts and comments before publication.
RevenueCat, Inc. receives only subscription and purchase information and, if you installed through one of our Apple Ads ads, which of our ad campaigns and keywords led to the install; it receives no health records. Apple Inc. provides sign-in, purchases, on-device Apple Health access, and push delivery. With notification permission, Apple receives a device token and duel nudge text containing the nudging opponent’s nickname and the requested metric (weight or waist), but no measurement values. Injection-day reminders are scheduled locally on your device; their medication, dose, date, and injection site are not sent through APNs.
Product analytics. We use an analytics service, PostHog Inc. (United States), to count how the App's features are used. PostHog receives the fact that an action happened — an injection was logged, a weight entry was saved, a side effect was recorded — together with your internal account identifier, technical details about your device and the App (such as device model, software versions, language and time zone settings), and your IP address. It never receives the content of your health records: no medication name, dose, injection site, measurement value, symptom, or note, and no text or images from anything you publish. The one exception is the medication safety screening: if an answer stops you from creating a medication plan, PostHog receives which screening question it was (for example, pregnancy or a history of pancreatitis). That event is sent without your account identifier, and we do not link it to your account or to your other events; we use it only to count how often each question turns people away. If the App crashes, PostHog also receives a crash report describing where the App's code failed; it contains no health records. We do not use these events for advertising, do not sell them, and do not combine them with data about you from other companies. You can turn these events off at any time in Settings → Usage analytics. While that switch is off, the App sends nothing to PostHog.
Content you publish to the community feed — including any health information you include in it — is visible to other users. That disclosure happens at your direction, when you tap publish.
We have no affiliates with whom we share consumer health data.
4. Your rights
You may, at any time:
- Access your consumer health data — it is all visible in the App; you may also email us for a copy, including the list of third parties (above) with which it has been shared;
- Withdraw consent — revoke Apple Health access in iOS Settings, stop entering records, or stop using optional features;
- Delete — delete any individual record in the App, or delete your account and all associated data in Settings → Account. We will also instruct our service providers to delete it.
To exercise a right, use the App or email support@fluxtribe.net. We will respond within the time required by applicable law (45 days in most cases). If we decline a request, we will explain why; you may appeal by replying with "Appeal," and a different team member will review the decision. If your appeal is unsuccessful, you may contact the Attorney General of your state.
5. Geofencing
We do not use geofencing of any kind, including around health care facilities.
6. Changes and contact
Changes to this policy will be posted here with an updated version and date; material changes will be announced in the App.
Echotropy LLC
Email: support@fluxtribe.net