Consumer Health Data Privacy Policy
Last updated October 25, 2026
Some states, including Washington, Nevada and Connecticut, protect "consumer health data": information linked to you that identifies your past, present or future physical or mental health. This policy explains how [Clary's legal name] ("Clary," "we," "us") collects, uses and shares that kind of information, and how you can control yours. It adds to our Privacy Policy.
The short version
- Clary collects private health data. Today, that's the topic you choose when you pick a flower.
- We never sell it.
- We use it only for purposes you explicitly agree to, and we ask separately for each one. Right now there's one: choosing the news and perks we show you.
- We never share it with advertisers or give it to the services that send our emails and texts.
- You can see it, delete it or withdraw your consent anytime.
What we collect
The health topic you choose. When you join, you can pick a flower. Each one stands for a topic: perimenopause, menopause, mental health and sleep, PCOS, thyroid and metabolism, pregnancy and postpartum, periods and cycles, fertility, endometriosis, or skin and hormones. We store your choice with your email address and mobile number. Picking a flower is optional, and we store it only after you agree by tapping "Agree and add my flower."
Technical logs that could reveal it. Each flower has its own picture. When your browser loads yours, our hosting provider's logs record that request along with your IP address. We don't use these logs to learn your topic, and they're deleted automatically within 30 days.
On your device. Your browser keeps your flower in session storage so our welcome page can show it. It isn't sent to us from there, and it's erased when you close the tab.
Where it comes from
From you, when you pick a flower, and from your browser, when it loads our site.
How we use it, and how we ask
We use your health data only for purposes you've explicitly agreed to. Before each new use, we'll tell you what it is and ask you separately. Agreeing to one use never means agreeing to another, and you can always say no.
So far there's one: choosing the health news and perks we show you. You agree to it when you tap "Agree and add my flower." We keep a record of each consent you give.
We never use it for advertising or to decide whether you can be a member. The only time we'd disclose it without your consent is when a law or court order requires it, as explained below.
Who we share it with
We don't sell consumer health data, and we don't share it with third parties or affiliates. Only these service providers handle it, on our behalf and following our instructions:
- Vercel, which hosts our website and server, including the technical logs above.
- Supabase, which hosts our database.
We never give it to advertisers, data brokers, perk brands, or the services that send our emails and texts. If a law or court order requires us to disclose it, we'll disclose only what's required and, where we're allowed, tell you first.
Your rights
You have the right to:
- Know whether we collect, share or sell your consumer health data. (We never sell it.)
- See it, along with a list of every third party and affiliate we've shared it with and how to contact them.
- Delete it, including copies kept by our service providers and in our backups.
- Withdraw your consent anytime. We'll stop using your topic and delete it.
- Be treated the same whether or not you use these rights.
To use them, email privacy@getclary.org from the email address you joined with, or tell us the mobile number you joined with. We may confirm the request by email or text first, so no one else can see or delete your data. We'll answer within 45 days, or tell you within that time why we need up to 45 more. It's free.
When we delete your health data, we delete it from our systems and tell our service providers to delete it within 45 days. Copies in our backups are deleted as the backups roll over, within 30 days after that.
Appeals
If we turn down your request, you can appeal by replying to our answer with the word "appeal." We'll respond in writing within 45 days and explain what we did and why. If we deny your appeal, you can file a complaint with your state attorney general. In Washington, use the Attorney General's complaint form.
About HIPAA
HIPAA is the federal health privacy law for health plans and most medical providers. It doesn't apply to Clary, because Clary isn't one of the organizations it covers. This policy and the state health privacy laws it follows are what protect your health data.
Changes to this policy
Before we collect a new kind of health data, or use or share it in a new way, we'll ask for your consent. Whenever this policy changes, we'll update the date at the top.
Contact us
Email privacy@getclary.org, or write to [Clary's legal name], [mailing address].