Skip to main content

Consumer Health Data Privacy Policy

Effective Date: September 2026

This policy covers consumer health data as defined by the Washington My Health My Data Act, and applies equally to residents of Nevada and Connecticut, whose laws require similar disclosures. It is maintained by SJB Digital Ventures LLC, doing business as MS Buddy, and is separate from our general Privacy Policy.

Categories of consumer health data we collect

  • Symptoms you log, including type, body location, severity and duration
  • Triggers you log
  • Relapses and flares, including start dates and your own description
  • Notes you write on your entries
  • Sleep, sleep quality, stress, fatigue and energy entries
  • Mobility entries, including falls, balance and walking aids
  • Bladder and bowel entries
  • Cognition entries
  • Heat sensitivity entries
  • Food, drink and weight entries, and diet goals
  • Reminders you create, which may include appointment details, a clinician’s name, medication names, dosages, and MRI or lab dates
  • Questions you prepare for your care team
  • Words you type into symptom search, and what you tap in the results (never kept for a search that showed crisis or emergency information)
  • Measurements imported from Apple Health, Android Health Connect or Google Health, if you authorise that, for example steps, heart rate, heart rate variability, sleep, body temperature, blood pressure, oxygen saturation, respiratory rate, weight and walking measures
  • From Google Health, if you connect it: ECG readings, irregular heart rhythm notifications, food you log, the location recorded with a workout, and your Google Health profile and settings

Purpose of collection, and how we use it

We collect this data only to run the tracking features you asked for. That means storing what you record, showing it back to you as history and charts, and assembling the report you can send to yourself before an appointment. What you type into symptom search is used only to improve that search, so it recognises the words people use. We do not use consumer health data for advertising or marketing.

Sources of consumer health data

  • You, when you type or select entries in the app
  • Apple Health or Android Health Connect on your own device, if you grant permission. You can withdraw that permission at any time in your device settings
  • Google, if you connect a Fitbit or Pixel account through Google Health. You can disconnect it at any time in the app

Categories of consumer health data that are shared

We do not sell consumer health data, and we do not share it with anyone for advertising or marketing. It is shared only with the service providers who operate the app on our behalf, and only to the extent needed to run it.

Categories of third parties who receive it

  • Cloud hosting and database providers, which store all app data
  • Email delivery providers, which deliver the reports and data exports you request, which contain the entries covered by this policy
  • Push notification providers, which receive a device token and the text of a notification. For a reminder, that is the title and note you wrote for it. Your symptom and tracker entries are never included
  • AI text-processing providers, which receive only the meal description you type into the food logger’s “Create with AI” box, when you use that feature. No other entry is sent

You can ask us at any time for the named companies behind these categories, and how to contact them, using either route under Your rights below.

Affiliates who receive it

None. We have no affiliates and share no consumer health data with any.

Your rights, and how to exercise them

You have four rights over this data.

  • Confirm whether we are collecting your consumer health data, and access it
  • Get a list of all third parties and affiliates with whom we have shared it, and a way to contact them
  • Withdraw your consent to our collection and sharing of it
  • Have it deleted

There are two ways to make a request.

We will confirm your identity using the email address on your account, and we will never ask you to create an account to make a request. We respond within 45 days. If a request is complex we may take a further 45 days, and we will tell you within the first 45 if that happens.

Deleting your account in the app removes your name, email, login and the other details listed in our Privacy Policy, and the account can no longer be signed into. Your entries are kept, no longer linked to you. To have your health data erased as well, email support@mymsbuddy.com. We erase it from our live systems, tell the service providers who hold it, and backup copies are overwritten on our database provider’s normal schedule.

If we refuse a request, you may appeal by replying to our decision, or by writing to support@mymsbuddy.com with the word “appeal” in the subject line. We will respond to an appeal within 45 days and explain our reasoning. If we deny the appeal, you may complain to the Washington State Attorney General at atg.wa.gov/file-complaint, or to the attorney general of your own state.